last executing test programs: 11.059276615s ago: executing program 1 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6e, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x5}}}}, @qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x81}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}]}}]}, 0x164}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02c5150d44df388611cd97cfa0a3fed26f75e79c0974641f432d3898c7d3c675ba2c3ce3d6fe05a7512383bfbe1eb6d1810c27d15dbe1162d734c030ec6f8622998ae46b037973c99e98a911412b", 0x4e}, {&(0x7f0000000340)="e6f616b848c25d1364996bdebcb618b09a9cdd91df285326497368692222f3fd6227cf49d8de356dd8deb6b5e7c8b2c1e4d1ea1680f4968daf7c4589e66c71ade65011b5cb2a4c", 0x47}, {&(0x7f00000003c0)="ba094f7f1691908f95ba6bb6e2f77ed31bc14707f30a41717cb4924ca63bd44d13", 0x21}], 0x3, 0x0, 0x0, 0x890}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0xfffffffc, 0x7a120, 0x7, {0x98c1, 0x400}, 0x200}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 10.189209667s ago: executing program 1 (id=139): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x10000, 0x88, 0x5}, 0x18) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x10200, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 9.844603636s ago: executing program 0 (id=141): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_connect(0x1, 0x6aa, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xd5, 0x8a, 0xcd, 0x20, 0x1066, 0x600, 0x3bc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x698, 0x2, 0xac, 0x6, 0x20, 0x8, "", [{{0x9, 0x4, 0xb, 0x81, 0x10, 0x69, 0x19, 0xe0, 0x6, [], [{{0x9, 0x5, 0xd, 0xe6c9b9c8226b437d, 0x3ff, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x74d8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf1, 0x1, [@generic={0x60, 0x3, "04293d5c00b5921815da197215485b7b6eea22881fabd07860b213e8ebed27c38fd4835a4b76db092bfbb9b89e8ae594020d5b6ffbb46dc383ecfe550bc922b98a33da97504fb42dac42b49e7cbfd3606c8c4ca6b5fc87770f4c61935191"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xbd, 0xeb, 0x4}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x6, 0x3, 0x30, [@generic={0xc8, 0xa, "0af975299672714db6c856528425b6c00c186ed55cef83dcb25e647d6d96582c2f29a993ee926d2f76605b5dd656e5e4df8a82050f89248bbe261e7a55c4a3bdaf31b2b882691fa3ceaf9c874d409cc02d3c267a7183c50f249bbf59cc582dff18af630fec681f2969bd490c17a9acccc1910ff9bf109bdc261587a88978e5633dc8f31c637600953796a9fe3c420bd35baa79e052e2de9a966d82c72eacd4ac32d3f7fe2b5214640e1b2357ffb18fd852b637bffb09144f3a73608dfb7b99c21c1c91003d80"}, @generic={0x41, 0x10, "6dee54ac6416c1e907c9eefd298f4bc161b0c6f1936bf7c9006df80241c736f4cbe7eefae53d02993a930bea982b5d8946752a5b3874af596f79b526b60a0a"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x38, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x958}]}}, {{0x9, 0x5, 0x80, 0x6, 0x0, 0x9, 0x10, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1}, @generic={0x14, 0x1, "117aa1a653d3922c9da7305d6434b41758f5"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x81, 0x3, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7d, 0x5, 0xfa}}, {{0x9, 0x5, 0x7, 0x11, 0x8, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x7, 0xed, 0x20, [@generic={0x92, 0x1, "184e9cd7229ac39a36c36094b40b00d22d09cf229ede8e5d36f1a1401f3e79475e8241806108f868b2e5a00da78eadcdf011f963dd0f0873f0153813d59ac0d9715363305c33e0696d592e275a72bb7d8be9ded26f62229a9406722ab46c467f516b4b1702b210c94c20556e067b697f626790014a824fedb685bdb53ad84810badcc12b5d10dd139b8d944f473f691a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7e, 0x93f2}]}}, {{0x9, 0x5, 0xd, 0xa, 0x400, 0xe, 0x9, 0x9, [@generic={0xa3, 0x22, "2d7465010c5585499d935de4d275f95586bda0e53683a3de58c48c561206e09bd2e6c8ba74490beb50dc6e7af23d2df688c8d2903a87eef9f5f5b35f7184587ddeb9c037faa99e88039ebce817bb66322925e55fa5e5052ec0a6ccd58ae90f585afc900057433895ddd9bd7fdb027d5004b25b0ceeda55522224ce54da850f5d9a12ee078e497a6144c42d0f82f3f88b1b77c2a1bcfd3716bf9e081983e5648309"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xcc}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x6, 0x9, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x8}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0xac, 0x6}}]}}, {{0x9, 0x4, 0x80, 0x18, 0xc, 0x8c, 0x63, 0xc6, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x60, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xf, 