last executing test programs: 3m25.018908551s ago: executing program 1 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='44100,48000,88200,96000,176400,1920', 0x23) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='usbip-vudc.0', 0xc) 3m24.898610347s ago: executing program 1 (id=79): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m23.945977417s ago: executing program 1 (id=82): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) shutdown(r1, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000002840), 0x0, 0x60, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 3m15.148963838s ago: executing program 1 (id=88): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400), 0x0, 0x0) 3m12.760707071s ago: executing program 1 (id=92): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0xc0c, 0x2, 0x6, 0x7fff, 0xf, "0100216a00ce6bab0ad4e2500300"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x1) 3m10.624523118s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,1920', 0x23) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 2m55.278039305s ago: executing program 32 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,1920', 0x23) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 16.834053879s ago: executing program 4 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 15.604162885s ago: executing program 4 (id=366): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 14.183688048s ago: executing program 0 (id=369): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) socket$netlink(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 13.42950033s ago: executing program 4 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,1920', 0x23) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 12.782845665s ago: executing program 0 (id=371): r0 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r0, r0, 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000440)={0xa0000001}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 12.403868567s ago: executing program 4 (id=372): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 11.840541067s ago: executing program 0 (id=373): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='usbip-vud', 0x9) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 11.577916073s ago: executing program 4 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440), 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 11.250797239s ago: executing program 0 (id=375): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='usbip-vud', 0x9) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 10.441722997s ago: executing program 0 (id=377): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MTU={0x8, 0x4, 0x7fff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x121002, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000180)=0x1, 0x10000002) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x10}, 0x10) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) 8.967451967s ago: executing program 3 (id=378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xc81}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045) 7.841498065s ago: executing program 3 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,', 0x12) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 5.881584895s ago: executing program 2 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 5.73329076s ago: executing program 3 (id=384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000b40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.549605549s ago: executing program 2 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002040)={0x2020}, 0x2020) 4.383875557s ago: executing program 2 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,', 0x12) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.079951904s ago: executing program 3 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.735896284s ago: executing program 2 (id=388): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x1, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mount$pvfs2(0x0, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400), 0x0, 0x0) 2.517657499s ago: executing program 3 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') io_uring_setup(0x7, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbc) modify_ldt$read(0x0, &(0x7f000001a900)=""/199, 0xc7) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x6c002) timer_create(0x6, &(0x7f000001a800)={0x0, 0x14, 0x8eec63ec7ea680cf, @tid=0xffffffffffffffff}, &(0x7f000001a840)=0x0) ptrace$getenv(0x4201, 0x0, 0x4, &(0x7f000001a8c0)) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f000001a880)) timer_getoverrun(r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x5, 0x6, 0x11, 0x4, "0e0325c359e5346bae9f6c268de6c5e5c0ca53509ed9d691c7e6d9de4fd3094f1d539d72935902a0cfa7f23f9eb7be8ff96e734607bae1d6318928abeac60405", "aa0ffa130fdad92b1f6a2a9eefc3abb634566c27b828006b54ec24bcfe483ea3", [0x3ff, 0x8]}) 1.776615741s ago: executing program 2 (id=390): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) ioctl$KDSKBENT(r4, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.714064957s ago: executing program 3 (id=391): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB, @ANYRESHEX], 0x0) 624.776013ms ago: executing program 0 (id=392): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="13000000270001"], 0x50}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r4 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) setns(0xc9, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) link(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)={0x2, 'nicvf0\x00', {}, 0x2}) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 119.390573ms ago: executing program 4 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 0s ago: executing program 2 (id=394): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 92.114074][ T10] cfg80211: failed to load regulatory.db [ 92.584600][ T5574] cgroup: Unknown subsys name 'net' [ 92.825331][ T5574] cgroup: Unknown subsys name 'cpuset' [ 92.899374][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.899688][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.643087][ T4900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.681895][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.723387][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.741174][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.746111][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.775377][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.792366][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.815965][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.816071][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.823440][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.839935][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.840441][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.844354][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.845369][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.874418][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.885394][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.890738][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.906062][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.906389][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.931291][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.932147][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.933548][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.943550][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.003481][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.043284][ T4900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.010966][ T5603] Bluetooth: hci0: command tx timeout [ 100.168811][ T5603] Bluetooth: hci3: command tx timeout [ 100.168821][ T5598] Bluetooth: hci1: command tx timeout [ 100.249656][ T5603] Bluetooth: hci2: command tx timeout [ 100.328761][ T5603] Bluetooth: hci4: command tx timeout [ 101.010806][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.012210][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.012392][ T5584] bridge_slave_0: entered allmulticast mode [ 101.014465][ T5584] bridge_slave_0: entered promiscuous mode [ 101.107923][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.108085][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.108285][ T5584] bridge_slave_1: entered allmulticast mode [ 101.130410][ T5584] bridge_slave_1: entered promiscuous mode [ 101.132878][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.133021][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.133204][ T5586] bridge_slave_0: entered allmulticast mode [ 101.136337][ T5586] bridge_slave_0: entered promiscuous mode [ 101.192676][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.192805][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.193026][ T5583] bridge_slave_0: entered allmulticast mode [ 101.195248][ T5583] bridge_slave_0: entered promiscuous mode [ 101.241800][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.241971][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.242105][ T5586] bridge_slave_1: entered allmulticast mode [ 101.244047][ T5586] bridge_slave_1: entered promiscuous mode [ 101.296811][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.296934][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.297066][ T5583] bridge_slave_1: entered allmulticast mode [ 101.302352][ T5583] bridge_slave_1: entered promiscuous mode [ 101.357941][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.358049][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.358182][ T5585] bridge_slave_0: entered allmulticast mode [ 101.370566][ T5585] bridge_slave_0: entered promiscuous mode [ 101.424000][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.447980][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.448166][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.448350][ T5585] bridge_slave_1: entered allmulticast mode [ 101.466227][ T5585] bridge_slave_1: entered promiscuous mode [ 101.471552][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.471876][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.472305][ T5587] bridge_slave_0: entered allmulticast mode [ 101.488822][ T5587] bridge_slave_0: entered promiscuous mode [ 101.526992][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.544462][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.568505][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.576000][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.576175][ T5587] bridge_slave_1: entered allmulticast mode [ 101.586346][ T5587] bridge_slave_1: entered promiscuous mode [ 101.601539][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.626173][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.664863][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.705368][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.745962][ T5584] team0: Port device team_slave_0 added [ 101.778167][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.795755][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.829157][ T5584] team0: Port device team_slave_1 added [ 101.831661][ T5586] team0: Port device team_slave_0 added [ 101.866515][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.870133][ T5583] team0: Port device team_slave_0 added [ 101.903997][ T5586] team0: Port device team_slave_1 added [ 101.947973][ T5583] team0: Port device team_slave_1 added [ 101.985390][ T5585] team0: Port device team_slave_0 added [ 102.021937][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.021950][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.021971][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.081388][ T5585] team0: Port device team_slave_1 added [ 102.083983][ T5587] team0: Port device team_slave_0 added [ 102.091781][ T5603] Bluetooth: hci0: command tx timeout [ 102.117025][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.117043][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.117073][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.121913][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.121926][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.121946][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.211210][ T5587] team0: Port device team_slave_1 added [ 102.212033][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.212045][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.212065][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.258313][ T5603] Bluetooth: hci1: command tx timeout [ 102.258381][ T5603] Bluetooth: hci3: command tx timeout [ 102.296633][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.296652][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.296682][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.329218][ T5603] Bluetooth: hci2: command tx timeout [ 102.362413][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.362427][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.362447][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.365760][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.365777][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.365807][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.413759][ T5603] Bluetooth: hci4: command tx timeout [ 102.900775][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.900795][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.900827][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.925110][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.925161][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.925229][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.030496][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.030510][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.030532][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.127533][ T5584] hsr_slave_0: entered promiscuous mode [ 103.136878][ T5584] hsr_slave_1: entered promiscuous mode [ 103.220380][ T5586] hsr_slave_0: entered promiscuous mode [ 103.221405][ T5586] hsr_slave_1: entered promiscuous mode [ 103.222228][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 103.222326][ T5586] Cannot create hsr debugfs directory [ 103.244097][ T5583] hsr_slave_0: entered promiscuous mode [ 103.248233][ T5583] hsr_slave_1: entered promiscuous mode [ 103.252657][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 103.252731][ T5583] Cannot create hsr debugfs directory [ 103.330822][ T5585] hsr_slave_0: entered promiscuous mode [ 103.331880][ T5585] hsr_slave_1: entered promiscuous mode [ 103.332672][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 103.332693][ T5585] Cannot create hsr debugfs directory [ 103.410310][ T5587] hsr_slave_0: entered promiscuous mode [ 103.411364][ T5587] hsr_slave_1: entered promiscuous mode [ 103.412113][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 103.412132][ T5587] Cannot create hsr debugfs directory [ 104.168775][ T5603] Bluetooth: hci0: command tx timeout [ 104.328729][ T5603] Bluetooth: hci1: command tx timeout [ 104.331317][ T5603] Bluetooth: hci3: command tx timeout [ 104.409053][ T5603] Bluetooth: hci2: command tx timeout [ 104.488880][ T5603] Bluetooth: hci4: command tx timeout [ 