last executing test programs: 46.203496996s ago: executing program 3 (id=138): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) 43.786501479s ago: executing program 3 (id=141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x9, 0xf}, {0x7, 0x5}, {0x8, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 42.484724746s ago: executing program 3 (id=143): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000fe33ee40fd070400bfb9010203010902120001000000000904000000ff"], 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0) socket$igmp(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 38.498710085s ago: executing program 3 (id=150): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x407b, 0x8, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 38.043223907s ago: executing program 3 (id=154): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) unshare(0x22020400) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="928e", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0xd) fchdir(r6) unshare(0xc000000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 36.563565027s ago: executing program 3 (id=155): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x7, 0x2003) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) 20.490016067s ago: executing program 32 (id=155): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x7, 0x2003) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) 10.768429386s ago: executing program 4 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 ', 0xf) 7.266259591s ago: executing program 4 (id=204): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x700}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) 6.890670538s ago: executing program 0 (id=207): statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 6.818180556s ago: executing program 4 (id=208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 6.816953763s ago: executing program 2 (id=209): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x4018080) 6.649394471s ago: executing program 0 (id=211): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=@newtfilter={0x11c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xc}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xec, 0x2, [@TCA_BASIC_EMATCHES={0xe8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffe, 0x3, 0x8000}, {0xb, 0x400, 0x3, 0x7}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x15, 0x3, 0x2}, {0xd7dd, 0x80, 0x1, 0x9}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x81, 0x4, 0x9e0}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x40000003, @TCF_META_TYPE_VAR="1a5dc2d1c904eaa4c6ca", @TCF_META_TYPE_VAR="6726f3785279fbb9"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="698d14c3"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="581530e3", @TCF_META_TYPE_VAR="8c9e37c0ed75", @TCF_META_TYPE_VAR="93ad93f5e17c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7ef}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xdd10, 0x10, 0x1}, {0x4, 0x2, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x110a, 0x8, 0x7}, {0x1, 0x2, 0x5}}}, @TCF_EM_CANID={0x14, 0x2001, 0x0, 0x0, {{0xfffb, 0x7, 0x1}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x1ff}, {0x2, 0x38, 0x0, 0x6, 0x4, 0x66718691419c5e1e}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x11c}}, 0x0) 6.48392527s ago: executing program 2 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 ', 0xf) 6.327092847s ago: executing program 0 (id=214): mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) exit(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) recvmsg(r1, 0x0, 0x10002) 2.333108671s ago: executing program 2 (id=216): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x1}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000712000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) lseek(r2, 0x9, 0x1) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setuid(0xee01) iopl(0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r8, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) 2.300889956s ago: executing program 4 (id=217): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x700}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) 2.243970154s ago: executing program 0 (id=218): open$dir(&(0x7f0000000140)='./bus\x00', 0x208000, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2.001022761s ago: executing program 4 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.973209502s ago: executing program 0 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) r2 = getpid() capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0xc0f, 0x8, 0x9, 0x1, 0x0, 0xfff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40042c1) open$dir(&(0x7f0000000280)='./file1\x00', 0x202001, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000022a00)={0x8000001, 0x0, 0x0, 0x0, 0x2}) 1.449928637s ago: executing program 1 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 99999999', 0x17) 1.249287944s ago: executing program 2 (id=226): r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) fsopen(&(0x7f00000001c0)='9p\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.12000393s ago: executing program 1 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4ec, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "3effb2", 0x4b6, 0x2f, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x2b, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0x5}, @pad1]}, @srh={0x2c, 0xe, 0x4, 0x7, 0x9, 0x8, 0xa6, [@private1, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @private2]}, @dstopts={0x5d, 0x41, '\x00', [@generic={0x2, 0xaf, "15f08ba64ae34c300857468988eac9a2cd98d622b8ccc100b752c411cadf55153f91d7eaa4ac3b68075fc4f2ac45cad913a105f9b720350d5de39c225dc1ffa29f2dadd6abc8158f3469369e1163e01d510bb66173660b1aeaeb6d5dc86f8df8bebe9bea0ff5784ea1fbb27160ce5e988594d05745ff8b049e0f0299baddf399913c8751c6e606324006adcf161f87c059857e912a73e853632e5db0ae6126de16fdfab7e0a741b73544629df159ea"}, @calipso={0x7, 0x38, {0x0, 0xc, 0x3, 0x70, [0x84, 0x6, 0x4, 0x8, 0xc53, 0x1]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xf8, 0xdb, [0x7, 0x800]}}, @generic={0x9d, 0xd2, "c66eda23b187fda84272a03064a2da0e2e07d2bb7616d26e8bd9bc00a68f5fe38b0a30408467df927bd88a0ff58f1dd8b5e5179c73aa3cc30ceee0c3d72cc8551a12960dc63bdc58b52caca792fde3005c10c89b4b90dfca8e944d8862140dc81a6503a32f0aba0279f9bb69255b1abe72986a55485d63cd6981b485b11a0c13c3afaadff954200fc32bd874eb19f487a99e76d98ea67cb511da8d964ccb98cc4e8f3cc96ff40a9d7e49d43bd8c79eabc1d9d26dcc8b8063292a80eaeab79bd0bbbe9940067cbb2cee3d7d07eee0e58b1c7c"}, @enc_lim={0x4, 0x1, 0x26}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x6}, @generic={0x7, 0x20, "40d6832f71c9c4e87399472f7f88d14c7eaf8351cdeb5233f6b8d142d8c83324"}, @ra={0x5, 0x2, 0xeb6}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3, [0x8]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x200, 0x10, 