0x4, 0x2, [@generic={0xbe, 0x3, "1787299603b59e1b90b76a613e50120f01547b3827836ab257eff2be60379d5efa723489ca287f3ec2d87938105521025a3d15a030193328b800be4692cb43e6c58a3b40a55d1846d3d0c5748c5f4fb81780a9cfc04d84dfc670af2b083fe743a4489d28c1ded62d60ce1e21c591c66384ebd2ce2d450e533b93ee28f40df7e0092935124f932e6f9893ecad7009614cc5a3f658419e04e4cebf2d9ff48bc69fdffd4d21e26978e5325149e0dcd994f185c57a2a8e8a368f33261645"}]}}, {{0x9, 0x5, 0x8, 0x11, 0x400, 0xc, 0xfc, 0x2a}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x28, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x1, 0x6, 0x0, [@generic={0xc2, 0xa, "bbaa2f3269b082dc7ec191f376874a27409cba863648f4cf85d64830a1239de3558a9284ddf2f51f904fa1760ab0546b728d98a915a0a70495c489b0179c8256934f2b713b3f1bf28ddea115be1ce1db478d8ecb655bcef243ac720d599000b941d62978afc5f18d7d737d0d18277e18855bd1ec0b2c61be5f079315e4ccdee1d4ddc18ab69c1fa9e25c5d1b567fad55f1d024a4db539fc9efd5a3eb0d33c9b688101a6dba7bb1a3ad6cc5cb3fa4e9454366addefb318dd4a688b3eb8de1e4a3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x40, 0x8}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x9, 0x72, 0x4, [@generic={0xd8, 0x23, "b5469e125375b58e179aeaaf0fb48a8349e5322f9556129db2b1f4d5634427f9f8ec4048ef973e076549f7960169043a250ceb8d4823f882ad8af18df28919b1a9e6abb41b13c7f897f65425c14d7597f58a1c1a54f07901f36bc6eef636c0771ef1e7bea8fe8e14ceb08a3f3d5140568bf5827b8690f698c253f200dd5dd03efec2541b1f71ebf3d16d8a0fd3fd2771267efd9e9f61e3fceec80322efe1b9039927c0fe6ab22e8e32b817cab0e3ed3cf2eb9b60ad9c291345905bddcf2d8c6a8d3c9ba74ce3df004d01467c3eb12cc1e1f0fd89e603"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0xc, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x0, 0x3, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x3, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x2, 0x8, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x8, 0x3, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x2, 0xff, 0x70, 0x8, 0x1}, 0xc, &(0x7f0000000f00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x4, 0x4}]}, 0x5, [{0xf7, &(0x7f0000000f40)=@string={0xf7, 0x3, "9f4495a534ce836e0ac5bba5cbe83b6f11d1672b64ca2df45a29d252ba28534106a67371dd91f735e8ed8976cd846b155780f80dfcdbe5a27ae071f1395445e4e11e759ab769e4fec4a28e6e16c36e4d040c2d9c24599b8b6b5db9dbbbd186f58778a80eb90f13b3b0bdbec004da3724a0efe07f278a09ec956a4c68fb137385ce50a497a22508748b60fd8c7879d4f8049b0533f858a6903bfb24e59b133097a3d02a52fb32a01a9fe7f2243f5a215b3f7611f8b7afe6dcbab9899d0775082191fe5f53e06f4150bc604fa082e18632e55e8bf1da4fd15c1e677664976f9cff449ca3050b500b83b8eac6c634a96844042cf99e6c"}}, {0x23, &(0x7f0000001040)=@string={0x23, 0x3, "59887cb68c925d52e8237f12b0e4264b44af6dc995361a0af6c43467869b38bba8"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x842}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsopen(&(0x7f0000000140)='jffs2\x00', 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004b0000400000000000059078ac1414416401010044140503e0000002000000000a0100ff00000001830301004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200ed8f7800002ced34587473ebdc1527484a5af8d509de405a50b7e82d08bbc4fb421c49a5828f65915966a7fbc1c3b3003e4c0e0afb40b5a8484bea164e824eaabbd678b33650015e020548b7e3e0decef7e199aac750c2d7429168cf2865b90f5a3446265bfeba66e80acd5cd29a9cf7a1ba9a0e0c7676679578c5713eaed55b695930bc827ff2b97af41c15f07c3ede476dbadf6d56cbc9a007a0fc008bc2090ac629a402f8f7d0f27d84b4bbde714fcaf0e73c11e577e6e13c82bc"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 8.69909342s ago: executing program 1 (id=144): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 7.341046377s ago: executing program 3 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6e, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x5}}}}, @qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x81}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}]}}]}, 0x164}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02c5150d44df388611cd97cfa0a3fed26f75e79c0974641f432d3898c7d3c675ba2c3ce3d6fe05a7512383bfbe1eb6d1810c27d15dbe1162d734c030ec6f8622998ae46b037973c99e98a911412b19", 0x4f}, {&(0x7f0000000340)="e6f616b848c25d1364996bdebcb618b09a9cdd91df285326497368692222f3fd6227cf49d8de356dd8deb6b5e7c8b2c1e4d1ea1680f4968daf7c4589e66c71ade65011b5cb2a4c", 