104.510662][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.584880][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.604737][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.633949][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.647462][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.685146][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.723517][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.756506][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.924128][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.954566][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.976543][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.004755][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.016745][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.046355][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.087721][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.124615][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.346918][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.373712][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.378315][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.426257][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.443159][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.482384][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.516155][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.543158][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.727423][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.781915][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.798268][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.832590][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.837069][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.864882][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.909764][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.952538][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.086960][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.161185][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.236033][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.247370][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.249835][ T5603] Bluetooth: hci0: command tx timeout [ 106.293604][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.321610][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.364311][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.387023][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.408891][ T5603] Bluetooth: hci3: command tx timeout [ 106.408914][ T5598] Bluetooth: hci1: command tx timeout [ 106.435215][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.472482][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.488797][ T5598] Bluetooth: hci2: command tx timeout [ 106.534809][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.550111][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.550291][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.572829][ T5598] Bluetooth: hci4: command tx timeout [ 106.644033][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.644593][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.727844][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.774207][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.774362][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.812091][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.847624][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.847749][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.968803][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.020658][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.078814][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.078966][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.170551][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.170684][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.267795][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.387118][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.404679][ T3412] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.404912][ T3412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.510095][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.510286][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.592156][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.682310][ T3412] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.682450][ T3412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.826090][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.826305][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.383331][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.934466][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.423387][ T5583] veth0_vlan: entered promiscuous mode [ 109.474707][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.582687][ T5583] veth1_vlan: entered promiscuous mode [ 109.918180][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.959594][ T5583] veth0_macvtap: entered promiscuous mode [ 109.964702][ T5585] veth0_vlan: entered promiscuous mode [ 109.994288][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.009909][ T5584] veth0_vlan: entered promiscuous mode [ 110.014458][ T5583] veth1_macvtap: entered promiscuous mode [ 110.061714][ T5585] veth1_vlan: entered promiscuous mode [ 110.090498][ T5584] veth1_vlan: entered promiscuous mode [ 110.147517][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.182259][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.291094][ T5586] veth0_vlan: entered promiscuous mode [ 110.323352][ T5585] veth0_macvtap: entered promiscuous mode [ 110.416119][ T5584] veth0_macvtap: entered promiscuous mode [ 110.432097][ T5587] veth0_vlan: entered promiscuous mode [ 110.438380][ T5585] veth1_macvtap: entered promiscuous mode [ 110.459323][ T5586] veth1_vlan: entered promiscuous mode [ 110.545511][ T5584] veth1_macvtap: entered promiscuous mode [ 110.683249][ T5587] veth1_vlan: entered promiscuous mode [ 110.805245][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.867283][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.911042][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.009641][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.089949][ T5586] veth0_macvtap: entered promiscuous mode [ 111.131358][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.131383][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.197319][ T5586] veth1_macvtap: entered promiscuous mode [ 111.228156][ T5587] veth0_macvtap: entered promiscuous mode [ 111.410648][ T5587] veth1_macvtap: entered promiscuous mode [ 111.645593][ T3412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.645615][ T3412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.814562][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.031795][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.036288][ T2141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.036312][ T2141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.077381][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.141501][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.185441][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.185464][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.377632][ T2141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.377657][ T2141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.580477][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.580497][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.022392][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.022712][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.022934][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.023224][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.023497][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.023748][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.024034][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.024270][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.024977][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.025276][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.025583][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.025911][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.026173][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.026431][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.026721][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.027008][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.027201][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.027485][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.027775][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.783817][ T3412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.783839][ T3412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.524447][ T5793] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.889482][ T5795] orangefs_mount: mount request failed with -4 [ 116.625069][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.625093][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.845279][ T5801] mmap: syz.0.8 (5801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.301656][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.301679][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.542947][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 117.625929][ T5810] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 118.260176][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.260200][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.693975][ T5820] Need at least one configuration in g1. [ 118.697640][ T5820] udc usbip-vudc.0: failed to start g1: -22 [ 118.697671][ T5820] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 118.713494][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.822180][ T5820] UDC core: g1: couldn't find an available UDC or it's busy [ 118.852889][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 119.160890][ T9] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 119.160924][ T9] usb 3-1: config 0 has no interface number 0 [ 119.160974][ T9] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 119.209900][ T9] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 119.209932][ T9] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 119.209953][ T9] usb 3-1: Manufacturer: syz [ 119.209969][ T9] usb 3-1: SerialNumber: syz [ 119.366419][ T9] usb 3-1: config 0 descriptor?? [ 119.447080][ T5815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.866084][ T5826] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 119.883916][ T9] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32 [ 119.884187][ T9] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 120.133962][ T5829] Zero length message leads to an empty skb [ 124.051350][ T4914] usb 3-1: USB disconnect, device number 2 [ 126.611499][ T5867] binder: 5866:5867 ioctl c0306201 200000000580 returned -14 [ 127.805020][ T5878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 128.243826][ T5878] veth3: entered allmulticast mode [ 129.699190][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.772719][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.040197][ T1244] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.340939][ T1244] usb 1-1: Dual-Role OTG device on HNP port [ 130.342667][ T1244] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 130.342699][ T1244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.681864][ T1244] gspca_main: spca501-2.14.0 probing 0000:0000 [ 130.686818][ T1244] gspca_spca501: reg write: error -32 [ 130.686838][ T1244] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 130.686930][ T1244] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 130.912177][ T1244] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.358646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.378613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.388611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.398617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.408609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.418611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.428613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.438607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.448611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.458660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.462107][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.462230][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.491206][ T5913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 138.610635][ T5918] syz.3.38 (5918) used greatest stack depth: 18960 bytes left [ 139.748873][ T5957] 9pnet_fd: Insufficient options for proto=fd [ 141.327868][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 142.032586][ T5964] orangefs_mount: mount request failed with -4 [ 144.085554][ T5968] veth3: entered allmulticast mode [ 144.612019][ T5998] netlink: 'syz.3.55': attribute type 11 has an invalid length. [ 145.609497][ T6004] Bluetooth: MGMT ver 1.23 [ 147.313938][ T6023] netlink: 'syz.2.62': attribute type 11 has an invalid length. [ 147.428780][ T1756] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 148.825276][ T1756] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 148.825308][ T1756] usb 5-1: config 0 has no interface number 0 [ 148.826039][ T1756] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 148.847342][ T1756] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 148.847441][ T1756] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 148.847465][ T1756] usb 5-1: Manufacturer: syz [ 148.847481][ T1756] usb 5-1: SerialNumber: syz [ 157.220961][ T1756] usb 5-1: config 0 descriptor?? [ 157.510778][ T1756] usb 5-1: can't set config #0, error -71 [ 157.722307][ T1756] usb 5-1: USB disconnect, device number 2 [ 161.639066][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.742197][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.762428][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.789017][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 161.791752][ T31] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.791782][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.791804][ T31] usb 4-1: config 0 has no interface number 0 [ 161.791851][ T31] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.791895][ T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 161.791924][ T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 161.791966][ T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.791993][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.922116][ T31] usb 4-1: config 0 descriptor?? [ 161.949592][ T31] ldusb 4-1:0.55: Interrupt in endpoint not found [ 162.465800][ T5704] usb 4-1: USB disconnect, device number 2 [ 164.593178][ T37] audit: type=1800 audit(1786123389.778:2): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.81" name="in_ports" dev="configfs" ino=9899 res=0 errno=0 [ 167.952234][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 171.926106][ T6156] team0 (unregistering): Port device team_slave_0 removed [ 172.029169][ T6156] team0 (unregistering): Port device team_slave_1 removed [ 173.843538][ T6172] orangefs_mount: mount request failed with -4 [ 176.989251][ T5711] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.302664][ T5711] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.302713][ T5711] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 177.303019][ T5711] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.303065][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.494693][ T5711] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.497075][ T5711] usb 5-1: invalid MIDI out EP 0 [ 178.752570][ T6198] warning: `syz.4.