last executing test programs: 5.47809387s ago: executing program 1 (id=435): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300020f0000000000000000000000010009000000d443c0010600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000009000000002a05000500000000000a00000000000000000000000000000000000000000000000100000000000000414da6ceff2a9aca8712e39f9dd238056bd1088d50be9213356685e1174e0c742798a0a6cc4821e12a3197d68994c0a9d1d4a435fdbdf7a7355b2201db8db77195d955540b17bc65361100e634ed78fabe7f9365af02b502ebd8f13884a775e9d96a1768bc9446ab5ff6c2a0bc22a1115e06"], 0x78}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) 4.849847831s ago: executing program 0 (id=440): openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xa8b, 0x0, 0xb3}]}) r3 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') readlinkat(r4, 0x0, &(0x7f0000010980)=""/204, 0xcc) unshare(0x20000) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x2a}) 4.736709573s ago: executing program 0 (id=441): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.334875478s ago: executing program 1 (id=444): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="291896d59dcf5666c590afcbbaa9ca09e4757253c96b4fa2fd892be01c5316f3d86fb6a5a329f955e9476f385bcb85135820073b41d0203362abd2413ecb2527b1d563f51e9130", @ANYBLOB="f32bfb1762a1512aa83e12e22840799e77662c173e127ae9e8e4e192d671baf592c881ad65df8c33b2dba28b0489acd083e6f39dad3fdc40f0b64246103978efeb18e61b38d44af7e807e736006e6258b1593295cc93cd6919955d0b67af22327b88857bfbaca586609da20bb245caef2631d057b0d086b21d7123bbe695cd2f5279deefcfb75a4bd9af8f36e30674fb65c00575ba3a1b5d403f437d273229997d714efdc8fb4262584a2c60bc4528ae0f2c4a1b", @ANYRESOCT=r0], 0x14}}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3.421526567s ago: executing program 0 (id=445): syz_usb_connect$midi(0x6, 0x2b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)=@caif, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="9b7336c9ce14ec9387cd956a552f0c96b62a0f9503dd538ce1edc90c896ed6dac594540913567618a22ec968b693e52a2706a0f92211549f73e93d9056bba0817aa47573f3402c2c5ccfe94125ebcfa048f8f3a2996134150b51a1e3cc7dfadf3cdfe4b985fa1762f4a1350c8254cf5ac8d5ad34db08e8b7a44690568ae1f0f0dfe3b3d77e3762e7721779a8af517658f938fe204f49816b48429cd4b0d1d7778f9dc96937dda6677550e5c64efd74d7743de7652fa713c80a4692cdf12299aab8c7a6bb9d317fcb0eabcb96c1", 0xcd}, {&(0x7f0000000280)="ee9911f0c87e5452da03586b97e4151ab917e10d80c702dd27e01e4663299cd74887367221644e88a3e3ec8a0b802519c49d2a1ae4ea8b580bb649652a955b5aa029b2e4bad148546e63d2385f6ee1a1ae432f1c992cc7937522e890e56b5b66903e0b2b6546574a8cca5654d8a3b4b90f0c5ad2ca644dfb4c50b6f45a2a5c6423c94158d8c8fd6f0e360f7b258ce0f2699dacbf038c62e8ee5aeb1a626925660309238db52b7bcbf9d979f9e5cc6b9cf7e603b458fd", 0xb6}, {&(0x7f0000000340)="d763fe1f37354fb2a58c44068044dfd61c779bf9533aaf09c128e035053f6e240e600a4628e57f91ff7e0154f042acf052db1c9356f91fdefc53012981de77efb42171cbb77411c611dcdf48be24cb20884167774f2566d359d75db786be4331a033c828bfb06f", 0x67}], 0x3}}, {{&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="16596989ac25e9a5ea1fd8d3e2ced00a7e1b22014ba36d326b8dec5afb941d94b0983893beb31ea9d8bbc6ca94584504ab26eb0b857fa2743d67c00503639258ddeb746dbd14fb7a2f616ab513c6e569dee3a86566ed02b82b9890c200caf66a7d14f7f7d85a920f6dc45c853ca4a065aa3223961d7932b09d571843d5b86775883843ebfb581236e32b441df9c3412f8ccbf692a297df25c5ac9de401a568b9bac0b9b0f32818808432aca1afbf5d9c86c8f383a8fc64c2416a1b4bbfc6f12d", 0xc0}, {&(0x7f0000000540)="225e76b904fc6b53", 0x8}, {&(0x7f0000000580)="5e5d7162b1c1f58c312f0a113882bd7f0bab53bca754f47ae95a17aba597e29a31f0b9eda71f", 0x26}, {&(0x7f00000005c0)="26a739f10786ce74e3990036400de3dd358e0dff924ca75acdbe8a31ddc6948b194cfde8e219759bc12c17c6dbc9f15f0b63ea59fb06c62bde9f214f262ccfa3e6272d0da1cdecc4dce9c041a423668d223b3f44e7e521a9f58279c2bcf4f4861ddf7ee90e99ff50f1ea04fc6c039008e7a3b7f19c794a3020", 0x79}, {&(0x7f0000000640)="97218b3f4de1b619cae80fdd00d48bd3d1da4c95cbdc64ea8d66be484ce0e49fd42a0783787d3a76d0e750181ad34085069ffd6aaa8a12a7e935b899c2e41625dd793581f14881a2bbd7bf3a832966bb5d2054bc674ea35209a6abe15496aea70c2c81036e2f77364d0fc71f4429dd", 0x6f}, {&(0x7f00000006c0)="f8408a2c7b2aa05a217e2ae3890c5af980beefda5b8b7bb459352b44f39db0e1c6b2af2ce7a81616e6d9bb0c7f7fc7408be43125d0baf0e427c4ee23b7aa0fda1a96b49a2a75d7973ae66778a1298deca6d1a8c988b67983472ea32dc587227f042d5b6ce6703f4101b4ed9b99305b182117f5ba583b067b64e1bf4fec036ee2de9a713cb751cbdc6909ce0d0d06471071c374749012ed3096dfe0b9386b2d4b3f341808a880ad", 0xa7}, {&(0x7f0000000780)="8826bf9759517cc0d2329c69edf0f817263855", 0x13}, {&(0x7f00000007c0)="2582b3d9e7f08996cdb9f6fd7ca6ecf3a2b595431ad4a8b42b2316d7db0efd370b44eeb5a506de607824e5b54cfdd8d6520559be66e727c20d20698dda99a3643eb8e79a7395301151f7ac0f2070a140871e0536c9602c45c3db39eb9c3900821200422187fd3a3b11f6bbf4387745ad4588f419473268dd071361fc15a2de3ef98fe09d7906091642843550d479a09b0c49a0c6d3ad3257a2e63a2420f61e07d500e8536e1f9813b438e791d5e425f4f92bd4955eeef60db6e54eedd1d93d3ef557a503b9ea87aed632a04a80cac9026df7e66f259a6b41782b36e6d3e8cf38707c265fcd8b18b45c", 0xe9}, {&(0x7f00000008c0)='\b_', 0x2}], 0x9, &(0x7f0000000980)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @mark={{0x10, 0x1, 0x24, 0xb}}, @txtime={{0x14, 0x1, 0x3d, 0x88f}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}], 0x94}}], 0x2, 0x4001) r1 = socket$inet6(0xa, 0x2, 0x0) openat$null(0xffffff9c, &(0x7f0000000ec0), 0x4000c0, 0x0) r2 = syz_io_uring_setup(0x7d99, &(0x7f00000001c0)={0x0, 0xf276, 0x20, 0x2, 0x372}, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)) syz_ublk_setup_io_uring(0x43aa, &(0x7f0000000b40)={0x0, 0x930d, 0x100, 0x2, 0xc}, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00), &(0x7f0000000c40)) syz_io_uring_setup(0x5696, &(0x7f0000000c80)={0x0, 0x3469, 0x100, 0x0, 0x3c3}, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)=0x0) r5 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3201, 0x3, 0x19a}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r9 = io_uring_setup(0x4d8d, &(0x7f00000000c0)={0x0, 0x79cb, 0x80000, 0x2, 0x292, 0x0, r5}) r10 = openat$hpet(0xffffff9c, &(0x7f00000001c0), 0x141400, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x5, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x2, 0x377, 0x0, 0x0, 0x1000, 0xffffffff, r12, 0x0, 0x73}}}, &(0x7f0000000400)) r13 = getpid() sched_setaffinity(r13, 0x8, &(0x7f0000000240)=0x2) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f0000000e00)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000dc0)=@new_dev={0x2, 0x333, 0x0, 0x0, 0x1000, 0xffffffff, r13, 0x0, 0x80}}}, &(0x7f0000000e80)) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3.327868178s ago: executing program 1 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 3.320337394s ago: executing program 3 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 3.135243868s ago: executing program 2 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x282182, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d", 0x18}], 0x2) 1.967803806s ago: executing program 2 (id=449): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r7, 0x0) close_range(r5, r0, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r10, r11+60000000}) 1.826522445s ago: executing program 2 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f0000000240)=0x4) 1.498277856s ago: executing program 3 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4) timer_create(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040054) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.489212059s ago: executing program 1 (id=452): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300020f0000000000000000000000010009000000d443c0010600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000009000000002a05000500000000000a00000000000000000000000000000000000000000000000100000000000000414da6ceff2a9aca8712e39f9dd238056bd1088d50be9213356685e1174e0c742798a0a6cc4821e12a3197d68994c0a9d1d4a435fdbdf7a7355b2201db8db77195d955540b17bc65361100e634ed78fabe7f9365af02b502ebd8f13884a775e9d96a1768bc9446ab5ff6c2a0bc22a1115e06"], 0x78}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) 1.194303301s ago: executing program 3 (id=453): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 796.284916ms ago: executing program 2 (id=454): r0 = socket(0x11, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$BLKTRACESETUP(r2, 0x6804, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r4, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0xffe8}, {&(0x7f0000000200)="196c1bbe3c41ecf05b54c31f1e6a2551420ab3013dd702ec495c0bfbd8ac8ef469e7572b2d095b058a7f507671866fab41ac2a16307564896c746f56e71eaf61a10ea7fdccbf0a1210224a8aeaea5aaa0c648b2d50c8bf7ac2e35c7729b92558cc004dc3ed47f68684744d37e730203bf8761b854ae199f8b4eb417bb82cd1275364f09409bf808c915e2a3134560a9392d12aae346afde7bb45229beecc4043208a81f0845ca339ffcb92f03d4f94f5517ae44fd61986970ff2e5235c1e5054481b3925ef17b88087ff76", 0x5}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x71}], 0x4}, 0x40011) 625.561032ms ago: executing program 2 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000240)=0x4) 544.247431ms ago: executing program 1 (id=456): mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) 427.014034ms ago: executing program 1 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 347.253876ms ago: executing program 2 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 257.574612ms ago: executing program 0 (id=459): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r7, 0x0) close_range(r5, r0, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r10, r11+60000000}) 142.543921ms ago: executing program 3 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000040) 128.790883ms ago: executing program 0 (id=461): openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xa8b, 0x0, 0xb3}]}) r3 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) unshare(0x20000) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x2a}) 124.851747ms ago: executing program 3 (id=462): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.022652ms ago: executing program 0 (id=463): r0 = socket(0x11, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$BLKTRACESETUP(r2, 0x6804, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r4, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0xffe8}, {&(0x7f0000000200)="196c1bbe3c41ecf05b54c31f1e6a2551420ab3013dd702ec495c0bfbd8ac8ef469e7572b2d095b058a7f507671866fab41ac2a16307564896c746f56e71eaf61a10ea7fdccbf0a1210224a8aeaea5aaa0c648b2d50c8bf7ac2e35c7729b92558cc004dc3ed47f68684744d37e730203bf8761b854ae199f8b4eb417bb82cd1275364f09409bf808c915e2a3134560a9392d12aae346afde7bb45229beecc4043208a81f0845ca339ffcb92f03d4f94f5517ae44fd61986970ff2e5235c1e5054481b3925ef17b88087ff76", 0x5}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x71}], 0x4}, 0x40011) 0s ago: executing program 3 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19423' (ED25519) to the list of known hosts. [ 61.236334][ T5735] cgroup: Unknown subsys name 'net' [ 61.370610][ T5735] cgroup: Unknown subsys name 'cpuset' [ 61.374636][ T5735] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.402767][ T5735] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.085545][ T5761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.087548][ T5763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.088169][ T5761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.090765][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.090973][ T5763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.091344][ T5763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.092368][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.093535][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.093880][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.094398][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.094818][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.096645][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.102206][ T5765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.102908][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.103454][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.105682][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.109484][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.118066][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.122636][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.125326][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.901499][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.904356][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.906661][ T5747] bridge_slave_0: entered allmulticast mode [ 67.909440][ T5747] bridge_slave_0: entered promiscuous mode [ 67.926890][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.929249][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.931458][ T5748] bridge_slave_0: entered allmulticast mode [ 67.934060][ T5748] bridge_slave_0: entered promiscuous mode [ 67.937493][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.940420][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.943072][ T5748] bridge_slave_1: entered allmulticast mode [ 67.946071][ T5748] bridge_slave_1: entered promiscuous mode [ 67.948711][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.951706][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.954713][ T5747] bridge_slave_1: entered allmulticast mode [ 67.958934][ T5747] bridge_slave_1: entered promiscuous mode [ 68.012252][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.014467][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.016717][ T5750] bridge_slave_0: entered allmulticast mode [ 68.020626][ T5750] bridge_slave_0: entered promiscuous mode [ 68.059977][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.063297][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.066395][ T5750] bridge_slave_1: entered allmulticast mode [ 68.070432][ T5750] bridge_slave_1: entered promiscuous mode [ 68.073983][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.076190][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.078621][ T5749] bridge_slave_0: entered allmulticast mode [ 68.081386][ T5749] bridge_slave_0: entered promiscuous mode [ 68.086017][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.090321][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.096769][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.107292][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.111050][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.113743][ T5749] bridge_slave_1: entered allmulticast mode [ 68.116664][ T5749] bridge_slave_1: entered promiscuous mode [ 68.137279][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.166201][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.177071][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.195879][ T5747] team0: Port device team_slave_0 added [ 68.206398][ T5748] team0: Port device team_slave_0 added [ 68.210470][ T5748] team0: Port device team_slave_1 added [ 68.214326][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.218954][ T5747] team0: Port device team_slave_1 added [ 68.233468][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.247911][ T5750] team0: Port device team_slave_0 added [ 68.261577][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.264468][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.274879][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.286365][ T5750] team0: Port device team_slave_1 added [ 68.288692][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.290808][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.299860][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.310024][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.312448][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.321320][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.335618][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.338448][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.346914][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.351689][ T5749] team0: Port device team_slave_0 added [ 68.368675][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.371287][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.379766][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.390432][ T5749] team0: Port device team_slave_1 added [ 68.393971][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.396167][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.403901][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.440493][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.443124][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.453030][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.474425][ T5748] hsr_slave_0: entered promiscuous mode [ 68.476781][ T5748] hsr_slave_1: entered promiscuous mode [ 68.479986][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.482157][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.490091][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.503722][ T5747] hsr_slave_0: entered promiscuous mode [ 68.506295][ T5747] hsr_slave_1: entered promiscuous mode [ 68.508866][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 68.510731][ T5747] Cannot create hsr debugfs directory [ 68.533055][ T5750] hsr_slave_0: entered promiscuous mode [ 68.535375][ T5750] hsr_slave_1: entered promiscuous mode [ 68.537452][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 68.539318][ T5750] Cannot create hsr debugfs directory [ 68.601755][ T5749] hsr_slave_0: entered promiscuous mode [ 68.604295][ T5749] hsr_slave_1: entered promiscuous mode [ 68.606602][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 68.609454][ T5749] Cannot create hsr debugfs directory [ 68.910894][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.919776][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.924966][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.931967][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.934667][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.939783][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.942457][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.946915][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.999698][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.006952][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.010328][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.015901][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.022064][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.028556][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.032206][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.038724][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.112602][ T5749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.118196][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.120998][ T5749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.125947][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.139008][ T5749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.146855][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.158792][ T5753] Bluetooth: hci1: command tx timeout [ 69.168136][ T5757] Bluetooth: hci2: command tx timeout [ 69.168413][ T64] Bluetooth: hci0: command tx timeout [ 69.171063][ T5753] Bluetooth: hci3: command tx timeout [ 69.173427][ T5749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.182715][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.234828][ T5750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.240749][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.243703][ T5750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.249981][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.253709][ T5750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.260668][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.264344][ T5750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.270166][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.287603][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.322884][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.334972][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.353637][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.356973][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.378488][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.390108][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.392644][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.406349][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.408989][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.423608][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.426585][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.467162][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.479641][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.506218][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.521966][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.524720][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.531211][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.539355][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.542612][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.560860][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.563951][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.573778][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.576726][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.786043][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.804682][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.839875][ T5748] veth0_vlan: entered promiscuous mode [ 69.853567][ T5748] veth1_vlan: entered promiscuous mode [ 69.869323][ T5747] veth0_vlan: entered promiscuous mode [ 69.878670][ T5747] veth1_vlan: entered promiscuous mode [ 69.892829][ T5748] veth0_macvtap: entered promiscuous mode [ 69.900392][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.904329][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.908061][ T5748] veth1_macvtap: entered promiscuous mode [ 69.930356][ T5747] veth0_macvtap: entered promiscuous mode [ 69.935880][ T5747] veth1_macvtap: entered promiscuous mode [ 69.952616][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.958705][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.971102][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.984682][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.005348][ T5750] veth0_vlan: entered promiscuous mode [ 70.019054][ T5750] veth1_vlan: entered promiscuous mode [ 70.023667][ T5749] veth0_vlan: entered promiscuous mode [ 70.045913][ T5749] veth1_vlan: entered promiscuous mode [ 70.113666][ T5750] veth0_macvtap: entered promiscuous mode [ 70.124182][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.126877][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.132920][ T5750] veth1_macvtap: entered promiscuous mode [ 70.161403][ T5749] veth0_macvtap: entered promiscuous mode [ 70.166852][ T5749] veth1_macvtap: entered promiscuous mode [ 70.167093][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.172368][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.180960][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.186702][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.190409][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.202315][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.211689][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.214765][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.223359][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.238441][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.268934][ T5748] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.288615][ T5748] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 70.288615][ T5747] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 70.299438][ T5748] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 70.299834][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.307708][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.309539][ T5747] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 70.312058][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.338034][ T5747] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 70.343375][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.345972][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.368335][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.372620][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.397160][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.405527][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.418978][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.422074][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.429310][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.438595][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.441918][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.450693][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.478393][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.484677][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.510086][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.518952][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.524812][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.532439][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.536911][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.540496][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.543091][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.566242][ T5903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.569730][ T5903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.589886][ T5903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.614565][ T5903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.617291][ T5903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.623141][ T5903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.631940][ T5903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.634523][ T5903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.640825][ T5903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.645299][ T5903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.648922][ T5903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.653003][ T5903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.671414][ T5910] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 70.675697][ T5907] IPVS: stopping backup sync thread 5910 ... [ 70.927430][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.930945][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.146840][ T5920] Zero length message leads to an empty skb [ 72.642420][ T5753] Bluetooth: hci1: command 0x040f tx timeout [ 72.690805][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 72.694479][ T5753] Bluetooth: hci3: command 0x040f tx timeout [ 72.699689][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 72.760716][ T5939] IPVS: stopping backup sync thread 5949 ... [ 72.766035][ T5944] IPVS: stopping backup sync thread 5950 ... [ 74.287965][ T5960] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 74.293888][ T5959] IPVS: stopping backup sync thread 5960 ... [ 74.677837][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 74.759800][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 74.762334][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 74.764795][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 75.443748][ T5975] Illegal XDP return value 98 on prog (id 2) dev N/A, expect packet loss! [ 75.569858][ T5983] Bluetooth: MGMT ver 1.23 [ 75.788786][ T5981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.804995][ T5981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.826454][ T5981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.936746][ T5981] syz.0.15: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 75.946484][ T5981] CPU: 2 UID: 0 PID: 5981 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 75.946512][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.946532][ T5981] Call Trace: [ 75.946558][ T5981] [ 75.946565][ T5981] dump_stack_lvl+0x100/0x190 [ 75.946591][ T5981] warn_alloc.cold+0x94/0xa8 [ 75.946610][ T5981] ? __pfx_warn_alloc+0x10/0x10 [ 75.946639][ T5981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.946665][ T5981] ? __pfx_get_page_from_freelist+0x10/0x10 [ 75.946692][ T5981] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 75.946721][ T5981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.946745][ T5981] ? stack_trace_save+0x8e/0xc0 [ 75.946774][ T5981] ? __pfx_stack_trace_save+0x10/0x10 [ 75.946804][ T5981] ? kasan_save_track+0x14/0x30 [ 75.946824][ T5981] ? __kasan_kmalloc+0xaa/0xb0 [ 75.946840][ T5981] ? __kmalloc_noprof+0x322/0x820 [ 75.946859][ T5981] ? comedi_isadma_alloc+0xc6/0x620 [ 75.946884][ T5981] ? pcl816_attach+0x909/0xb30 [ 75.946916][ T5981] __alloc_pages_noprof+0xb/0x110 [ 75.946934][ T5981] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 75.946980][ T5981] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 75.947006][ T5981] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 75.947034][ T5981] dma_direct_alloc+0x8f/0x590 [ 75.947056][ T5981] dma_alloc_attrs+0x182/0x3a0 [ 75.947074][ T5981] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 75.947094][ T5981] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.947113][ T5981] ? dma_direct_supported+0xca/0x220 [ 75.947139][ T5981] comedi_isadma_alloc+0x331/0x620 [ 75.947158][ T5981] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 75.947176][ T5981] ? request_threaded_irq+0x27b/0x3e0 [ 75.947195][ T5981] pcl816_attach+0x909/0xb30 [ 75.947211][ T5981] comedi_device_attach+0x40e/0x6b0 [ 75.947228][ T5981] do_devconfig_ioctl+0x1b3/0x6d0 [ 75.947243][ T5981] ? comedi_unlocked_ioctl+0x180/0x3310 [ 75.947264][ T5981] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 75.947286][ T5981] ? tomoyo_path_number_perm+0x46d/0x580 [ 75.947302][ T5981] ? kasan_save_stack+0x3f/0x50 [ 75.947315][ T5981] ? kasan_save_stack+0x30/0x50 [ 75.947328][ T5981] ? kasan_save_track+0x14/0x30 [ 75.947341][ T5981] ? kasan_save_free_info+0x3b/0x70 [ 75.947354][ T5981] comedi_unlocked_ioctl+0x860/0x3310 [ 75.947376][ T5981] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.947404][ T5981] ? kasan_quarantine_put+0x104/0x240 [ 75.947417][ T5981] ? lockdep_hardirqs_on+0x78/0x100 [ 75.947432][ T5981] ? find_held_lock+0x2b/0x80 [ 75.947445][ T5981] ? tomoyo_path_number_perm+0x28f/0x580 [ 75.947459][ T5981] ? tomoyo_path_number_perm+0x28f/0x580 [ 75.947475][ T5981] ? tomoyo_path_number_perm+0x188/0x580 [ 75.947492][ T5981] comedi_compat_ioctl+0x438/0xe20 [ 75.947504][ T5981] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 75.947523][ T5981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.947541][ T5981] ? do_vfs_ioctl+0x226/0x13e0 [ 75.947558][ T5981] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.947578][ T5981] ? find_held_lock+0x2b/0x80 [ 75.947591][ T5981] ? __fget_files+0x215/0x3d0 [ 75.947601][ T5981] ? hook_file_ioctl_common+0x140/0x440 [ 75.947619][ T5981] ? __fget_files+0x21f/0x3d0 [ 75.947632][ T5981] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 75.947650][ T5981] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 75.947668][ T5981] __do_fast_syscall_32+0xe7/0x970 [ 75.947683][ T5981] ? lockdep_hardirqs_on+0x78/0x100 [ 75.947698][ T5981] do_fast_syscall_32+0x32/0x70 [ 75.947713][ T5981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.947728][ T5981] RIP: 0023:0xf6fcefec [ 75.947742][ T5981] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 75.947758][ T5981] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 75.947770][ T5981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 75.947777][ T5981] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.947783][ T5981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.947789][ T5981] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.947795][ T5981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.947808][ T5981] [ 76.109421][ T5981] Mem-Info: [ 76.111217][ T5981] active_anon:4693 inactive_anon:270 isolated_anon:10 [ 76.111217][ T5981] active_file:1 inactive_file:53201 isolated_file:0 [ 76.111217][ T5981] unevictable:1758 dirty:161 writeback:0 [ 76.111217][ T5981] slab_reclaimable:9569 slab_unreclaimable:50276 [ 76.111217][ T5981] mapped:23774 shmem:2219 pagetables:1099 [ 76.111217][ T5981] sec_pagetables:298 bounce:0 [ 76.111217][ T5981] kernel_misc_reclaimable:0 [ 76.111217][ T5981] free:54841 free_pcp:8 free_cma:0 [ 76.127930][ T5981] Node 0 active_anon:16kB inactive_anon:212kB active_file:4kB inactive_file:12kB unevictable:3496kB isolated(anon):40kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1440kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 76.140844][ T5981] Node 0 DMA free:2276kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 76.154708][ T5981] lowmem_reserve[]: 0 280 280 280 280 [ 76.156861][ T5981] Node 0 DMA: 25*4kB (UM) 2*8kB (UM) 1*16kB (M) 13*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2276kB [ 76.161965][ T5981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.165042][ T5981] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.168023][ T5981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.170972][ T5981] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.174315][ T5981] 55719 total pagecache pages [ 76.176324][ T5981] 301 pages in swap cache [ 76.177802][ T5981] Free swap = 117188kB [ 76.179487][ T5981] Total swap = 124996kB [ 76.181193][ T5981] 524155 pages RAM [ 76.182546][ T5981] 0 pages HighMem/MovableOnly [ 76.184296][ T5981] 211540 pages reserved [ 76.185980][ T5981] 0 pages cma reserved [ 76.424144][ T6000] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 76.457234][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 76.520190][ T6004] i2c i2c-0: delete_device: Can't find device in list [ 76.579122][ T6006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.587005][ T6006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.590095][ T6006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.847761][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 76.850272][ T6027] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 76.850443][ T6021] IPVS: stopping backup sync thread 6027 ... [ 76.850672][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.919164][ T6030] overlayfs: failed to resolve './file1': -2 [ 76.926590][ T6030] netlink: 156 bytes leftover after parsing attributes in process `syz.2.24'. [ 78.301379][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 78.597780][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 78.597864][ T5753] Bluetooth: hci1: command 0x040f tx timeout [ 78.602586][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 78.732275][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 78.917818][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 79.278410][ T6062] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 79.278892][ T6063] IPVS: stopping backup sync thread 6062 ... [ 79.522092][ T6067] loop5: detected capacity change from 0 to 7 [ 79.548250][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.552196][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.569498][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.573591][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.593260][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.597411][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.604174][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.608164][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.613306][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.620653][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.625346][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.629483][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.633842][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.637499][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.641375][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.644673][ T6067] ldm_validate_partition_table(): Disk read failed. [ 79.651808][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.655050][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.658611][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.661858][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.665090][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.668214][ T6067] Dev loop5: unable to read RDB block 0 [ 79.672073][ T6067] loop5: unable to read partition table [ 79.674943][ T6067] loop5: partition table beyond EOD, truncated [ 79.692038][ T6067] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 79.900200][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 80.351825][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 80.693916][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 80.694081][ T5757] Bluetooth: hci1: command 0x040f tx timeout [ 80.695925][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 81.016644][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 81.605487][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.39'. [ 81.633464][ T5760] udevd[5760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 81.677256][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 82.065968][ T1357] cfg80211: failed to load regulatory.db [ 82.241750][ T6131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.287039][ T6130] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 82.290747][ T6130] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 82.317573][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.327580][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.400044][ T6131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.485204][ T6130] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 82.497743][ T5836] IPVS: starting estimator thread 0... [ 82.532035][ T6131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.587740][ T6145] IPVS: using max 43 ests per chain, 103200 per kthread [ 82.635610][ T6131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.757886][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 82.757911][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 82.758097][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 82.852544][ T6146] mmap: syz.3.43 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.079617][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 83.914997][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 84.748346][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 