0x0], "87c379b00e2e3725f91488d8fb2c33010f09d289134aa4c751dd9dc34be4f30c4044d088bc110d76b6864c3ea487645244cba00ff7cdeaddfcad6be1477fd06771a89934c0a8368f0e39da989108b79b75db77cc7b9d5c176a2f53432e105ec2bbb8f3dc8c09879ac27fb60debbcadab27628d89afd2fa48f947342ae12a80e32608933ab18c2277260e52b0452a3668788d36e4c7b36adcac1d13847ab2d5143712f78ea9ebaff80b9e81b9d6972417a68a0e932094ee0fc022dbce0113a8320f9c"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "fabe409b1082782bcecacfc058ceeca5c7290e4c4cda7168cd713c0ed1cd5ac13b4ef19181578831b61c7e78616a2b9dc273ff10179d211c16278382030b"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x40, 0x2, 0x1, 0x2, 0x7, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x0, 0x2, 0x1, 0x3, 0x5, 0x4}, 0x2, {0x3, 0x1f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "9992a30d20cf7f4f3b986ab7548bf76d01037490fe7c8ad03b15884eb715bbd98172ee3333bf526ead84907e88bdb9c5c872e6203a9e5702143e79aaf3fac1f6314b9f735b0ce5117392c953ba0496fdf3033797a5c3c0c0152d5b5cc446cf00fbed11c57724d393d484f741cfa3c13703c69893e4d5e8703690e0fc2094c5a1799cf9d4494af3608ffaef13aef194dee6efa2779f38663c5adcf429b5334d13135ddd998c2bd2c3319e"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xdddd1000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xf633, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x8000000000000001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffdffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000000002, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1000, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff7fffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r6, 0x25, 0x4, @void}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') pread64(r7, &(0x7f0000000080)=""/257, 0x101, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 943.619905ms ago: executing program 1 (id=228): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x407b, 0x8, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}, 0x40000002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 907.54407ms ago: executing program 2 (id=229): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) munlockall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 893.909948ms ago: executing program 0 (id=230): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 607.889513ms ago: executing program 1 (id=231): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x700}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) 450.723081ms ago: executing program 2 (id=232): unshare(0x2c020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7eff, 0xf, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 448.354774ms ago: executing program 4 (id=233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a90000771456137a0"], 0x0}, 0x0) 319.917145ms ago: executing program 1 (id=234): fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) unshare(0x22020400) 0s ago: executing program 1 (id=235): open$dir(&(0x7f0000000140)='./bus\x00', 0x208000, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. [ 83.429525][ T5571] cgroup: Unknown subsys name 'net' [ 83.653513][ T5571] cgroup: Unknown subsys name 'cpuset' [ 83.725957][ T5571] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.585896][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.044047][ T31] cfg80211: failed to load regulatory.db [ 87.978382][ T5585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.988280][ T5585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.989675][ T5585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.992609][ T5585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.993781][ T5585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.999216][ T5585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.006815][ T5585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.008009][ T5585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.012329][ T5585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.013368][ T5585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.057637][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.063446][ T5585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.064740][ T5585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.071584][ T5585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.073799][ T5585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.077500][ T4899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.083012][ T4899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.117711][ T5585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.129232][ T5585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.130079][ T5585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.232607][ T5585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.241586][ T5585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.242312][ T5585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.243396][ T5585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.244318][ T5585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.149150][ T5585] Bluetooth: hci0: command tx timeout [ 90.155431][ T5585] Bluetooth: hci3: command tx timeout [ 90.226101][ T5585] Bluetooth: hci2: command tx timeout [ 90.226402][ T61] Bluetooth: hci1: command tx timeout [ 90.305780][ T61] Bluetooth: hci4: command tx timeout [ 90.831283][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.831984][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.832094][ T5591] bridge_slave_0: entered allmulticast mode [ 90.834105][ T5591] bridge_slave_0: entered promiscuous mode [ 90.879571][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.879673][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.879771][ T5584] bridge_slave_0: entered allmulticast mode [ 90.881311][ T5584] bridge_slave_0: entered promiscuous mode [ 90.906872][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.906994][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.907506][ T5591] bridge_slave_1: entered allmulticast mode [ 90.910519][ T5591] bridge_slave_1: entered promiscuous mode [ 90.957520][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.957655][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.957825][ T5584] bridge_slave_1: entered allmulticast mode [ 90.960524][ T5584] bridge_slave_1: entered promiscuous mode [ 91.013269][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.013380][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.013482][ T5592] bridge_slave_0: entered allmulticast mode [ 91.015079][ T5592] bridge_slave_0: entered promiscuous mode [ 91.020980][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.021118][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.021265][ T5596] bridge_slave_0: entered allmulticast mode [ 91.025174][ T5596] bridge_slave_0: entered promiscuous mode [ 91.050417][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.050544][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.050692][ T5583] bridge_slave_0: entered allmulticast mode [ 91.053544][ T5583] bridge_slave_0: entered promiscuous mode [ 91.081528][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.081650][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.082703][ T5592] bridge_slave_1: entered allmulticast mode [ 91.087277][ T5592] bridge_slave_1: entered promiscuous mode [ 91.089949][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.090072][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.093956][ T5596] bridge_slave_1: entered allmulticast mode [ 91.097601][ T5596] bridge_slave_1: entered promiscuous mode [ 91.127088][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.127216][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.127713][ T5583] bridge_slave_1: entered allmulticast mode [ 91.141782][ T5583] bridge_slave_1: entered promiscuous mode [ 91.153602][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.219727][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.239341][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.273866][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.316437][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.319585][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.341539][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.364439][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.367832][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.390881][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.392856][ T5591] team0: Port device team_slave_0 added [ 91.438963][ T5584] team0: Port device team_slave_0 added [ 91.456191][ T5591] team0: Port device team_slave_1 added [ 91.487016][ T5584] team0: Port device team_slave_1 added [ 91.514665][ T5592] team0: Port device team_slave_0 added [ 91.524005][ T5596] team0: Port device team_slave_0 added [ 91.551609][ T5583] team0: Port device team_slave_0 added [ 91.568938][ T5592] team0: Port device team_slave_1 added [ 91.570671][ T5596] team0: Port device team_slave_1 added [ 91.593475][ T5583] team0: Port device team_slave_1 added [ 91.596713][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.596727][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.596750][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.643011][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.643028][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.643061][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.667571][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.667586][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.667610][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.722669][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.722686][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.722709][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.764332][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.764348][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.764372][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.769024][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.769038][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.769061][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.783631][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.783646][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.783669][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.796247][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.796262][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.796285][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.798352][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.798364][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.798386][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.807928][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.807943][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.807966][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.989810][ T5591] hsr_slave_0: entered promiscuous mode [ 91.991384][ T5591] hsr_slave_1: entered promiscuous mode [ 92.028779][ T5584] hsr_slave_0: entered promiscuous mode [ 92.030082][ T5584] hsr_slave_1: entered promiscuous mode [ 92.031527][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 92.031625][ T5584] Cannot create hsr debugfs directory [ 92.160087][ T5596] hsr_slave_0: entered promiscuous mode [ 92.160903][ T5596] hsr_slave_1: entered promiscuous mode [ 92.161499][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 92.161520][ T5596] Cannot create hsr debugfs directory [ 92.172040][ T5592] hsr_slave_0: entered promiscuous mode [ 92.173361][ T5592] hsr_slave_1: entered promiscuous mode [ 92.174260][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 92.174282][ T5592] Cannot create hsr debugfs directory [ 92.206853][ T5583] hsr_slave_0: entered promiscuous mode [ 92.208209][ T5583] hsr_slave_1: entered promiscuous mode [ 92.209114][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 92.209136][ T5583] Cannot create hsr debugfs directory [ 92.225383][ T61] Bluetooth: hci3: command tx timeout [ 92.225418][ T61] Bluetooth: hci0: command tx timeout [ 92.305440][ T5585] Bluetooth: hci1: command tx timeout [ 92.315582][ T5585] Bluetooth: hci2: command tx timeout [ 92.385489][ T5585] Bluetooth: hci4: command tx timeout [ 93.385112][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.446502][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.456074][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.480585][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.493889][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.509527][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.532684][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.573626][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.704729][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.738904][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.744452][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.789474][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.794576][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.819195][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.843567][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.881243][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.048162][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.078518][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.083436][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.131797][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.136870][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.182412][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.205077][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.243958][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.305648][ T61] Bluetooth: hci3: command tx