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 187.629733][ T5711] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 187.690172][ T5711] usb 5-1: USB disconnect, device number 3 [ 188.482222][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.482875][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.679240][ T5711] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 188.763873][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.764178][ T6231] batadv_slave_1: entered promiscuous mode [ 188.858997][ T5711] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.859040][ T5711] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 188.859084][ T5711] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.859111][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.944574][ T5711] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.945734][ T5711] usb 4-1: invalid MIDI out EP 0 [ 191.761005][ T5711] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 191.821334][ T5711] usb 4-1: USB disconnect, device number 3 [ 193.973859][ T6269] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 194.612762][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.670932][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.772321][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.915605][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.960042][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.993671][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.034020][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.853119][ T6288] orangefs_mount: mount request failed with -4 [ 197.603531][ T6271] veth3: entered allmulticast mode [ 199.203198][ T5598] Bluetooth: hci5: command tx timeout [ 200.098972][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.271575][ T5772] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.271606][ T5772] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 200.271635][ T5772] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.271653][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.647687][ T5772] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.663085][ T5772] usb 3-1: invalid MIDI out EP 0 [ 201.361641][ T5598] Bluetooth: hci5: command tx timeout [ 202.173677][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 203.374767][ T5598] Bluetooth: hci5: command tx timeout [ 204.324464][ T5772] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 204.619228][ T5772] usb 3-1: USB disconnect, device number 3 [ 205.459571][ T5598] Bluetooth: hci5: command tx timeout [ 205.568768][ T5772] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 207.024378][ T5772] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.025010][ T5772] usb 3-1: not running at top speed; connect to a high speed hub [ 207.942691][ T5772] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 207.942926][ T5772] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 207.943005][ T5772] usb 3-1: config 14 has no interface number 0 [ 207.943041][ T5772] usb 3-1: config 14 has no interface number 1 [ 207.943316][ T5772] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 207.943390][ T5772] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 207.943704][ T5772] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 207.943811][ T5772] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.943887][ T5772] usb 3-1: config 14 interface 57 has no altsetting 0 [ 207.943941][ T5772] usb 3-1: config 14 interface 228 has no altsetting 0 [ 208.091547][ T5772] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 208.091577][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.091598][ T5772] usb 3-1: Product: syz [ 208.091612][ T5772] usb 3-1: Manufacturer: syz [ 208.091627][ T5772] usb 3-1: SerialNumber: syz [ 208.337780][ T5772] usb 3-1: can't set config #14, error -71 [ 208.431502][ T5772] usb 3-1: USB disconnect, device number 4 [ 208.741026][ T6336] fuse: Bad value for 'fd' [ 209.321641][ T3346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.919050][ T36] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.161295][ T36] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.161325][ T36] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 210.161357][ T36] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.161375][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.364895][ T36] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.365595][ T36] usb 3-1: invalid MIDI out EP 0 [ 210.511026][ T3346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.668295][ T6348] tipc: Failed to remove unknown binding: 66,0,0/0:1340147531/1340147532 [ 211.938685][ T6348] tipc: Failed to remove unknown binding: 66,0,0/0:1340147531/1340147532 [ 213.179584][ T36] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 213.226528][ T3346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.263299][ T36] usb 3-1: USB disconnect, device number 5 [ 213.937226][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'. [ 217.336821][ T3346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.704518][ T6369] team0 (unregistering): Port device team_slave_0 removed [ 217.769317][ T6369] team0 (unregistering): Port device team_slave_1 removed [ 217.906630][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 218.123111][ T36] usb 1-1: USB disconnect, device number 2 [ 218.658962][ T5857] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 218.849689][ T5857] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.849719][ T5857] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.849775][ T5857] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.849795][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.136313][ T37] audit: type=1800 audit(1786123444.538:3): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.148" name="in_ports" dev="configfs" ino=11498 res=0 errno=0 [ 219.558279][ T5857] usb 3-1: GET_CAPABILITIES returned 0 [ 219.558333][ T5857] usbtmc 3-1:16.0: can't read capabilities [ 221.724879][ T5857] usb 3-1: USB disconnect, device number 6 [ 222.174243][ T4900] Bluetooth: hci0: command 0x0406 tx timeout [ 222.202235][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 222.202341][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 224.516778][ T3346] bridge_slave_1: left allmulticast mode [ 224.517006][ T3346] bridge_slave_1: left promiscuous mode [ 224.560978][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.063657][ T3346] bridge_slave_0: left allmulticast mode [ 225.063699][ T3346] bridge_slave_0: left promiscuous mode [ 225.092086][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.119311][ T3346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.160799][ T3346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.213722][ T3346] bond0 (unregistering): Released all slaves [ 226.722509][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.750773][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.758925][ T6270] bridge_slave_0: entered allmulticast mode [ 226.766277][ T6270] bridge_slave_0: entered promiscuous mode [ 227.963519][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.963862][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.964519][ T6270] bridge_slave_1: entered allmulticast mode [ 228.283697][ T6270] bridge_slave_1: entered promiscuous mode [ 231.054361][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.736988][ T6464] binder: 6463:6464 ioctl c0306201 200000000580 returned -14 [ 235.485512][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.286942][ T6486] 9pnet_fd: Insufficient options for proto=fd [ 239.133807][ T6270] team0: Port device team_slave_0 added [ 239.141254][ T6270] team0: Port device team_slave_1 added [ 239.459913][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.465443][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.490811][ T6502] veth3: entered allmulticast mode [ 239.626241][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 239.721173][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.721192][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.721224][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.247789][ T37] audit: type=1800 audit(1786123465.668:4): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.175" name="in_ports" dev="configfs" ino=11691 res=0 errno=0 [ 240.878817][ T6487] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 241.321566][ T6487] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 