0x47}, {&(0x7f00000003c0)="ba094f7f1691908f95ba6bb6e2f77ed31bc14707f30a41717cb4924ca63bd44d13", 0x21}], 0x3, 0x0, 0x0, 0x890}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0xfffffffc, 0x7a120, 0x7, {0x98c1, 0x400}, 0x200}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 6.608802625s ago: executing program 0 (id=148): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x48}}, 0x0) 6.391539278s ago: executing program 0 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 6.390769585s ago: executing program 3 (id=150): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0xa0, r1}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="95140900000000090000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) timer_getoverrun(0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.638115192s ago: executing program 1 (id=152): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x10000, 0x88, 0x5}, 0x18) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x10200, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 5.213489083s ago: executing program 3 (id=153): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) r7 = gettid() sendmsg$nl_generic(r6, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001a40)={0x121c, 0x3a, 0x400, 0x70bd27, 0x25dfdbfb, {0x1e}, [@typed={0x4, 0x98}, @nested={0x109e, 0x143, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x119, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x3c}, @typed={0x1004, 0xab, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xd9, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x17}, @generic="9867dd1bfdc83053843457777dba8374f8d609cfb0a03702feec7cb9d23b657c824cb9e316f489c9f4a695f1bfd473e4345a74701d746e52d44db1ef6ceb458e761eb2883dc141de8e359689eb6d892ce2551ae3a463e32b3e2242639c00687e01885696a9582501c3f3"]}, @nested={0x4e, 0x12e, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x16b, 0x0, 0x0, @fd=r5}, @generic="10eb694661bb5da8e52952e56084e429ff29b9e25bb8e3905eb3eb59793fe2fd853b1b2de479ee78f5cdab9f90e0fde271cde9b58bec", @nested={0x4, 0x46}]}, @generic="bbcaf096e5bf020b68540a61b379cb40c23398cd8e4b0e48b1062d8f5b3e173d05aa48ac6823df13", @generic="70d2ce35c98d53c8623d0c18e4e2832dfcde743dc2ed4bd195b669ec57d9828c9ef7b6680474ed1ab4c39ee10bc5f7bb33f52ff7d7b83c9b4adfd6f21502011d9c3769c40710ec9bd90cf38fd0fc19edbeecc2bdcb72344ca75c59f08e8830cc9c4063698fc1bd", @typed={0x4, 0x89, 0x0, 0x0, @binary}, @nested={0x80, 0x70, 0x0, 0x1, [@generic="19b80586285753299596438448945e736e3aa890f3be4f46f95aad07c2314c9905604739c9f3c62dc3ab51e5d2c26daadef525758ea0d67314dc73aa5a48b9aeb0f992445ae4b0c60aa59b6ffc3da3a49c6617461d9f49f671512782b16890fe6ad437eb121c3b46486eced304124e93a151d1d2", @nested={0x4, 0xdb}, @nested={0x4, 0xf3}]}]}, 0x121c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4.691085814s ago: executing program 2 (id=154): socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f00000003c0), 0x4880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400004c87701dbce397f8c175639a963a20a6dc4082e4d507e3fa6ec2307caf6e866d51e367aaeda5a8dc42fdb6e848fa171d939801f1ae961eab6abceff41f8aa7bbb08d5f97e4c9187c46a31f06b45c40cf2badab46d1d3b55c42801cd3c5eac5226577cca997e642c80fbf1a99c16dd7d8da998bedfd96c0a94306538c81ccdda95d2d5207b29c300cca38433f1ad94ffc1b8947d8883ec0fc8ab9caf03dc22ef9303c28ce4fee61c32fab9b1075fbf32204b81a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000", 0x51}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x36, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.088926828s ago: executing program 3 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)={0x30, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.9962874s ago: executing program 3 (id=156): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_connect(0x1, 0x6aa, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xd5, 0x8a, 0xcd, 0x20, 0x1066, 0x600, 0x3bc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x698, 0x2, 0xac, 0x6, 0x20, 0x8, "", [{{0x9, 0x4, 0xb, 0x81, 0x10, 0x69, 0x19, 0xe0, 0x6, [], [{{0x9, 0x5, 0xd, 0xe6c9b9c8226b437d, 0x3ff, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x74d8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf1, 0x1, [@generic={0x60, 