timeout [ 94.305740][ T5585] Bluetooth: hci0: command tx timeout [ 94.394104][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.395644][ T61] Bluetooth: hci1: command tx timeout [ 94.395741][ T5585] Bluetooth: hci2: command tx timeout [ 94.440807][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.458711][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.465684][ T5585] Bluetooth: hci4: command tx timeout [ 94.510906][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.516884][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.529657][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.560248][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.589558][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.619604][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.738861][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.763455][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.789462][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.811560][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.848837][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.857248][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.898497][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.910116][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.911078][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.923123][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.958320][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.004194][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.004443][ T3271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.046817][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.163230][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.223650][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.223822][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.267957][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.286164][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.286390][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.417659][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.473617][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.473816][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.504356][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.571461][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.571608][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.710382][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.739819][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.768955][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.769185][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.851301][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.851406][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.921700][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.978578][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.978730][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.077545][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.077637][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.385551][ T61] Bluetooth: hci3: command tx timeout [ 96.385598][ T5585] Bluetooth: hci0: command tx timeout [ 96.465404][ T61] Bluetooth: hci1: command tx timeout [ 96.465797][ T5585] Bluetooth: hci2: command tx timeout [ 96.545888][ T5585] Bluetooth: hci4: command tx timeout [ 96.689219][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.278079][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.757401][ T5596] veth0_vlan: entered promiscuous mode [ 97.847132][ T5596] veth1_vlan: entered promiscuous mode [ 97.900468][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.950374][ T5591] veth0_vlan: entered promiscuous mode [ 98.010139][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.026520][ T5591] veth1_vlan: entered promiscuous mode [ 98.096119][ T5596] veth0_macvtap: entered promiscuous mode [ 98.120018][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.124535][ T5596] veth1_macvtap: entered promiscuous mode [ 98.193601][ T5592] veth0_vlan: entered promiscuous mode [ 98.209107][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.235030][ T5591] veth0_macvtap: entered promiscuous mode [ 98.248762][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.274159][ T5592] veth1_vlan: entered promiscuous mode [ 98.286371][ T5591] veth1_macvtap: entered promiscuous mode [ 98.308408][ T5583] veth0_vlan: entered promiscuous mode [ 98.356978][ T5583] veth1_vlan: entered promiscuous mode [ 98.416241][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.432125][ T5584] veth0_vlan: entered promiscuous mode [ 98.442485][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.628317][ T5592] veth0_macvtap: entered promiscuous mode [ 98.648472][ T5584] veth1_vlan: entered promiscuous mode [ 98.721108][ T5592] veth1_macvtap: entered promiscuous mode [ 98.852628][ T5583] veth0_macvtap: entered promiscuous mode [ 98.864225][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.864247][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.998389][ T5583] veth1_macvtap: entered promiscuous mode [ 99.012304][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.096245][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.117198][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.117221][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.163116][ T5584] veth0_macvtap: entered promiscuous mode [ 99.212388][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.246223][ T5584] veth1_macvtap: entered promiscuous mode [ 99.252297][ T3271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.252317][ T3271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.279340][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.607526][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.642914][ T3271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.642933][ T3271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.821604][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.358806][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.358830][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.379492][ T2982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.193452][ T5779] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.378939][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.541591][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.541611][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.625021][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.625039][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.660299][ T5772] usb 4-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 101.707402][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.707441][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 101.707488][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.781405][ T5772] usb 4-1: config 0 descriptor?? [ 102.001591][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.001612][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.471947][ T5775] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.495965][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.495986][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.697140][ T5772] usbhid 4-1:0.0: can't add hid device: -71 [ 102.697284][ T5772] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.807371][ T5772] usb 4-1: USB disconnect, device number 2 [ 103.305664][ T1894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.305875][ T1894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306061][ T1894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306233][ T1894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306732][ T1894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.307272][ T3003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.307569][ T3003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.322658][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.322677][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.466803][ T3003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.466926][ T3003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.467044][ T3003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.516629][ T3003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.539341][ T3003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.540027][ T3428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.540176][ T3428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.540289][ T3428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.540415][ T3428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.540560][ T3428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.540667][ T3428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.665281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.685282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.695282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.705282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.715282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.725282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.735333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.745306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.755284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.765286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.095458][ T3428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.595750][ T5804] comedi comedi3: pcl818: I/O base address not correctly aligned [ 111.031105][ T5816] syz.0.1 (5816) used greatest stack depth: 19112 bytes left [ 118.458154][ T5316] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.190008][ T5316] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 119.251801][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.251832][ T5316] usb 2-1: Product: syz [ 119.251847][ T5316] usb 2-1: Manufacturer: syz [ 119.251862][ T5316] usb 2-1: SerialNumber: syz [ 119.528591][ T5316] usb 2-1: config 0 descriptor?? [ 119.573648][ T5316] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 119.573665][ T5316] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 119.573703][ T5316] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 120.093672][ T5682] usb 2-1: USB disconnect, device number 2 [ 120.228429][ T5865] random: crng reseeded on system resumption [ 121.422540][ T5869] jffs2: notice: (5869) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.469568][ T5865] Restarting kernel threads ... [ 121.559773][ T5865] Done restarting kernel threads. [ 123.187306][ T5891] comedi comedi3: pcl818: I/O base address not correctly aligned [ 124.105432][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.255302][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 124.256171][ T36] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.259240][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.303536][ T36] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.303576][ T36] usb 5-1: Product: syz [ 124.303591][ T36] usb 5-1: Manufacturer: syz [ 124.303606][ T36] usb 5-1: SerialNumber: syz [ 124.492845][ T36] usb 5-1: config 0 descriptor?? [ 125.289085][ T5902] Bluetooth: MGMT ver 1.23 [ 126.397648][ T36] usb 5-1: can't set config #0, error -71 [ 126.413837][ T36] usb 5-1: USB disconnect, device number 2 [ 126.874060][ T5922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36'. [ 127.222372][ T5682] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.399410][ T5682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.399466][ T5682] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 127.411478][ T5682] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.411505][ T5682] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.411552][ T5682] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 127.411589][ T5682] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 127.411629][ T5682] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 127.411656][ T5682] usb 5-1: config 1 interface 1 has no altsetting 0 [ 127.429253][ T5682] usb 5-1: string descriptor 0 read error: -22 [ 127.429405][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.884727][ T5682] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 129.098783][ T5682] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 129.098804][ T5682] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 129.098815][ T5682] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 129.391965][ T5932] comedi comedi3: pcl818: I/O base address not correctly aligned [ 130.511467][ T5942] jffs2: notice: (5942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 131.263492][ T5942] Zero length message leads to an empty skb [ 131.449724][ T5682] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 131.569085][ T5682] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 131.982514][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.53'. [ 131.992939][ T5682] usb 5-1: USB disconnect, device number 3 [ 132.407133][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.194894][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194943][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.846601][ T10] usb 4-1: device descriptor read/64, error -71 [ 135.141572][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.625007][ T5973] comedi comedi3: pcl818: I/O base address not correctly aligned [ 136.535456][ T10] usb 4-1: device descriptor read/64, error -71 [ 136.879409][ T10] usb usb4-port1: attempt power cycle [ 137.070593][ T5985] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 137.952143][ T5987] jffs2: notice: (5987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 138.315681][ T5772] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.325406][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.352138][ T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.617444][ T10] usb 4-1: device descriptor read/8, error -71 [ 139.654460][ T36] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 139.654632][ T5772] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 139.675737][ T5772] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.675768][ T5772] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 139.708769][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.708798][ T36] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 139.708837][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.762652][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.762673][ T5772] usb 1-1: Product: syz [ 139.762682][ T5772] usb 1-1: Manufacturer: syz [ 139.762690][ T5772] usb 1-1: SerialNumber: syz [ 140.114994][ T5772] usb 1-1: Limiting number of CPorts to U8_MAX [ 140.338095][ T5316] usb 2-1: USB disconnect, device number 3 [ 140.338420][ T5682] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.525577][ T5682] usb 5-1: Using ep0 maxpacket: 32 [ 140.534299][ T5682] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.537508][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 140.537536][ T5682] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 140.544841][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.544867][ T5682] usb 5-1: Product: syz [ 140.544880][ T5682] usb 5-1: Manufacturer: syz [ 140.544893][ T5682] usb 5-1: SerialNumber: syz [ 140.994014][ T5682] usb 5-1: config 0 descriptor?? [ 141.040256][ T5682] hub 5-1:0.0: bad descriptor, ignoring hub [ 141.040300][ T5682] hub 5-1:0.0: probe with driver hub failed with error -5 [ 141.746970][ T5682] usb 5-1: USB disconnect, device number 4 [ 142.105774][ T6010] 9p: Bad value for 'source' [ 143.097264][ T5772] usb 1-1: USB disconnect, device number 2 [ 143.137266][ C1] usb 1-1: failed to resubmit arpc in-urb: -19 [ 143.137333][ C1] usb 1-1: failed to resubmit arpc in-urb: -19 [ 143.143420][ T5772] usb 1-1: failed to send ARPC request 4: -19 [ 143.143502][ T5772] usb 1-1: failed to execute ARPC: -19 [ 143.143516][ T5772] usb 1-1: failed to flush cport 0: -19 [ 143.143532][ T5772] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 143.143688][ T5772] usb 1-1: failed to send ARPC request 2: -19 [ 143.143762][ T5772] usb 1-1: failed to execute ARPC: -19 [ 143.143774][ T5772] usb 1-1: failed to quiesce cport 0: -19 (0) [ 143.143790][ T5772] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 143.143946][ T5772] usb 1-1: failed to send ARPC request 3: -19 [ 143.144018][ T5772] usb 1-1: failed to execute ARPC: -19 [ 143.144031][ T5772] usb 1-1: failed to clear cport 0: -19 [ 143.144045][ T5772] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 143.622346][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 143.642232][ T6013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.71'. [ 144.105018][ T6021] comedi comedi3: pcl818: I/O base address not correctly aligned [ 144.612328][ T6024] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 146.945398][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.285159][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.285330][ T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 147.290385][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.290411][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.290464][ T10] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 147.290513][ T10] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 147.290558][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 147.290586][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 147.307060][ T10] usb 5-1: string descriptor 0 read error: -22 [ 147.307226][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.645439][ T5682] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.640418][ T10] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 148.650213][ T5682] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 148.657802][ T5682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.657827][ T5682] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 148.657865][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.864688][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 148.864720][ T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 148.864737][ T10] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 148.967402][ T6052] 9p: Bad value for 'source' [ 149.401363][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 149.490501][ T6051] input: syz0 as /devices/virtual/input/input5 [ 149.520187][ T5682] usb 2-1: USB disconnect, device number 4 [ 149.820956][ T6059] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.821063][ T6059] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 149.833027][ T6059] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.833058][ T6059] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 150.410482][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 152.266954][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 152.307500][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 152.322660][ T10] usb 5-1: USB disconnect, device number 5 [ 152.408296][ T5577] udevd[5577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.903764][ T6067] comedi comedi3: pcl818: I/O base address not correctly aligned [ 153.158288][ T5603] udevd[5603]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 153.320534][ T6073] 9pnet_fd: p9_fd_create_unix (6073): problem connecting socket: ./file0: -111 [ 153.825547][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.134570][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.151791][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.151810][ T10] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 154.151821][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.151853][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 154.151869][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 154.224036][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.224067][ T10] usb 3-1: Product: syz [ 154.224082][ T10] usb 3-1: Manufacturer: syz [ 154.296860][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 154.296883][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 154.297316][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 155.678164][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 155.792657][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.744558][ T5587] usb 3-1: USB disconnect, device number 2 [ 158.098478][ T5820] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.257088][ T5820] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 158.258645][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.258669][ T5820] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 158.258705][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.370153][ T6109] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.370170][ T6109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 158.371811][ T6109] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.371902][ T6109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 160.198283][ T5682] usb 4-1: USB disconnect, device number 7 [ 163.604880][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 163.667359][ T6139] netlink: 'syz.4.106': attribute type 10 has an invalid length. [ 164.633595][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 167.104875][ T6151] syz.2.111 (6151) used greatest stack depth: 18304 bytes left [ 167.175385][ T5820] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.358085][ T5820] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 167.363085][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.363142][ T5820] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.363187][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.921497][ T36] usb 5-1: USB disconnect, device number 6 [ 172.614542][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 172.779132][ T199] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.126474][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 173.463230][ T199] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 174.126228][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.126271][ T199] usb 4-1: Product: syz [ 174.126287][ T199] usb 4-1: Manufacturer: syz [ 174.126346][ T199] usb 4-1: SerialNumber: syz [ 174.383611][ T199] usb 4-1: config 0 descriptor?? [ 175.809249][ T199] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.865062][ T199] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 176.213823][ T5585] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 178.072730][ T5702] usb 4-1: USB disconnect, device number 8 [ 180.377084][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 180.638309][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 180.638335][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 180.638361][ T6265] netlink: 'syz.3.141': attribute type 15 has an invalid length. [ 180.638376][ T6265] netlink: 'syz.3.141': attribute type 18 has an invalid length. [ 181.894734][ T6266] capability: warning: `syz.0.140' uses deprecated v2 capabilities in a way that may be insecure [ 182.295375][ T36] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 182.446306][ T36] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 182.467724][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.467742][ T36] usb 4-1: Product: syz [ 182.467751][ T36] usb 4-1: Manufacturer: syz [ 182.467759][ T36] usb 4-1: SerialNumber: syz [ 182.524427][ T36] usb 4-1: config 0 descriptor?? [ 182.597812][ T36] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 182.597838][ T36] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 182.597905][ T36] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 182.927835][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 183.912442][ T5820] usb 4-1: USB disconnect, device number 9 [ 186.260114][ T27] process 6297 (syz.1.152) no longer affine to cpu1 [ 187.393108][ T6295] smpboot: CPU 1 is now offline [ 195.619306][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.619356][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.622176][ T5702] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 196.268820][ T5820] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 196.325352][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.653218][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.653256][ T5820] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 196.822942][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 196.909605][ T5820] usb 2-1: config 100 has an invalid interface number: 173 but max is 0 [ 196.982488][ T5820] usb 2-1: config 100 has no interface number 0 [ 196.982528][ T5820] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 196.982543][ T5820] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1160, setting to 8 [ 196.982559][ T5820] usb 2-1: config 100 interface 173 has no altsetting 0 [ 197.174221][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.317932][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 197.317954][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.914545][ T5820] usb 2-1: string descriptor 0 read error: -22 [ 197.929385][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.929403][ T10] usb 1-1: Product: syz [ 197.929412][ T10] usb 1-1: Manufacturer: syz [ 197.929420][ T10] usb 1-1: SerialNumber: syz [ 197.987781][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.867452][ T10] usb 1-1: config 0 descriptor?? [ 199.937908][ T5820] usb 2-1: can't set config #100, error -71 [ 199.957639][ T10] usb 1-1: can't set config #0, error -71 [ 200.015748][ T10] usb 1-1: USB disconnect, device number 3 [ 200.018089][ T5820] usb 2-1: USB disconnect, device number 5 [ 204.559613][ T6375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.625588][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 204.789940][ T10] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 204.823235][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.823254][ T10] usb 3-1: Product: syz [ 204.823262][ T10] usb 3-1: Manufacturer: syz [ 204.823270][ T10] usb 3-1: SerialNumber: syz [ 204.954793][ T10] usb 3-1: config 0 descriptor?? [ 205.045099][ T10] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 205.045115][ T10] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 205.045162][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 205.259229][ T5682] usb 3-1: USB disconnect, device number 3 [ 205.471484][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.518533][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.521476][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.535843][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.545379][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.106845][ T5682] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 206.291690][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.291730][ T5682] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 206.315953][ T5682] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 206.315972][ T5682] usb 1-1: config 100 has no interface number 0 [ 206.316076][ T5682] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 206.316092][ T5682] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1160, setting to 8 [ 206.316107][ T5682] usb 1-1: config 100 interface 173 has no altsetting 0 [ 206.367098][ T5682] usb 1-1: string descriptor 0 read error: -22 [ 206.367199][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.459147][ T6397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.568427][ T5682] metro_usb 1-1:100.173: required endpoints missing [ 206.787312][ T5820] usb 1-1: USB disconnect, device