241.321599][ T6487] usb 5-1: config 0 has no interface number 0 [ 241.321649][ T6487] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 241.372892][ T6487] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 241.372929][ T6487] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 241.372962][ T6487] usb 5-1: Manufacturer: syz [ 241.372979][ T6487] usb 5-1: SerialNumber: syz [ 241.422350][ T6487] usb 5-1: config 0 descriptor?? [ 241.428034][ T6531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.536323][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.536344][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.536367][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.601398][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 241.637581][ T6487] usbtouchscreen 5-1:0.214: Failed to read FW rev: -32 [ 241.637978][ T6487] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 242.248319][ T37] audit: type=1800 audit(1786123467.668:5): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.180" name="in_ports" dev="configfs" ino=12658 res=0 errno=0 [ 243.426602][ T6270] hsr_slave_0: entered promiscuous mode [ 243.453751][ T6270] hsr_slave_1: entered promiscuous mode [ 243.454657][ T6270] debugfs: 'hsr0' already exists in 'hsr' [ 243.454676][ T6270] Cannot create hsr debugfs directory [ 243.693353][ T3346] hsr_slave_0: left promiscuous mode [ 243.730107][ T3346] hsr_slave_1: left promiscuous mode [ 243.733061][ T3346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.790811][ T3346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.009378][ T3346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.009409][ T3346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.543806][ T6558] orangefs_mount: mount request failed with -4 [ 244.788698][ T6487] usb 5-1: USB disconnect, device number 4 [ 245.137269][ T3346] veth1_macvtap: left promiscuous mode [ 245.961759][ T3346] veth0_macvtap: left promiscuous mode [ 246.339820][ T3346] veth1_vlan: left promiscuous mode [ 247.121305][ T3346] veth0_vlan: left promiscuous mode [ 252.649329][ T3346] team0 (unregistering): Port device team_slave_1 removed [ 252.709701][ T3346] team0 (unregistering): Port device team_slave_0 removed [ 254.497063][ T5598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.532092][ T5598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.555694][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.577428][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.591629][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.260679][ T6623] 9pnet_fd: Insufficient options for proto=fd [ 255.857340][ T5854] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 255.962555][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962631][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.125299][ T5854] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.125331][ T5854] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 256.125353][ T5854] usb 3-1: config 179 has no interface number 0 [ 256.125403][ T5854] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 256.125433][ T5854] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 256.125464][ T5854] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 256.125511][ T5854] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.125536][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.247303][ T6620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.736414][ T5603] Bluetooth: hci2: command tx timeout [ 257.332356][ T5854] usb 3-1: USB disconnect, device number 7 [ 257.638301][ T6640] veth3: entered allmulticast mode [ 259.100135][ T5603] Bluetooth: hci2: command tx timeout [ 259.289436][ T6661] 9pnet_fd: Insufficient options for proto=fd [ 259.334314][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 261.128915][ T5603] Bluetooth: hci2: command tx timeout [ 262.098688][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 262.348776][ T3346] bridge_slave_1: left allmulticast mode [ 262.348815][ T3346] bridge_slave_1: left promiscuous mode [ 262.409366][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.593880][ T3346] bridge_slave_0: left allmulticast mode [ 262.593919][ T3346] bridge_slave_0: left promiscuous mode [ 262.613341][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.128659][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 263.218807][ T5603] Bluetooth: hci2: command tx timeout [ 264.187897][ T6726] 9pnet_fd: Insufficient options for proto=fd [ 264.521865][ T3346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.758850][ T5854] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 264.839557][ T3346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.171878][ T5854] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 265.171912][ T5854] usb 3-1: config 0 has no interface number 0 [ 265.171962][ T5854] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 265.188659][ T5854] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 265.188693][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 265.188713][ T5854] usb 3-1: Manufacturer: syz [ 265.188729][ T5854] usb 3-1: SerialNumber: syz [ 265.213329][ T5854] usb 3-1: config 0 descriptor?? [ 265.255088][ T6729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 265.256936][ T3346] bond0 (unregistering): Released all slaves [ 265.448136][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 265.551182][ T5854] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32 [ 265.551484][ T5854] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 266.253375][ T5718] usb 3-1: USB disconnect, device number 8 [ 266.764412][ T3346] hsr_slave_0: left promiscuous mode [ 266.906415][ T3346] hsr_slave_1: left promiscuous mode [ 266.907485][ T3346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.250009][ T3346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.019007][ T6745] syz.4.221 (6745) used greatest stack depth: 18240 bytes left [ 268.746260][ T3346] team0 (unregistering): Port device team_slave_1 removed [ 268.849460][ T3346] team0 (unregistering): Port device team_slave_0 removed [ 269.475908][ T6769] tipc: Enabling of bearer rejected, failed to enable media [ 269.521712][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 269.949158][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 271.391807][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'. [ 271.434704][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.437759][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.438010][ T6613] bridge_slave_0: entered allmulticast mode [ 271.487758][ T6613] bridge_slave_0: entered promiscuous mode [ 271.632570][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.651917][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.652187][ T6613] bridge_slave_1: entered allmulticast mode [ 271.746353][ T6613] bridge_slave_1: entered promiscuous mode [ 271.967632][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.933560][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.297495][ T6613] team0: Port device team_slave_0 added [ 273.311776][ T6613] team0: Port device team_slave_1 added [ 274.292797][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.292817][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.292848][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.324033][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.324067][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.324151][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.997439][ T6613] hsr_slave_0: entered promiscuous mode [ 277.171413][ T6613] hsr_slave_1: entered promiscuous mode [ 277.190881][ T6613] debugfs: 'hsr0' already exists in 'hsr' [ 277.190913][ T6613] Cannot create hsr debugfs directory [ 277.943444][ T6812] syz.0.230 (6812) used greatest stack depth: 17736 bytes left [ 285.000509][ T6903] 9pnet_fd: Insufficient options for proto=fd [ 285.711020][ T6613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.677874][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.685182][ T6613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.782224][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.797505][ T6613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.847169][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.370728][ T6613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.414421][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.980544][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 288.932722][ T6927] veth3: entered allmulticast mode [ 289.302244][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.229484][ T6944] veth3: entered allmulticast mode [ 290.309532][ T6944] bond2: (slave veth3): Enslaving as an active interface with an up link [ 290.428351][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.496037][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.509162][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.576734][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 290.624821][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.624959][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.810162][ T6966] veth5: entered allmulticast mode [ 300.139305][ T7032] 9pnet_fd: Insufficient options for proto=fd [ 302.598949][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.399136][ T6613] veth0_vlan: entered promiscuous mode [ 306.517115][ T6613] veth1_vlan: entered promiscuous mode [ 306.842779][ T6613] veth0_macvtap: entered promiscuous mode [ 306.962248][ T6613] veth1_macvtap: entered promiscuous mode [ 307.161141][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.244578][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.309964][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.310441][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.310487][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.310529][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.663531][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.294'. [ 310.811144][ T7134] veth5: entered allmulticast mode [ 311.219993][ T7143] veth3: entered allmulticast mode [ 311.625296][ T7155] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 312.022723][ T7157] veth3: entered allmulticast mode [ 312.111710][ T7157] bond1: (slave veth3): Enslaving as an active interface with an up link [ 312.114467][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.114489][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.596078][ T6121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.596105][ T6121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.159142][ T7183] netlink: 68 bytes leftover after parsing attributes in process `syz.4.305'. [ 315.407347][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.460304][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.464888][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.613580][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.615480][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.239770][ T5603] Bluetooth: hci0: Zero size dump init pkt [ 317.394299][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.394374][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.684133][ T7226] 9pnet_fd: Insufficient options for proto=fd [ 318.738865][ T5603] Bluetooth: hci5: command tx timeout [ 319.673821][ T159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.810447][ T5603] Bluetooth: hci5: command tx timeout [ 321.788184][ T159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.980783][ T5603] Bluetooth: hci5: command tx timeout [ 323.235875][ T159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.060090][ T5603] Bluetooth: hci5: command tx timeout [ 325.178616][ T5718] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 326.041573][ T159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.081654][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.081709][ T5718] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.081727][ T5718] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 326.083816][ T5718] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 326.083840][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.083855][ T5718] usb 4-1: Product: syz [ 326.083866][ T5718] usb 4-1: Manufacturer: syz [ 326.083877][ T5718] usb 4-1: SerialNumber: syz [ 327.627033][ T7288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.329'. [ 327.771990][ T5718] usb 4-1: unable to init card! (ret=-110) [ 327.824814][ T5718] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 327.875748][ T5718] usb 4-1: USB disconnect, device number 4 [ 328.324218][ T7297] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 329.249761][ T7297] bond3: (slave veth0_to_bond): making interface the new active one [ 329.359941][ T7297] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 332.843794][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 334.437084][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 334.463031][ T7351] team0 (unregistering): Port device team_slave_0 removed [ 334.532743][ T7351] team0 (unregistering): Port device team_slave_1 removed [ 334.565066][ T7361] orangefs_mount: mount request failed with -4 [ 334.822142][ T7370] veth5: entered allmulticast mode [ 335.895749][ T159] bridge_slave_1: left allmulticast mode [ 335.895785][ T159] bridge_slave_1: left promiscuous mode [ 335.896059][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.264191][ T159] bridge_slave_0: left allmulticast mode [ 336.264239][ T159] bridge_slave_0: left promiscuous mode [ 336.264598][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.251032][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 339.937976][ T7403] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 341.922345][ T7410] orangefs_mount: mount request failed with -4 [ 345.470051][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.560088][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.591425][ T159] bond0 (unregistering): Released all slaves [ 345.829186][ T7429] ip6erspan0: entered allmulticast mode [ 346.550776][ T7187] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.555186][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.673681][ T7187] bridge_slave_0: entered allmulticast mode [ 346.749950][ T7187] bridge_slave_0: entered promiscuous mode [ 346.914175][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.914450][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.915078][ T7187] bridge_slave_1: entered allmulticast mode [ 346.945791][ T7187] bridge_slave_1: entered promiscuous mode [ 347.133771][ T7187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.182578][ T7187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.457133][ T5857] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 348.741711][ T5857] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 348.741743][ T5857] usb 3-1: config 0 has no interface number 0 [ 348.741791][ T5857] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 348.744331][ T5857] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 348.744365][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 348.744388][ T5857] usb 3-1: Manufacturer: syz [ 348.744404][ T5857] usb 3-1: SerialNumber: syz [ 348.844401][ T5857] usb 3-1: config 0 descriptor?? [ 352.113558][ T7479] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 352.289528][ T7187] team0: Port device team_slave_0 added [ 352.403928][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.404167][ T7464] batadv_slave_1: entered promiscuous mode [ 352.799071][ T1244] usb 3-1: USB disconnect, device number 9 [ 353.060814][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.061484][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.268260][ T7482] veth5: entered allmulticast mode [ 353.320462][ T1244] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 353.377289][ T7482] bond1: (slave veth5): Enslaving as an active interface with a down link [ 353.413530][ T7187] team0: Port device team_slave_1 added [ 353.476848][ T1244] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 353.476880][ T1244] usb 3-1: config 0 has no interface number 0 [ 353.476926][ T1244] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 353.507126][ T1244] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 353.507161][ T1244] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 353.507184][ T1244] usb 3-1: Manufacturer: syz [ 353.507201][ T1244] usb 3-1: SerialNumber: syz [ 353.703874][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 353.764554][ T1244] usb 3-1: config 0 descriptor?? [ 353.766312][ T7492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 355.636808][ T1244] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 355.637114][ T1244] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 355.826978][ T1244] usb 3-1: USB disconnect, device number 10 [ 356.107478][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.107496][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.107526][ T7187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.177758][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.177776][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.177808][ T7187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.234430][ T5603] Bluetooth: hci0: Zero size dump init pkt [ 358.242548][ T159] hsr_slave_0: left promiscuous mode [ 358.279340][ T159] hsr_slave_1: left promiscuous mode [ 358.280479][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.280509][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.340201][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.340225][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.561751][ T159] veth1_macvtap: left promiscuous mode [ 358.561860][ T159] veth0_macvtap: left promiscuous mode [ 358.566860][ T159] veth1_vlan: left promiscuous mode [ 358.567081][ T159] veth0_vlan: left promiscuous mode [ 363.362215][ T159] team0 (unregistering): Port device team_slave_1 removed [ 363.461475][ T159] team0 (unregistering): Port device team_slave_0 removed [ 363.488175][ T7581] Device name not specified. [ 363.488175][ T7581] [ 366.338051][ T7187] hsr_slave_0: entered promiscuous mode [ 366.339517][ T7187] hsr_slave_1: entered promiscuous mode [ 366.341650][ T7187] debugfs: 'hsr0' already exists in 'hsr' [ 366.341723][ T7187] Cannot create hsr debugfs directory [ 366.398807][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 366.568705][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 366.574370][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.574405][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.577150][ T5841] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.577183][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.577206][ T5841] usb 4-1: Product: syz [ 366.577222][ T5841] usb 4-1: Manufacturer: syz [ 366.577238][ T5841] usb 4-1: SerialNumber: syz [ 366.672467][ T5841] usb 4-1: 0:2 : does not exist [ 366.741174][ T7596] unsupported nlmsg_type 40 [ 367.007939][ T5841] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 367.481326][ T5841] ================================================================== [ 367.481435][ T5841] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 367.481619][ T5841] Read of size 8 at addr ffffc900067f2008 by task kworker/0:7/5841 [ 367.481638][ T5841] [ 367.481706][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 367.481767][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.481782][ T5841] Workqueue: usb_hub_wq hub_event [ 367.481898][ T5841] Call Trace: [ 367.481913][ T5841] [ 367.481980][ T5841] dump_stack_lvl+0xe8/0x150 [ 367.482104][ T5841] print_address_description+0x55/0x1e0 [ 367.482147][ T5841] ? __list_add_valid_or_report+0x4e/0x130 [ 367.482205][ T5841] print_report+0x58/0x70 [ 367.482234][ T5841] kasan_report+0x117/0x150 [ 367.482326][ T5841] ? __list_add_valid_or_report+0x4e/0x130 [ 367.482365][ T5841] __list_add_valid_or_report+0x4e/0x130 [ 367.482402][ T5841] kcov_remote_stop+0x457/0x680 [ 367.482484][ T5841] hub_event+0x4789/0x4cf0 [ 367.482530][ T5841] ? __pfx_hub_event+0x10/0x10 [ 367.482550][ T5841] ? process_scheduled_works+0xa20/0x14e0 [ 367.482623][ T5841] ? rcu_is_watching+0x15/0xb0 [ 367.482712][ T5841] ? process_scheduled_works+0xa20/0x14e0 [ 367.482737][ T5841] process_scheduled_works+0xa8e/0x14e0 [ 367.482776][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.482803][ T5841] ? assign_work+0x3cf/0x5d0 [ 367.482828][ T5841] worker_thread+0xa47/0xfb0 [ 367.482859][ T5841] ? __kthread_parkme+0x71/0x1f0 [ 367.482915][ T5841] kthread+0x388/0x470 [ 367.482947][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 367.482971][ T5841] ? __pfx_kthread+0x10/0x10 [ 367.483002][ T5841] ret_from_fork+0x514/0xb70 [ 367.483114][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 367.483145][ T5841] ? __switch_to+0xc89/0x1420 [ 367.483197][ T5841] ? __pfx_kthread+0x10/0x10 [ 367.483229][ T5841] ret_from_fork_asm+0x1a/0x30 [ 367.483271][ T5841] [ 367.483309][ T5841] [ 367.483315][ T5841] The buggy address belongs to a vmalloc virtual mapping [ 367.483358][ T5841] Memory state around the buggy address: [ 367.483371][ T5841] ffffc900067f1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.483386][ T5841] ffffc900067f1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.483399][ T5841] >ffffc900067f2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.483410][ T5841] ^ [ 367.483421][ T5841] ffffc900067f2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.483435][ T5841] ffffc900067f2100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.483446][ T5841] ================================================================== [ 367.486723][ T5841] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 367.486749][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 367.486778][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.486793][ T5841] Workqueue: usb_hub_wq hub_event [ 367.486822][ T5841] Call Trace: [ 367.486831][ T5841] [ 367.486841][ T5841] vpanic+0x56c/0xa60 [ 367.486976][ T5841] ? __pfx_vpanic+0x10/0x10 [ 367.487025][ T5841] ? __pfx___schedule+0x10/0x10 [ 367.487232][ T5841] panic+0xc5/0xd0 [ 367.487266][ T5841] ? __pfx_panic+0x10/0x10 [ 367.487300][ T5841] ? preempt_schedule_thunk+0x16/0x40 [ 367.487330][ T5841] ? __list_add_valid_or_report+0x4e/0x130 [ 367.487364][ T5841] check_panic_on_warn+0x89/0xb0 [ 367.487593][ T5841] ? __list_add_valid_or_report+0x4e/0x130 [ 367.487628][ T5841] end_report+0x73/0x170 [ 367.487653][ T5841] ? __list_add_valid_or_report+0x4e/0x130 [ 367.487685][ T5841] kasan_report+0x128/0x150 [ 367.487710][ T5841] ? __list_add_valid_or_report+0x4e/0x130 [ 367.487749][ T5841] __list_add_valid_or_report+0x4e/0x130 [ 367.487785][ T5841] kcov_remote_stop+0x457/0x680 [ 367.487820][ T5841] hub_event+0x4789/0x4cf0 [ 367.487870][ T5841] ? __pfx_hub_event+0x10/0x10 [ 367.487892][ T5841] ? process_scheduled_works+0xa20/0x14e0 [ 367.487931][ T5841] ? rcu_is_watching+0x15/0xb0 [ 367.487959][ T5841] ? process_scheduled_works+0xa20/0x14e0 [ 367.487984][ T5841] process_scheduled_works+0xa8e/0x14e0 [ 367.488024][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.488053][ T5841] ? assign_work+0x3cf/0x5d0 [ 367.488080][ T5841] worker_thread+0xa47/0xfb0 [ 367.488114][ T5841] ? __kthread_parkme+0x71/0x1f0 [ 367.488148][ T5841] kthread+0x388/0x470 [ 367.488179][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 367.488209][ T5841] ? __pfx_kthread+0x10/0x10 [ 367.488241][ T5841] ret_from_fork+0x514/0xb70 [ 367.488275][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 367.488307][ T5841] ? __switch_to+0xc89/0x1420 [ 367.488336][ T5841] ? __pfx_kthread+0x10/0x10 [ 367.488370][ T5841] ret_from_fork_asm+0x1a/0x30 [ 367.488414][ T5841] [ 367.489038][ T5841] Kernel Offset: disabled