0x3, "04293d5c00b5921815da197215485b7b6eea22881fabd07860b213e8ebed27c38fd4835a4b76db092bfbb9b89e8ae594020d5b6ffbb46dc383ecfe550bc922b98a33da97504fb42dac42b49e7cbfd3606c8c4ca6b5fc87770f4c61935191"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xbd, 0xeb, 0x4}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x6, 0x3, 0x30, [@generic={0xc8, 0xa, "0af975299672714db6c856528425b6c00c186ed55cef83dcb25e647d6d96582c2f29a993ee926d2f76605b5dd656e5e4df8a82050f89248bbe261e7a55c4a3bdaf31b2b882691fa3ceaf9c874d409cc02d3c267a7183c50f249bbf59cc582dff18af630fec681f2969bd490c17a9acccc1910ff9bf109bdc261587a88978e5633dc8f31c637600953796a9fe3c420bd35baa79e052e2de9a966d82c72eacd4ac32d3f7fe2b5214640e1b2357ffb18fd852b637bffb09144f3a73608dfb7b99c21c1c91003d80"}, @generic={0x41, 0x10, "6dee54ac6416c1e907c9eefd298f4bc161b0c6f1936bf7c9006df80241c736f4cbe7eefae53d02993a930bea982b5d8946752a5b3874af596f79b526b60a0a"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x38, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x958}]}}, {{0x9, 0x5, 0x80, 0x6, 0x0, 0x9, 0x10, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1}, @generic={0x14, 0x1, "117aa1a653d3922c9da7305d6434b41758f5"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x81, 0x3, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7d, 0x5, 0xfa}}, {{0x9, 0x5, 0x7, 0x11, 0x8, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x7, 0xed, 0x20, [@generic={0x92, 0x1, "184e9cd7229ac39a36c36094b40b00d22d09cf229ede8e5d36f1a1401f3e79475e8241806108f868b2e5a00da78eadcdf011f963dd0f0873f0153813d59ac0d9715363305c33e0696d592e275a72bb7d8be9ded26f62229a9406722ab46c467f516b4b1702b210c94c20556e067b697f626790014a824fedb685bdb53ad84810badcc12b5d10dd139b8d944f473f691a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7e, 0x93f2}]}}, {{0x9, 0x5, 0xd, 0xa, 0x400, 0xe, 0x9, 0x9, [@generic={0xa3, 0x22, "2d7465010c5585499d935de4d275f95586bda0e53683a3de58c48c561206e09bd2e6c8ba74490beb50dc6e7af23d2df688c8d2903a87eef9f5f5b35f7184587ddeb9c037faa99e88039ebce817bb66322925e55fa5e5052ec0a6ccd58ae90f585afc900057433895ddd9bd7fdb027d5004b25b0ceeda55522224ce54da850f5d9a12ee078e497a6144c42d0f82f3f88b1b77c2a1bcfd3716bf9e081983e5648309"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xcc}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x6, 0x9, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x8}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0xac, 0x6}}]}}, {{0x9, 0x4, 0x80, 0x18, 0xc, 0x8c, 0x63, 0xc6, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x60, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xf, 0x4, 0x2, [@generic={0xbe, 0x3, "1787299603b59e1b90b76a613e50120f01547b3827836ab257eff2be60379d5efa723489ca287f3ec2d87938105521025a3d15a030193328b800be4692cb43e6c58a3b40a55d1846d3d0c5748c5f4fb81780a9cfc04d84dfc670af2b083fe743a4489d28c1ded62d60ce1e21c591c66384ebd2ce2d450e533b93ee28f40df7e0092935124f932e6f9893ecad7009614cc5a3f658419e04e4cebf2d9ff48bc69fdffd4d21e26978e5325149e0dcd994f185c57a2a8e8a368f33261645"}]}}, {{0x9, 0x5, 0x8, 0x11, 0x400, 0xc, 0xfc, 0x2a}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x28, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x1, 0x6, 0x0, [@generic={0xc2, 0xa, "bbaa2f3269b082dc7ec191f376874a27409cba863648f4cf85d64830a1239de3558a9284ddf2f51f904fa1760ab0546b728d98a915a0a70495c489b0179c8256934f2b713b3f1bf28ddea115be1ce1db478d8ecb655bcef243ac720d599000b941d62978afc5f18d7d737d0d18277e18855bd1ec0b2c61be5f079315e4ccdee1d4ddc18ab69c1fa9e25c5d1b567fad55f1d024a4db539fc9efd5a3eb0d33c9b688101a6dba7bb1a3ad6cc5cb3fa4e9454366addefb318dd4a688b3eb8de1e4a3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x40, 0x8}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x9, 0x72, 0x4, [@generic={0xd8, 0x23, "b5469e125375b58e179aeaaf0fb48a8349e5322f9556129db2b1f4d5634427f9f8ec4048ef973e076549f7960169043a250ceb8d4823f882ad8af18df28919b1a9e6abb41b13c7f897f65425c14d7597f58a1c1a54f07901f36bc6eef636c0771ef1e7bea8fe8e14ceb08a3f3d5140568bf5827b8690f698c253f200dd5dd03efec2541b1f71ebf3d16d8a0fd3fd2771267efd9e9f61e3fceec80322efe1b9039927c0fe6ab22e8e32b817cab0e3ed3cf2eb9b60ad9c291345905bddcf2d8c6a8d3c9ba74ce3df004d01467c3eb12cc1e1f0fd89e603"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0xc, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x0, 0x3, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x3, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x2, 0x8, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x8, 