85.176052][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 85.250346][ T6175] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 85.255442][ T6175] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 85.261155][ T6175] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 85.280299][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.313594][ T6175] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.525521][ T5758] udevd[5758]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 85.585642][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 85.648301][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 85.648961][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 85.739326][ T6185] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 85.742858][ T6181] IPVS: stopping backup sync thread 6185 ... [ 86.149559][ T6184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.153406][ T6184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.157137][ T6184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.957791][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 87.968460][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.198888][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 88.199117][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 88.201893][ T5753] Bluetooth: hci1: command 0x040f tx timeout [ 90.143305][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.63'. [ 90.634469][ T5760] udevd[5760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 90.645135][ T6256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.647474][ T6256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.652588][ T6256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.655956][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 90.687118][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 90.692321][ T6261] warn_alloc: 2 callbacks suppressed [ 90.692337][ T6261] syz.2.64: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.700175][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 90.700200][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.700212][ T6261] Call Trace: [ 90.700218][ T6261] [ 90.700224][ T6261] dump_stack_lvl+0x100/0x190 [ 90.700270][ T6261] warn_alloc.cold+0x94/0xa8 [ 90.700308][ T6261] ? __pfx_warn_alloc+0x10/0x10 [ 90.700328][ T6261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.700346][ T6261] ? __pfx_get_page_from_freelist+0x10/0x10 [ 90.700363][ T6261] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 90.700385][ T6261] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.700401][ T6261] ? stack_trace_save+0x8e/0xc0 [ 90.700417][ T6261] ? __pfx_stack_trace_save+0x10/0x10 [ 90.700436][ T6261] ? kasan_save_track+0x14/0x30 [ 90.700450][ T6261] ? __kasan_kmalloc+0xaa/0xb0 [ 90.700463][ T6261] ? __kmalloc_noprof+0x322/0x820 [ 90.700497][ T6261] ? comedi_isadma_alloc+0xc6/0x620 [ 90.700515][ T6261] ? pcl816_attach+0x909/0xb30 [ 90.700536][ T6261] __alloc_pages_noprof+0xb/0x110 [ 90.700549][ T6261] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 90.700570][ T6261] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 90.700588][ T6261] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 90.700606][ T6261] dma_direct_alloc+0x8f/0x590 [ 90.700621][ T6261] dma_alloc_attrs+0x182/0x3a0 [ 90.700634][ T6261] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 90.700651][ T6261] comedi_isadma_alloc+0x331/0x620 [ 90.700669][ T6261] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 90.700686][ T6261] ? request_threaded_irq+0x27b/0x3e0 [ 90.700705][ T6261] pcl816_attach+0x909/0xb30 [ 90.700720][ T6261] comedi_device_attach+0x40e/0x6b0 [ 90.700736][ T6261] do_devconfig_ioctl+0x1b3/0x6d0 [ 90.700752][ T6261] ? comedi_unlocked_ioctl+0x180/0x3310 [ 90.700770][ T6261] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 90.700792][ T6261] ? tomoyo_path_number_perm+0x46d/0x580 [ 90.700807][ T6261] ? kasan_save_stack+0x3f/0x50 [ 90.700820][ T6261] ? kasan_save_stack+0x30/0x50 [ 90.700833][ T6261] ? kasan_save_track+0x14/0x30 [ 90.700845][ T6261] ? kasan_save_free_info+0x3b/0x70 [ 90.700858][ T6261] comedi_unlocked_ioctl+0x860/0x3310 [ 90.700879][ T6261] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 90.700907][ T6261] ? kasan_quarantine_put+0x104/0x240 [ 90.700932][ T6261] ? lockdep_hardirqs_on+0x78/0x100 [ 90.700947][ T6261] ? find_held_lock+0x2b/0x80 [ 90.700962][ T6261] ? tomoyo_path_number_perm+0x28f/0x580 [ 90.700977][ T6261] ? tomoyo_path_number_perm+0x28f/0x580 [ 90.700994][ T6261] ? tomoyo_path_number_perm+0x188/0x580 [ 90.701012][ T6261] comedi_compat_ioctl+0x438/0xe20 [ 90.701023][ T6261] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 90.701042][ T6261] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.701060][ T6261] ? do_vfs_ioctl+0x226/0x13e0 [ 90.701077][ T6261] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 90.701097][ T6261] ? find_held_lock+0x2b/0x80 [ 90.701110][ T6261] ? __fget_files+0x215/0x3d0 [ 90.701120][ T6261] ? hook_file_ioctl_common+0x140/0x440 [ 90.701139][ T6261] ? __fget_files+0x21f/0x3d0 [ 90.701151][ T6261] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 90.701174][ T6261] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 90.701192][ T6261] __do_fast_syscall_32+0xe7/0x970 [ 90.701208][ T6261] ? lockdep_hardirqs_on+0x78/0x100 [ 90.701223][ T6261] do_fast_syscall_32+0x32/0x70 [ 90.701238][ T6261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.701254][ T6261] RIP: 0023:0xf7f67fec [ 90.701270][ T6261] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 90.701275][ T6261] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 90.701286][ T6261] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 90.701292][ T6261] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.701299][ T6261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.701304][ T6261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.701310][ T6261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.701324][ T6261] [ 90.701500][ T6261] Mem-Info: [ 90.806451][ T6263] ref_ctr_offset mismatch. inode: 0x6b offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 90.816940][ T6261] active_anon:5326 inactive_anon:451 isolated_anon:0 [ 90.816940][ T6261] active_file:2 inactive_file:53206 isolated_file:0 [ 90.816940][ T6261] unevictable:1768 dirty:512 writeback:0 [ 90.816940][ T6261] slab_reclaimable:9624 slab_unreclaimable:50762 [ 90.816940][ T6261] mapped:23656 shmem:2219 pagetables:1090 [ 90.816940][ T6261] sec_pagetables:298 bounce:0 [ 90.816940][ T6261] kernel_misc_reclaimable:0 [ 90.816940][ T6261] free:56128 free_pcp:0 free_cma:0 [ 90.869972][ T6261] Node 0 active_anon:2056kB inactive_anon:284kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:8992kB pagetables:1388kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 90.884298][ T6261] Node 0 DMA free:2308kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.899223][ T6261] lowmem_reserve[]: 0 280 280 280 280 [ 90.901659][ T6261] Node 0 DMA: 25*4kB (UM) 2*8kB (UM) 3*16kB (UM) 13*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2308kB [ 90.908288][ T6261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.912799][ T6261] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.917175][ T6261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.923800][ T6261] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.928128][ T6261] 55936 total pagecache pages [ 90.930289][ T6261] 512 pages in swap cache [ 90.945673][ T6261] Free swap = 117076kB [ 90.949792][ T6261] Total swap = 124996kB [ 90.953862][ T6261] 524155 pages RAM [ 90.961053][ T6261] 0 pages HighMem/MovableOnly [ 90.982758][ T6261] 211540 pages reserved [ 90.984592][ T6261] 0 pages cma reserved [ 91.034420][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 91.231501][ T6277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.234084][ T6277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.236625][ T6277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.342914][ T6281] tipc: Started in network mode [ 91.346019][ T6281] tipc: Node identity 0e03348db6fc, cluster identity 4711 [ 91.349764][ T6281] tipc: Enabled bearer , priority 0 [ 91.450504][ T6281] syzkaller0: entered promiscuous mode [ 91.452792][ T6281] syzkaller0: entered allmulticast mode [ 91.455737][ T6281] tipc: Resetting bearer [ 91.486276][ T6280] tipc: Resetting bearer [ 91.987307][ T6297] overlay: Unknown parameter 'euid' [ 92.687721][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.689805][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 93.062671][ T6280] tipc: Disabling bearer [ 93.238056][ T5753] Bluetooth: hci1: command 0x040f tx timeout [ 93.240744][ T5757] Bluetooth: hci2: command 0x040f tx timeout [ 93.243358][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 93.399150][ T56] tipc: Node number set to 3103732877 [ 93.449918][ T6312] capability: warning: `syz.3.76' uses 32-bit capabilities (legacy support in use) [ 95.300412][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 95.948355][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 96.637459][ T5758] udevd[5758]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 96.702722][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 98.202353][ T6418] cgroup: release_agent respecified [ 98.277015][ T6418] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.157938][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 99.224884][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.934973][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 100.935204][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.472610][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.626976][ T6467] tipc: Started in network mode [ 101.633452][ T6467] tipc: Node identity 2291aecceb98, cluster identity 4711 [ 101.636600][ T6467] tipc: Enabled bearer , priority 0 [ 101.689216][ T6467] syzkaller0: entered promiscuous mode [ 101.699767][ T6467] syzkaller0: entered allmulticast mode [ 101.715065][ T6467] tipc: Resetting bearer [ 101.759793][ T6465] tipc: Resetting bearer [ 103.724531][ T6465] tipc: Disabling bearer [ 103.731087][ T5836] tipc: Node number set to 3372854988 [ 103.842352][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 104.024670][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 104.239926][ T6514] tipc: Started in network mode [ 104.250184][ T6514] tipc: Node identity 8a3d0076bd4a, cluster identity 4711 [ 104.262062][ T6514] tipc: Enabled bearer , priority 0 [ 104.415604][ T6516] syzkaller0: entered promiscuous mode [ 104.418147][ T6516] syzkaller0: entered allmulticast mode [ 104.421539][ T6516] tipc: Resetting bearer [ 104.498272][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.112'. [ 104.668024][ T6513] tipc: Resetting bearer [ 104.782182][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.157861][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 106.469566][ T6513] tipc: Disabling bearer [ 106.475998][ T5849] tipc: Node number set to 930545782 [ 106.584629][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 106.723558][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 107.055174][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.148242][ T6584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.153319][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 109.165047][ T42] audit: type=1800 audit(1785595291.228:2): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.127" name="UDC" dev="configfs" ino=15143 res=0 errno=0 [ 109.171210][ T6584] configfs-gadget.g1 gadget.0: HOST MAC aa:32:d9:0d:94:fd [ 109.174288][ T6584] configfs-gadget.g1 gadget.0: MAC aa:f4:a9:31:47:27 [ 109.296064][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.306624][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.428350][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.558345][ T5899] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 109.727767][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 109.751522][ T5899] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 109.755772][ T5899] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.763841][ T5899] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.767339][ T5899] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.780506][ T5899] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.786964][ T5899] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.792666][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.179290][ T5899] usb 7-1: usb_control_msg returned -32 [ 110.214293][ T5899] usbtmc 7-1:16.0: can't read capabilities [ 110.271289][ T5836] usb 5-1: Dual-Role OTG device on HNP port [ 110.619144][ T6588] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 110.639304][ T6600] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 110.828858][ T5836] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 110.837570][ T847] usb 7-1: USB disconnect, device