number 4 [ 207.666648][ T5585] Bluetooth: hci5: command tx timeout [ 209.745460][ T5585] Bluetooth: hci5: command tx timeout [ 210.785335][ T4899] Bluetooth: hci1: command 0x0406 tx timeout [ 211.615382][ T6423] gadgetfs: bound to dummy_udc driver [ 211.825755][ T61] Bluetooth: hci5: command tx timeout [ 211.907485][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 211.907795][ C0] gadgetfs: connected [ 211.908336][ T10] gadgetfs: disconnected [ 211.985870][ T4899] Bluetooth: hci0: command 0x0406 tx timeout [ 211.985998][ T4899] Bluetooth: hci2: command 0x0406 tx timeout [ 211.986101][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 212.129708][ C0] gadgetfs: connected [ 212.129843][ T10] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 212.131786][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.224626][ C0] gadgetfs: configuration #1 [ 212.234656][ T6423] gadgetfs: suspended from state 3 [ 212.234934][ T6423] gadgetfs: disconnected [ 212.248961][ T5682] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 212.453945][ T5682] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 212.540406][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.540426][ T5682] usb 3-1: Product: syz [ 212.540434][ T5682] usb 3-1: Manufacturer: syz [ 212.540443][ T5682] usb 3-1: SerialNumber: syz [ 212.596135][ T5682] usb 3-1: config 0 descriptor?? [ 212.603060][ T10] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 212.649994][ T5682] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 212.650010][ T5682] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 212.650048][ T5682] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 212.993673][ T5820] usb 3-1: USB disconnect, device number 4 [ 213.328693][ T10] usb 1-1: USB disconnect, device number 5 [ 213.328779][ C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 213.905377][ T5589] Bluetooth: hci5: command tx timeout [ 217.412119][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.688209][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.221'. [ 222.827216][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.729931][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.835330][ T5682] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 224.025297][ T5682] usb 1-1: Using ep0 maxpacket: 8 [ 224.026047][ T5682] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 224.054110][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.054127][ T5682] usb 1-1: Product: syz [ 224.054136][ T5682] usb 1-1: Manufacturer: syz [ 224.054145][ T5682] usb 1-1: SerialNumber: syz [ 224.119293][ T5682] usb 1-1: config 0 descriptor?? [ 224.136549][ T5682] gspca_main: se401-2.14.0 probing 047d:5003 [ 224.494773][ T5820] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 224.494788][ T5820] #PF: supervisor read access in kernel mode [ 224.494799][ T5820] #PF: error_code(0x0000) - not-present page [ 224.494806][ T5820] PGD 8000000026644067 P4D 8000000026644067 PUD 0 [ 224.494824][ T5820] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 224.494845][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.494859][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.494866][ T5820] Workqueue: usb_hub_wq hub_event [ 224.494888][ T5820] RIP: 0010:kcov_remote_start+0x29c/0x710 [ 224.494903][ T5820] Code: b6 8d 4c 8b b8 b8 22 a2 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 40 1b 22 8e 4d 8b 3f 49 81 ff 40 1b 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e6 c2 0c 03 84 c0 74 0e 49 8b 07 49 [ 224.494913][ T5820] RSP: 0018:ffffc900052c77c8 EFLAGS: 00010207 [ 224.494923][ T5820] RAX: 0000000000000000 RBX: ffff888031c75d00 RCX: 0000000000000000 [ 224.494932][ T5820] RDX: 0000000065cf6a7c RSI: 0000000000000001 RDI: ffffffff8bcb9820 [ 224.494940][ T5820] RBP: 0000000000100000 R08: ffffffff8b506e42 R09: 0000000000000000 [ 224.494947][ T5820] R10: 0000000000000000 R11: ffffffff8e1c3780 R12: 0000000000000002 [ 224.494955][ T5820] R13: 0000000000000001 R14: ffff888028f97800 R15: 0000000000000000 [ 224.494962][ T5820] FS: 0000000000000000(0000) GS:ffff888125c07000(0000) knlGS:0000000000000000 [ 224.494972][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.494980][ T5820] CR2: 0000000000000010 CR3: 0000000031b66000 CR4: 00000000003526f0 [ 224.494991][ T5820] Call Trace: [ 224.494995][ T5820] [ 224.495001][ T5820] hub_event+0x15d/0x4cf0 [ 224.495018][ T5820] ? rt_spin_unlock+0x165/0x200 [ 224.495036][ T5820] ? __lock_acquire+0x683/0x2ce0 [ 224.495049][ T5820] ? register_lock_class+0x31/0x2e0 [ 224.495061][ T5820] ? __lock_acquire+0x683/0x2ce0 [ 224.495075][ T5820] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.495094][ T5820] ? __pfx_hub_event+0x10/0x10 [ 224.495109][ T5820] ? process_scheduled_works+0x97a/0x1630 [ 224.495124][ T5820] ? rcu_is_watching+0x16/0xb0 [ 224.495138][ T5820] ? process_scheduled_works+0x97a/0x1630 [ 224.495151][ T5820] process_scheduled_works+0xc3d/0x1630 [ 224.495170][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.495185][ T5820] ? assign_work+0x3cf/0x5d0 [ 224.495198][ T5820] worker_thread+0xa47/0xfb0 [ 224.495214][ T5820] ? __kthread_parkme+0x71/0x1f0 [ 224.495231][ T5820] kthread+0x38b/0x470 [ 224.495247][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 224.495260][ T5820] ? __pfx_kthread+0x10/0x10 [ 224.495276][ T5820] ret_from_fork+0x514/0xb70 [ 224.495293][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 224.495308][ T5820] ? __switch_to+0xc89/0x1420 [ 224.495322][ T5820] ? __pfx_kthread+0x10/0x10 [ 224.495338][ T5820] ret_from_fork_asm+0x1a/0x30 [ 224.495359][ T5820] [ 224.495363][ T5820] Modules linked in: [ 224.495371][ T5820] CR2: 0000000000000010 [ 224.495378][ T5820] ---[ end trace 0000000000000000 ]--- [ 224.495384][ T5820] RIP: 0010:kcov_remote_start+0x29c/0x710 [ 224.495396][ T5820] Code: b6 8d 4c 8b b8 b8 22 a2 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 40 1b 22 8e 4d 8b 3f 49 81 ff 40 1b 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e6 c2 0c 03 84 c0 74 0e 49 8b 07 49 [ 224.495405][ T5820] RSP: 0018:ffffc900052c77c8 EFLAGS: 00010207 [ 224.495415][ T5820] RAX: 0000000000000000 RBX: ffff888031c75d00 RCX: 0000000000000000 [ 224.495422][ T5820] RDX: 0000000065cf6a7c RSI: 0000000000000001 RDI: ffffffff8bcb9820 [ 224.495430][ T5820] RBP: 0000000000100000 R08: ffffffff8b506e42 R09: 0000000000000000 [ 224.495437][ T5820] R10: 0000000000000000 R11: ffffffff8e1c3780 R12: 0000000000000002 [ 224.495444][ T5820] R13: 0000000000000001 R14: ffff888028f97800 R15: 0000000000000000 [ 224.495452][ T5820] FS: 0000000000000000(0000) GS:ffff888125c07000(0000) knlGS:0000000000000000 [ 224.495461][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.495469][ T5820] CR2: 0000000000000010 CR3: 0000000031b66000 CR4: 00000000003526f0 [ 224.495478][ T5820] Kernel panic - not syncing: Fatal exception [ 224.495537][ T5820] Kernel Offset: disabled