number 2 [ 111.017871][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.297998][ T5836] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, aa:32:d9:0d:94:fd [ 112.353361][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 113.228132][ T6633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.239097][ T6633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.246691][ T6633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.909748][ T6642] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 113.914349][ T6641] IPVS: stopping backup sync thread 6642 ... [ 114.060499][ T6592] udevd[6592]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.290176][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 115.238242][ T5757] Bluetooth: hci1: command 0x040f tx timeout [ 115.240229][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 115.241158][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.317903][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 115.317907][ T5757] Bluetooth: hci2: command 0x040f tx timeout [ 115.508310][ T5849] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 115.648351][ T5849] usb 7-1: device descriptor read/64, error -71 [ 115.731144][ T6677] fuse: Unknown parameter '0x0000000000000003' [ 115.917729][ T5849] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 116.069276][ T5849] usb 7-1: device descriptor read/64, error -71 [ 116.188175][ T5849] usb usb7-port1: attempt power cycle [ 116.372856][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'. [ 116.547735][ T5849] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 116.834774][ T6714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.837526][ T6714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.840547][ T6714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.973491][ T6714] warn_alloc: 1 callbacks suppressed [ 116.973506][ T6714] syz.3.147: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.979620][ T6714] CPU: 3 UID: 0 PID: 6714 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(full) [ 116.979636][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.979643][ T6714] Call Trace: [ 116.979647][ T6714] [ 116.979652][ T6714] dump_stack_lvl+0x100/0x190 [ 116.979672][ T6714] warn_alloc.cold+0x94/0xa8 [ 116.979685][ T6714] ? __pfx_warn_alloc+0x10/0x10 [ 116.979706][ T6714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.979723][ T6714] ? __pfx_get_page_from_freelist+0x10/0x10 [ 116.979739][ T6714] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 116.979761][ T6714] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 116.979776][ T6714] ? stack_trace_save+0x8e/0xc0 [ 116.979792][ T6714] ? __pfx_stack_trace_save+0x10/0x10 [ 116.979811][ T6714] ? kasan_save_track+0x14/0x30 [ 116.979825][ T6714] ? __kasan_kmalloc+0xaa/0xb0 [ 116.979840][ T6714] ? __kmalloc_noprof+0x322/0x820 [ 116.979854][ T6714] ? comedi_isadma_alloc+0xc6/0x620 [ 116.979870][ T6714] ? pcl816_attach+0x909/0xb30 [ 116.979890][ T6714] __alloc_pages_noprof+0xb/0x110 [ 116.979902][ T6714] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 116.979922][ T6714] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 116.979939][ T6714] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 116.979957][ T6714] dma_direct_alloc+0x8f/0x590 [ 116.979972][ T6714] dma_alloc_attrs+0x182/0x3a0 [ 116.979986][ T6714] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 116.979999][ T6714] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.980012][ T6714] ? dma_direct_supported+0xca/0x220 [ 116.980029][ T6714] comedi_isadma_alloc+0x331/0x620 [ 116.980047][ T6714] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 116.980065][ T6714] ? request_threaded_irq+0x27b/0x3e0 [ 116.980084][ T6714] pcl816_attach+0x909/0xb30 [ 116.980099][ T6714] comedi_device_attach+0x40e/0x6b0 [ 116.980115][ T6714] do_devconfig_ioctl+0x1b3/0x6d0 [ 116.980131][ T6714] ? comedi_unlocked_ioctl+0x180/0x3310 [ 116.980150][ T6714] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 116.980172][ T6714] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.980188][ T6714] ? kasan_save_stack+0x3f/0x50 [ 116.980203][ T6714] ? kasan_save_stack+0x30/0x50 [ 116.980215][ T6714] ? kasan_save_track+0x14/0x30 [ 116.980228][ T6714] ? kasan_save_free_info+0x3b/0x70 [ 116.980255][ T6714] comedi_unlocked_ioctl+0x860/0x3310 [ 116.980277][ T6714] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 116.980306][ T6714] ? kasan_quarantine_put+0x104/0x240 [ 116.980319][ T6714] ? lockdep_hardirqs_on+0x78/0x100 [ 116.980334][ T6714] ? find_held_lock+0x2b/0x80 [ 116.980347][ T6714] ? tomoyo_path_number_perm+0x28f/0x580 [ 116.980383][ T6714] ? tomoyo_path_number_perm+0x28f/0x580 [ 116.980400][ T6714] ? tomoyo_path_number_perm+0x188/0x580 [ 116.980417][ T6714] comedi_compat_ioctl+0x438/0xe20 [ 116.980429][ T6714] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 116.980447][ T6714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.980465][ T6714] ? do_vfs_ioctl+0x226/0x13e0 [ 116.980481][ T6714] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.980501][ T6714] ? find_held_lock+0x2b/0x80 [ 116.980514][ T6714] ? __fget_files+0x215/0x3d0 [ 116.980525][ T6714] ? hook_file_ioctl_common+0x140/0x440 [ 116.980543][ T6714] ? __fget_files+0x21f/0x3d0 [ 116.980555][ T6714] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 116.980574][ T6714] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 116.980593][ T6714] __do_fast_syscall_32+0xe7/0x970 [ 116.980615][ T6714] ? lockdep_hardirqs_on+0x78/0x100 [ 116.980638][ T6714] do_fast_syscall_32+0x32/0x70 [ 116.980664][ T6714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.980682][ T6714] RIP: 0023:0xf7f65fec [ 116.980702][ T6714] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 116.980707][ T6714] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 116.980718][ T6714] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 116.980725][ T6714] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.980732][ T6714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.980738][ T6714] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.980744][ T6714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.980757][ T6714] [ 116.980886][ T6714] Mem-Info: [ 117.111701][ T6714] active_anon:5064 inactive_anon:524 isolated_anon:0 [ 117.111701][ T6714] active_file:1 inactive_file:53236 isolated_file:0 [ 117.111701][ T6714] unevictable:1768 dirty:377 writeback:0 [ 117.111701][ T6714] slab_reclaimable:9593 slab_unreclaimable:51349 [ 117.111701][ T6714] mapped:24042 shmem:2225 pagetables:1136 [ 117.111701][ T6714] sec_pagetables:298 bounce:0 [ 117.111701][ T6714] kernel_misc_reclaimable:0 [ 117.111701][ T6714] free:48262 free_pcp:12 free_cma:0 [ 117.126776][ T6714] Node 0 active_anon:8kB inactive_anon:72kB active_file:4kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1388kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.140746][ T6714] Node 0 DMA free:2372kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 117.152584][ T6714] lowmem_reserve[]: 0 280 280 280 280 [ 117.154889][ T6714] Node 0 DMA: 25*4kB (UM) 2*8kB (UM) 3*16kB (UM) 15*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2372kB [ 117.160719][ T6714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.164704][ T6714] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.167665][ T6714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.170627][ T6714] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.173479][ T6714] 56084 total pagecache pages [ 117.175078][ T6714] 625 pages in swap cache [ 117.176431][ T6714] Free swap = 117048kB [ 117.177931][ T6714] Total swap = 124996kB [ 117.179222][ T6714] 524155 pages RAM [ 117.180459][ T6714] 0 pages HighMem/MovableOnly [ 117.181913][ T6714] 211540 pages reserved [ 117.183216][ T6714] 0 pages cma reserved [ 117.372485][ T5849] usb 7-1: device descriptor read/8, error -71 [ 117.936038][ T6731] fuse: Unknown parameter '0x0000000000000003' [ 117.992561][ T1357] usb 5-1: USB disconnect, device number 2 [ 117.995279][ T1357] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 118.068863][ T5849] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 118.103372][ T5849] usb 7-1: device descriptor read/8, error -71 [ 118.127752][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.211988][ T5849] usb usb7-port1: unable to enumerate USB device [ 118.295384][ T5576] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 118.382560][ T6764] tipc: Enabled bearer , priority 0 [ 118.421159][ T6764] syzkaller0: entered promiscuous mode [ 118.423533][ T6764] syzkaller0: entered allmulticast mode [ 118.426583][ T6764] tipc: Resetting bearer [ 118.523284][ T6734] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.535561][ T5849] IPVS: starting estimator thread 0... [ 118.543369][ T5576] usb 8-1: unable to get BOS descriptor or descriptor too short [ 118.553539][ T5576] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 118.558748][ T5576] usb 8-1: can't read configurations, error -71 [ 118.568558][ T6763] tipc: Resetting bearer [ 118.698726][ T6773] IPVS: using max 27 ests per chain, 64800 per kthread [ 118.837806][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.842284][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 118.842869][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 118.925184][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 118.925206][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 120.279567][ T6795] fuse: Unknown parameter '0x0000000000000003' [ 120.347807][ T5899] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 120.625025][ T6802] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.728824][ T6763] tipc: Disabling bearer [ 120.752162][ T6791] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 120.754616][ T6791] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 120.786713][ T5899] usb 8-1: unable to get BOS descriptor or descriptor too short [ 120.795100][ T5899] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 120.807536][ T5899] usb 8-1: can't read configurations, error -71 [ 120.910888][ T6814] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 120.912206][ T6812] IPVS: stopping backup sync thread 6814 ... [ 121.882563][ T6834] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 121.890432][ T6834] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 122.164491][ T6840] IPVS: stopping backup sync thread 6841 ... [ 122.237734][ T5899] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 122.461403][ T6834] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.463539][ T9] IPVS: starting estimator thread 0... [ 122.560834][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 122.568244][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 122.568739][ T6850] IPVS: using max 43 ests per chain, 103200 per kthread [ 122.576781][ T5899] usb 7-1: can't read configurations, error -71 [ 122.665865][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.173'. [ 122.848143][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 123.148906][ T6865] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 123.152075][ T6865] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 123.467713][ T5899] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 123.523793][ T6872] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 123.527930][ T6868] IPVS: stopping backup sync thread 6872 ... [ 123.671424][ T6865] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.691695][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 123.699012][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 123.706699][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 123.714478][ T5899] usb 7-1: can't read configurations, error -71 [ 123.719876][ T5899] usb usb7-port1: attempt power cycle [ 124.137124][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'. [ 124.659980][ T6892] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 124.669141][ T6892] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 124.928206][ T5836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.197819][ T5576] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 125.305451][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 125.480171][ T6892] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.492561][ T6592] udevd[6592]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 125.511713][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 125.609942][ T5576] usb 7-1: unable to get BOS descriptor or descriptor too short [ 125.613377][ T5576] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 125.615608][ T5576] usb 7-1: can't read configurations, error -71 [ 125.696960][ T6908] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 125.697347][ T6907] IPVS: stopping backup sync thread 6908 ... [ 126.691828][ T6927] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 126.692884][ T6926] IPVS: stopping backup sync thread 6927 ... [ 126.734834][ T6921] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 126.743671][ T6921] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 126.947817][ T5836] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 127.103645][ T6921] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.220027][ T5836] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.232377][ T5836] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 127.238827][ T5836] usb 7-1: can't read configurations, error -71 [ 128.123433][ T6955] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 128.129923][ T6955] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 128.267740][ T6959] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 128.269258][ T6958] IPVS: stopping backup sync thread 6959 ... [ 128.427762][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.515636][ T6967] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 128.520545][ T6967] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 128.644728][ T6955] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.647586][ T6928] IPVS: starting estimator thread 0... [ 128.666084][ T56] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.675008][ T56] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 128.677471][ T56] usb 6-1: can't read configurations, error -71 [ 128.748844][ T6975] IPVS: using max 43 ests per chain, 103200 per kthread [ 128.804641][ T6978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.807235][ T6978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.810764][ T6978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.812827][ T6978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.971115][ T5836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.148798][ T6967] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.223049][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.235973][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 129.246932][ T5836] usb 5-1: can't read configurations, error -71 [ 129.838308][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 129.847006][ T7007] siw: device registration error -23 [ 129.992173][ T7015] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 129.999257][ T7015] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 130.055873][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'. [ 130.167598][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.175976][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.337730][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 130.469632][ T7029] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 130.475879][ T7029] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 130.502747][ T7015] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.509912][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 130.516812][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 130.524531][ T9] usb 8-1: can't read configurations, error -71 [ 130.737847][ T73] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 130.757869][ T5757] Bluetooth: hci1: command 0x040f tx timeout [ 130.778097][ T847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.837864][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 130.837902][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 130.837933][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 130.891783][ T7029] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.907943][ T847] usb 6-1: device descriptor read/64, error -71 [ 130.951187][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 130.973789][ T73] usb 7-1: unable to get BOS descriptor or descriptor too short [ 130.977057][ T73] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 130.979498][ T73] usb 7-1: can't read configurations, error -71 [ 131.338466][ T847] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.806155][ T7044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.808536][ T7044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.810693][ T7044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.812801][ T7044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.359761][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.362505][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.477780][ T847] usb 6-1: device descriptor read/64, error -71 [ 132.846370][ T847] usb usb6-port1: attempt power cycle [ 133.153488][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 133.557874][ T847] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 133.768119][ T847] usb 6-1: device not accepting address 6, error -71 [ 133.852635][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 133.887823][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 133.888749][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 133.891903][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 133.893336][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 134.357192][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 135.023040][ T7087] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 135.025368][ T7087] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 135.172434][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.239'. [ 135.925421][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 136.469383][ T7101] UDC core: g1: couldn't find an available UDC or it's busy [ 136.474733][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 136.508443][ T5899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.594385][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 136.637819][ T5899] usb 5-1: device descriptor read/64, error -71 [ 136.709386][ T847] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 136.864588][ T7101] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.879085][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.884652][ T847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 136.891466][ T847] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 136.895499][ T847] usb 7-1: can't read configurations, error -71 [ 136.995560][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.018075][ T5899] usb 5-1: device descriptor read/64, error -71 [ 137.062086][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.128127][ T5899] usb usb5-port1: attempt power cycle [ 137.469493][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.488577][ T5899] usb 5-1: device descriptor read/8, error -71 [ 137.617010][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 137.656141][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.244'. [ 137.782957][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.977745][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.001890][ T7126] UDC core: g1: couldn't find an available UDC or it's busy [ 138.242771][ T7130] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 138.243847][ T7129] IPVS: stopping backup sync thread 7130 ... [ 138.408393][ T5899] usb 5-1: device descriptor read/8, error -71 [ 138.518214][ T5899] usb usb5-port1: unable to enumerate USB device [ 138.557783][ T847] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 138.850667][ T847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 138.857356][ T847] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 138.866393][ T847] usb 7-1: can't read configurations, error -71 [ 138.920499][ T7136] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 138.928149][ T7136] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 139.347882][ T5899] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.500964][ T7140] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.509857][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.513809][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 139.516205][ T5899] usb 5-1: can't read configurations, error -71 [ 139.530553][ T7145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.534991][ T7145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.539356][ T7145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.542114][ T7145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.591422][ T7151] IPVS: stopping backup sync thread 7152 ... [ 140.416127][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 140.593839][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 140.855466][ T7170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'. [ 141.558918][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 141.560907][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 141.565229][ T5757] Bluetooth: hci2: command 0x040f tx timeout [ 141.569610][ T5757] Bluetooth: hci1: command 0x040f tx timeout [ 141.621685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 141.703512][ T7178] IPVS: stopping backup sync thread 7179 ... [ 141.780007][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 141.898080][ T6745] udevd[6745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 141.983483][ T7182] fuse: Bad value for 'fd' [ 141.997762][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 142.276654][ T7192] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 142.279122][ T7192] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 142.493659][ T7194] siw: device registration error -23 [ 142.528983][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.664667][ T7203] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 142.670741][ T7201] IPVS: stopping backup sync thread 7203 ... [ 143.204479][ T7192] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.318026][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 143.923996][ T7224] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 143.926256][ T7224] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 144.124332][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 144.127712][ T9] usb 6-1: can't read configurations, error -71 [ 144.304496][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 144.315735][ T7238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.322402][ T7238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.330458][ T7238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.468019][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 145.003477][ T7224] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.038077][ T6745] udevd[6745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 145.200184][ T6745] udevd[6745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 145.347517][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 145.361429][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 145.367257][ T9] usb 6-1: can't read configurations, error -71 [ 145.380765][ T9] usb usb6-port1: attempt power cycle [ 145.439471][ T7264] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 145.444157][ T7263] IPVS: stopping backup sync thread 7264 ... [ 146.277697][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 146.277822][ T5757] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 146.358365][ T5761] Bluetooth: hci1: command 0x040f tx timeout [ 146.361373][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 146.363859][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 146.762196][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 146.796081][ T7285] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 146.798340][ T7285] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 146.909990][ T5836] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 146.944696][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 147.048761][ T56] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 147.057859][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 147.060713][ T5836] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 147.063425][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.066437][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.069915][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.073042][ T5836] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.077064][ T5836] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.080683][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.177683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.216340][ T7285] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.309795][ T5836] usb 8-1: usb_control_msg returned -32 [ 147.312136][ T5836] usbtmc 8-1:16.0: can't read capabilities [ 147.314531][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 147.320746][ T56] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 147.323624][ T56] usb 7-1: can't read configurations, error -71 [ 147.434248][ T7298] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 147.435186][ T7295] IPVS: stopping backup sync thread 7298 ... [ 147.525232][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 147.616916][ T7282] usbtmc 8-1:16.0: INITIATE_CLEAR returned 0 [ 147.619221][ T7303] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 147.823327][ T1487] usb 8-1: USB disconnect, device number 8 [ 147.991088][ T7316] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 147.991805][ T7314] IPVS: stopping backup sync thread 7316 ... [ 148.982751][ T7322] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 148.990050][ T7322] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 149.009385][ T7323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'. [ 149.233884][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.348619][ T7346] fuse: Bad value for 'fd' [ 149.357855][ T56] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 149.532924][ T7322] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.540547][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 149.544310][ T56] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 149.547197][ T56] usb 7-1: can't read configurations, error -71 [ 150.000171][ T7333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.002829][ T7333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.005562][ T7333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.035655][ T7357] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 150.038141][ T7357] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 150.122110][ T7364] UDC core: g1: couldn't find an available UDC or it's busy [ 150.201670][ T7369] tipc: Enabled bearer , priority 0 [ 150.222412][ T7369] syzkaller0: entered promiscuous mode [ 150.224167][ T7369] syzkaller0: entered allmulticast mode [ 150.226346][ T7369] tipc: Resetting bearer [ 150.252591][ T7368] tipc: Resetting bearer [ 150.477717][ T847] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.617684][ T56] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 150.750017][ T7381] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.902965][ T7383] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.159720][ T7368] tipc: Disabling bearer [ 151.317786][ T5757] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 151.319957][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 151.328190][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 151.376293][ T847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.399326][ T847] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 151.410554][ T847] usb 5-1: can't read configurations, error -71 [ 151.430990][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 152.022533][ T7401] fuse: Bad value for 'fd' [ 152.038144][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 152.040423][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 152.160170][ T56] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 152.243181][ T56] usb 7-1: can't read configurations, error -71 [ 152.245860][ T56] usb usb7-port1: attempt power cycle [ 152.880680][ T7403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.883668][ T7403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.886593][ T7403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.985269][ T7420] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 154.011727][ T7420] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 154.117720][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 154.119841][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 154.197725][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 154.198177][ T73] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 154.219885][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 154.370844][ T7420] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.378739][ T73] usb 8-1: unable to get BOS descriptor or descriptor too short [ 154.383486][ T73] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 154.386520][ T73] usb 8-1: can't read configurations, error -71 [ 154.407770][ T7443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.410750][ T7443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.412982][ T7443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.415130][ T7443] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.040261][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 155.232420][ T7465] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 155.235551][ T7465] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 155.497682][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 155.663616][ T7465] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.669717][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 155.677019][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 155.680439][ T9] usb 7-1: can't read configurations, error -71 [ 156.170791][ T7477] fuse: Unknown parameter 'fd0x0000000000000003' [ 156.295199][ T7488] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 156.300390][ T7488] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 156.437848][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 156.438276][ T5761] Bluetooth: hci2: command 0x040f tx timeout [ 156.440008][ T5753] Bluetooth: hci1: command 0x040f tx timeout [ 156.441925][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 156.518967][ T7499] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 156.521314][ T7499] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 156.568273][ T1487] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 156.733621][ T7488] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.740832][ T1487] usb 6-1: unable to get BOS descriptor or descriptor too short [ 156.746095][ T1487] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 156.749589][ T1487] usb 6-1: can't read configurations, error -71 [ 156.857807][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 157.071797][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 157.075198][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 157.077360][ T9] usb 7-1: can't read configurations, error -71 [ 157.346597][ T7502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.348859][ T7502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.350934][ T7502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.353046][ T7502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.675061][ T7514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.679507][ T7514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.682495][ T7514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.757147][ T7522] tipc: Enabled bearer , priority 0 [ 157.780440][ T7522] syzkaller0: entered promiscuous mode [ 157.782164][ T7522] syzkaller0: entered allmulticast mode [ 157.784278][ T7522] tipc: Resetting bearer [ 157.791307][ T7521] tipc: Resetting bearer [ 158.229475][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 158.280823][ T7531] siw: device registration error -23 [ 158.317936][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 158.593624][ T7536] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.826963][ T7521] tipc: Disabling bearer [ 158.839561][ T7524] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 158.845085][ T7524] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 158.876899][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 158.886764][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 158.891010][ T9] usb 7-1: can't read configurations, error -71 [ 159.397809][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 159.400847][ T5757] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.717836][ T5757] Bluetooth: hci1: command 0x040f tx timeout [ 159.727829][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 159.727853][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 160.068779][ T7573] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 160.071003][ T7573] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 160.175353][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 160.179039][ T7575] siw: device registration error -23 [ 160.298788][ T7580] UDC core: g1: couldn't find an available UDC or it's busy [ 160.388557][ T7585] UDC core: g1: couldn't find an available UDC or it's busy [ 160.467954][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 160.627772][ T41] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 160.634240][ T7573] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.640756][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.646029][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 160.648550][ T9] usb 5-1: can't read configurations, error -71 [ 160.846185][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 160.851055][ T41] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 160.853500][ T41] usb 8-1: can't read configurations, error -71 [ 161.264738][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 161.364424][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.388705][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 161.478235][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 162.084510][ T7604] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 162.087075][ T7604] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 162.198335][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 162.202670][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 162.205908][ T29] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 162.209851][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.214333][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.217547][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.227858][ T29] usbtmc 6-1:16.0: bulk endpoints not found [ 162.369284][ T41] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 162.674002][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 162.679616][ T41] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 162.682142][ T41] usb 8-1: can't read configurations, error -71 [ 162.738105][ T7612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.740411][ T7612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.742489][ T7612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.077358][ T7616] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 163.085799][ T7616] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 163.337766][ T5899] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 163.498424][ T7618] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.507719][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 163.588490][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 163.594983][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 163.598101][ T5899] usb 7-1: can't read configurations, error -71 [ 163.674897][ T7616] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.681155][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.685816][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 163.688431][ T9] usb 5-1: can't read configurations, error -71 [ 163.931513][ T7628] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 163.933748][ T7628] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 164.100116][ T41] usb 6-1: USB disconnect, device number 13 [ 164.190453][ T847] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 164.437787][ T7628] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.473085][ T847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 164.486441][ T847] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 164.490074][ T847] usb 8-1: can't read configurations, error -71 [ 164.760034][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 164.762786][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 164.762823][ T5761] Bluetooth: hci1: command 0x040f tx timeout [ 164.765395][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 164.770032][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 165.040413][ T7644] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 165.066471][ T7644] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 165.156572][ T7649] siw: device registration error -23 [ 165.382998][ T7658] UDC core: g1: couldn't find an available UDC or it's busy [ 165.387776][ T41] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 165.487724][ T5899] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 165.547777][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 165.551887][ T41] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 165.555453][ T41] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 165.559944][ T41] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.565820][ T41] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.569676][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.590773][ T41] usbtmc 6-1:16.0: bulk endpoints not found [ 165.697796][ T847] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 165.731310][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.735660][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 165.738180][ T5899] usb 5-1: can't read configurations, error -71 [ 165.854044][ T7658] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.863086][ T847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 165.867256][ T847] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 165.870754][ T847] usb 8-1: can't read configurations, error -71 [ 166.320032][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'. [ 167.043171][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 167.082768][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 167.333370][ T7679] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 167.340215][ T7679] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 167.627799][ T5836] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 167.871138][ T5836] usb 8-1: unable to get BOS descriptor or descriptor too short [ 167.875973][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 167.879359][ T5836] usb 8-1: can't read configurations, error -71 [ 168.174704][ T41] usb 6-1: USB disconnect, device number 14 [ 168.250447][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 168.605559][ T7692] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 168.609491][ T7692] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 168.867731][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 169.087830][ T5836] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 169.102259][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 169.109940][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 169.112934][ T9] usb 7-1: can't read configurations, error -71 [ 169.296022][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.420'. [ 169.323663][ T7694] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.328970][ T5836] usb 8-1: unable to get BOS descriptor or descriptor too short [ 169.331997][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 169.334422][ T5836] usb 8-1: can't read configurations, error -71 [ 169.336575][ T5836] usb usb8-port1: attempt power cycle [ 170.797669][ T7720] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 170.801981][ T7719] IPVS: stopping backup sync thread 7720 ... [ 171.141907][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 171.462153][ T7710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.473757][ T7710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.493541][ T7710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.756367][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 171.821351][ T7733] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 171.839582][ T7733] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 171.939908][ T7742] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 171.942576][ T7742] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 171.958197][ T7738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.961227][ T7738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.964049][ T7738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.060858][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 172.133250][ T7751] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 172.137801][ T7750] IPVS: stopping backup sync thread 7751 ... [ 172.197763][ T5576] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 172.357748][ T5757] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.368497][ T5757] Bluetooth: hci0: command 0x040f tx timeout [ 172.372880][ T7733] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.387715][ T41] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 172.549985][ T5576] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.721457][ T6745] udevd[6745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 172.753077][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 172.833650][ T5576] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 172.836077][ T5576] usb 6-1: can't read configurations, error -71 [ 173.089188][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 173.092232][ T41] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 173.109679][ T41] usb 8-1: can't read configurations, error -71 [ 173.535900][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 173.579907][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 173.940612][ T7774] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 173.946113][ T7773] IPVS: stopping backup sync thread 7774 ... [ 174.037947][ T5757] Bluetooth: hci3: command 0x040f tx timeout [ 174.040167][ T5757] Bluetooth: hci2: command 0x040f tx timeout [ 174.042138][ T5757] Bluetooth: hci1: command 0x040f tx timeout [ 174.475066][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.443'. [ 175.089626][ T7784] siw: device registration error -23 [ 175.209684][ T7787] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 175.212014][ T7787] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 175.293981][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 175.294519][ T7792] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 175.305214][ T7792] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 175.482158][ T7795] tipc: Enabled bearer , priority 0 [ 175.506939][ T7795] syzkaller0: entered promiscuous mode [ 175.508785][ T7795] syzkaller0: entered allmulticast mode [ 175.510965][ T7795] tipc: Resetting bearer [ 175.517432][ T7794] tipc: Resetting bearer [ 175.537862][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 175.607913][ T73] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 175.868790][ T7799] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.492905][ T7794] tipc: Disabling bearer [ 176.562100][ T73] usb 8-1: unable to get BOS descriptor or descriptor too short [ 176.565342][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 176.568105][ T73] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 176.570614][ T73] usb 8-1: can't read configurations, error -71 [ 176.572825][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 176.575395][ T9] usb 6-1: can't read configurations, error -71 [ 176.588570][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 176.802530][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 176.987858][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.033101][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.455'. [ 178.145830][ T7829] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 178.163973][ T7829] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 178.216298][ T6745] udevd[6745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.224326][ T6740] udevd[6740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.229085][ T7834] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 178.231337][ T7834] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 178.314595][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 178.427914][ T41] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 178.475282][ T7844] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 178.476090][ T7842] IPVS: stopping backup sync thread 7844 ... [ 178.499313][ T5836] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 178.592252][ T7829] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.647737][ T7850] ------------[ cut here ]------------ [ 178.650925][ T7850] refcount_t: addition on 0; use-after-free. [ 178.652807][ T7850] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x111/0x130, CPU#1: syz.3.464/7850 [ 178.656427][ T7850] Modules linked in: [ 178.658115][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(full) [ 178.661585][ T7850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.665554][ T7850] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 178.668278][ T7850] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 178.674863][ T7850] RSP: 0018:ffffc90020b3fc78 EFLAGS: 00010287 [ 178.676838][ T7850] RAX: 0000000000000f36 RBX: ffff888050d0c21c RCX: ffffc9000d581000 [ 178.679448][ T7850] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 178.682190][ T7850] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 178.684621][ T7850] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888050d0c21c [ 178.687127][ T7850] R13: ffff888012e62218 R14: ffffc90020b3fd28 R15: ffff888013d06800 [ 178.689535][ T7850] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f5405b40 [ 178.692210][ T7850] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 178.694206][ T7850] CR2: 00000000f5404ff4 CR3: 000000004a4ea000 CR4: 0000000000352ef0 [ 178.697134][ T7850] Call Trace: [ 178.698265][ T7850] [ 178.698938][ T7834] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.699239][ T7850] config_item_get+0x8c/0xb0 [ 178.703371][ T7850] configfs_symlink+0x390/0x11f0 [ 178.704953][ T7850] ? bpf_lsm_inode_permission+0x9/0x10 [ 178.706908][ T7850] ? security_inode_permission+0xbf/0x250 [ 178.709147][ T7850] ? __pfx_configfs_symlink+0x10/0x10 [ 178.710857][ T7850] vfs_symlink+0x178/0x4d0 [ 178.712604][ T7850] filename_symlinkat+0x2a6/0x560 [ 178.714584][ T7850] ? __pfx_filename_symlinkat+0x10/0x10 [ 178.716694][ T7850] ? strncpy_from_user+0x19d/0x2d0 [ 178.718792][ T7850] ? do_getname+0x191/0x390 [ 178.720192][ T7850] __ia32_sys_symlinkat+0x9b/0xe0 [ 178.721763][ T7850] __do_fast_syscall_32+0xe7/0x970 [ 178.723360][ T7850] do_fast_syscall_32+0x32/0x70 [ 178.725112][ T7850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.727256][ T7850] RIP: 0023:0xf7f65fec [ 178.728687][ T7850] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 178.730914][ T7850] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 178.733495][ T7850] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 178.735919][ T7850] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.738444][ T7850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.740919][ T7850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.743372][ T7850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.745844][ T7850] [ 178.746840][ T7850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.749151][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(full) [ 178.751981][ T7850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.755109][ T7850] Call Trace: [ 178.756175][ T7850] [ 178.757077][ T7850] dump_stack_lvl+0x100/0x190 [ 178.758502][ T7850] vpanic+0x552/0x970 [ 178.759789][ T7850] ? __pfx_vpanic+0x10/0x10 [ 178.761230][ T7850] panic+0xd1/0xe0 [ 178.762301][ T7850] ? __pfx_panic+0x10/0x10 [ 178.763587][ T7850] check_panic_on_warn.cold+0x19/0x34 [ 178.765227][ T7850] ? refcount_warn_saturate+0x111/0x130 [ 178.766909][ T7850] __warn.cold+0x191/0x318 [ 178.768302][ T7850] __report_bug+0x30f/0x440 [ 178.769749][ T7850] ? refcount_warn_saturate+0x111/0x130 [ 178.771463][ T7850] ? __pfx___report_bug+0x10/0x10 [ 178.773034][ T7850] ? refcount_warn_saturate+0x10a/0x130 [ 178.774696][ T7850] report_bug_entry+0xe1/0x290 [ 178.776148][ T7850] ? refcount_warn_saturate+0x111/0x130 [ 178.777761][ T7850] handle_bug+0x1cd/0x2a0 [ 178.779066][ T7850] exc_invalid_op+0x17/0x50 [ 178.780426][ T7850] asm_exc_invalid_op+0x1a/0x20 [ 178.781876][ T7850] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 178.783693][ T7850] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 178.789481][ T7850] RSP: 0018:ffffc90020b3fc78 EFLAGS: 00010287 [ 178.791478][ T7850] RAX: 0000000000000f36 RBX: ffff888050d0c21c RCX: ffffc9000d581000 [ 178.793935][ T7850] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 178.796382][ T7850] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 178.798664][ T7850] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888050d0c21c [ 178.801064][ T7850] R13: ffff888012e62218 R14: ffffc90020b3fd28 R15: ffff888013d06800 [ 178.803510][ T7850] ? refcount_warn_saturate+0x10a/0x130 [ 178.805405][ T7850] ? refcount_warn_saturate+0x10a/0x130 [ 178.807164][ T7850] config_item_get+0x8c/0xb0 [ 178.808826][ T7850] configfs_symlink+0x390/0x11f0 [ 178.810529][ T7850] ? bpf_lsm_inode_permission+0x9/0x10 [ 178.812205][ T7850] ? security_inode_permission+0xbf/0x250 [ 178.813919][ T7850] ? __pfx_configfs_symlink+0x10/0x10 [ 178.815619][ T7850] vfs_symlink+0x178/0x4d0 [ 178.817165][ T7850] filename_symlinkat+0x2a6/0x560 [ 178.818705][ T7850] ? __pfx_filename_symlinkat+0x10/0x10 [ 178.820451][ T7850] ? strncpy_from_user+0x19d/0x2d0 [ 178.821990][ T7850] ? do_getname+0x191/0x390 [ 178.823338][ T7850] __ia32_sys_symlinkat+0x9b/0xe0 [ 178.824905][ T7850] __do_fast_syscall_32+0xe7/0x970 [ 178.826455][ T7850] do_fast_syscall_32+0x32/0x70 [ 178.827890][ T7850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.829975][ T7850] RIP: 0023:0xf7f65fec [ 178.831228][ T7850] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 178.833347][ T7850] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 178.835865][ T7850] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 178.838261][ T7850] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.840639][ T7850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.843061][ T7850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.845435][ T7850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.847821][ T7850] [ 178.849367][ T7850] Kernel Offset: disabled [ 178.850697][ T7850] Rebooting in 86400 seconds..