0x3, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x2, 0xff, 0x70, 0x8, 0x1}, 0xc, &(0x7f0000000f00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x4, 0x4}]}, 0x5, [{0xf7, &(0x7f0000000f40)=@string={0xf7, 0x3, "9f4495a534ce836e0ac5bba5cbe83b6f11d1672b64ca2df45a29d252ba28534106a67371dd91f735e8ed8976cd846b155780f80dfcdbe5a27ae071f1395445e4e11e759ab769e4fec4a28e6e16c36e4d040c2d9c24599b8b6b5db9dbbbd186f58778a80eb90f13b3b0bdbec004da3724a0efe07f278a09ec956a4c68fb137385ce50a497a22508748b60fd8c7879d4f8049b0533f858a6903bfb24e59b133097a3d02a52fb32a01a9fe7f2243f5a215b3f7611f8b7afe6dcbab9899d0775082191fe5f53e06f4150bc604fa082e18632e55e8bf1da4fd15c1e677664976f9cff449ca3050b500b83b8eac6c634a96844042cf99e6c"}}, {0x23, &(0x7f0000001040)=@string={0x23, 0x3, "59887cb68c925d52e8237f12b0e4264b44af6dc995361a0af6c43467869b38bba8"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x842}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsopen(&(0x7f0000000140)='jffs2\x00', 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004b0000400000000000059078ac1414416401010044140503e0000002000000000a0100ff00000001830301004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200ed8f7800002ced34587473ebdc1527484a5af8d509de405a50b7e82d08bbc4fb421c49a5828f65915966a7fbc1c3b3003e4c0e0afb40b5a8484bea164e824eaabbd678b33650015e020548b7e3e0decef7e199aac750c2d7429168cf2865b90f5a3446265bfeba66e80acd5cd29a9cf7a1ba9a0e0c7676679578c5713eaed55b695930bc827ff2b97af41c15f07c3ede476dbadf6d56cbc9a007a0fc008bc2090ac629a402f8f7d0f27d84b4bbde714fcaf0e73c11e577e6e13c82bc"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 3.638317563s ago: executing program 2 (id=157): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x48}}, 0x0) 3.57238382s ago: executing program 2 (id=158): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.246796742s ago: executing program 0 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6e, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x5}}}}, @qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x81}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}]}}]}, 0x164}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02c5150d44df388611cd97cfa0a3fed26f75e79c0974641f432d3898c7d3c675ba2c3ce3d6fe05a7512383bfbe1eb6d1810c27d15dbe1162d734c030ec6f8622998ae46b037973c99e98a911412b19", 0x4f}, {&(0x7f0000000340)="e6f616b848c25d1364996bdebcb618b09a9cdd91df285326497368692222f3fd6227cf49d8de356dd8deb6b5e7c8b2c1e4d1ea1680f4968daf7c4589e66c71ade65011b5cb2a4c", 0x47}, {&(0x7f00000003c0)="ba094f7f1691908f95ba6bb6e2f77ed31bc14707f30a41717cb4924ca63bd44d13", 0x21}], 0x3, 0x0, 0x0, 0x890}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0xfffffffc, 0x7a120, 0x7, {0x98c1, 0x400}, 0x200}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 2.719016165s ago: executing program 1 (id=160): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 1.727872375s ago: executing program 1 (id=161): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0xa0, r1}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) timer_getoverrun(r2) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.727227854s ago: executing program 0 (id=162): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002) syz_io_uring_setup(0xf00, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$mice(0xffffff9c, &(0x7f0000000040), 0x41) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000080)=0x200004, 0x4) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x30) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02b725bcdf1e909dac6c27f4374acc00"/191], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.128276088s ago: executing program 2 (id=163): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef64bd465b9780e2bbe408ccc58187feb0e3d43347f98e1a298327e6f9b312ecb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259620618c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a30536455bb774f7f154263178151ea93f5774b56a7142047326f940e95b8489e1c5650f5c61299a295f79c88456521cffdef93e29f10f4a11f0ca134a375a7ecfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d9823659d1945258fc668950e5aacfa06e1a212661b3f57a266c90e64efc8d8f730867202a9ee94e6a1f851337c2c9671d98a19bdc132c153b3ad843bdd308a07ba8f50a20cfd2c8b94e86ea0af0a9e0e9789ffd38f9b86da101e2266700"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) r7 = gettid() sendmsg$nl_generic(r6, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001a40)={0x1224, 0x3a, 0x400, 0x70bd27, 0x25dfdbfb, {0x1e}, [@typed={0x4, 0x98}, @nested={0x109e, 0x143, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x119, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x3c}, @typed={0x1004, 0xab, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xd9, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x17}, @generic="9867dd1bfdc83053843457777dba8374f8d609cfb0a03702feec7cb9d23b657c824cb9e316f489c9f4a695f1bfd473e4345a74701d746e52d44db1ef6ceb458e761eb2883dc141de8e359689eb6d892ce2551ae3a463e32b3e2242639c00687e01885696a9582501c3f3"]}, @nested={0x4e, 0x12e, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x16b, 0x0, 0x0, @fd=r5}, @generic="10eb694661bb5da8e52952e56084e429ff29b9e25bb8e3905eb3eb59793fe2fd853b1b2de479ee78f5cdab9f90e0fde271cde9b58bec", @nested={0x4, 0x46}]}, @generic="bbcaf096e5bf020b68540a61b379cb40c23398cd8e4b0e48b1062d8f5b3e173d05aa48ac6823df13", @generic="70d2ce35c98d53c8623d0c18e4e2832dfcde743dc2ed4bd195b669ec57d9828c9ef7b6680474ed1ab4c39ee10bc5f7bb33f52ff7d7b83c9b4adfd6f21502011d9c3769c40710ec9bd90cf38fd0fc19edbeecc2bdcb72344ca75c59f08e8830cc9c4063698fc1bd6378cd677519f5", @typed={0x4, 0x89, 0x0, 0x0, @binary}, @nested={0x80, 0x70, 0x0, 0x1, [@generic="19b80586285753299596438448945e736e3aa890f3be4f46f95aad07c2314c9905604739c9f3c62dc3ab51e5d2c26daadef525758ea0d67314dc73aa5a48b9aeb0f992445ae4b0c60aa59b6ffc3da3a49c6617461d9f49f671512782b16890fe6ad437eb121c3b46486eced304124e93a151d1d2", @nested={0x4, 0xdb}, @nested={0x4, 0xf3}]}]}, 0x1224}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 887.0905ms ago: executing program 3 (id=164): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x10000000000c, 0xa, 0x1, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0, 0x10000f0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 237.735759ms ago: executing program 0 (id=165): socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f00000003c0), 0x4880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400004c87701dbce397f8c175639a963a20a6dc4082e4d507e3fa6ec2307caf6e866d51e367aaeda5a8dc42fdb6e848fa171d939801f1ae961eab6abceff41f8aa7bbb08d5f97e4c9187c46a31f06b45c40cf2badab46d1d3b55c42801cd3c5eac5226577cca997e642c80fbf1a99c16dd7d8da998bedfd96c0a94306538c81ccdda95d2d5207b29c300cca38433f1ad94ffc1b8947d8883ec0fc8ab9caf03dc22ef9303c28ce4fee61c32fab9b1075fbf32204b81a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000", 0x51}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x36, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 88.591821ms ago: executing program 2 (id=166): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0], 0x48}}, 0x0) 0s ago: executing program 2 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32297' (ED25519) to the list of known hosts. [ 71.755780][ T5730] cgroup: Unknown subsys name 'net' [ 71.926159][ T5730] cgroup: Unknown subsys name 'cpuset' [ 71.930126][ T5730] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.850909][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.493920][ T5762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.493997][ T5763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.495812][ T5764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.497187][ T5762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.497993][ T5764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.498401][ T5764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.499151][ T5764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.500412][ T5763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.500691][ T5763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.501825][ T5763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.502965][ T5762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.503294][ T5762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.504609][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.504819][ T5762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.504870][ T5762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.505966][ T5762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.506364][ T5763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.510067][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.514756][ T5767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.534936][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.055193][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.059336][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.062376][ T5750] bridge_slave_0: entered allmulticast mode [ 77.065411][ T5750] bridge_slave_0: entered promiscuous mode [ 77.069647][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071967][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.074279][ T5750] bridge_slave_1: entered allmulticast mode [ 77.076917][ T5750] bridge_slave_1: entered promiscuous mode [ 77.126634][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.164996][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.179818][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.182325][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.185011][ T5749] bridge_slave_0: entered allmulticast mode [ 77.187773][ T5749] bridge_slave_0: entered promiscuous mode [ 77.191298][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.193774][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.196194][ T5749] bridge_slave_1: entered allmulticast mode [ 77.199149][ T5749] bridge_slave_1: entered promiscuous mode [ 77.237669][ T5750] team0: Port device team_slave_0 added [ 77.240798][ T5750] team0: Port device team_slave_1 added [ 77.243293][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.245801][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.248129][ T5751] bridge_slave_0: entered allmulticast mode [ 77.250857][ T5751] bridge_slave_0: entered promiscuous mode [ 77.254063][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.256356][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.258715][ T5751] bridge_slave_1: entered allmulticast mode [ 77.261493][ T5751] bridge_slave_1: entered promiscuous mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1d7000) [ 77.271724][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.275359][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.278068][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.280457][ T5748] bridge_slave_0: entered allmulticast mode [ 77.283305][ T5748] bridge_slave_0: entered promiscuous mode [ 77.305157][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 77.307759][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.308080][ T1132] ata1: failed to read log page 10h (errno=-5) [ 77.310854][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.314230][ T1132] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 77.315678][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.318714][ T1132] ata1.00: irq_stat 0x41000000 [ 77.320966][ T5748] bridge_slave_1: entered allmulticast mode [ 77.323142][ T1132] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.325709][ T5748] bridge_slave_1: entered promiscuous mode [ 77.327510][ T1132] ata1.00: cmd 61/b8:70:be:11:08/0e:00:00:00:00/40 tag 14 ncq dma 1929216 ou [ 77.327510][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.332093][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.335950][ T1132] ata1.00: status: { DRDY } [ 77.338014][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.339952][ T1132] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.347704][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.349531][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.350303][ T1132] ata1.00: cmd 61/e8:78:76:20:08/02:00:00:00:00/40 tag 15 ncq dma 380928 out [ 77.350303][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.353593][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.353609][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.376702][ T1132] ata1.00: status: { DRDY } [ 77.380156][ T1132] ata1.00: configured for UDMA/100 [ 77.382863][ T1132] ata1: EH complete [ 77.387210][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.392478][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.398549][ T5749] team0: Port device team_slave_0 added [ 77.401819][ T5749] team0: Port device team_slave_1 added [ 77.405727][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.410081][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.443996][ T5748] team0: Port device team_slave_0 added [ 77.447180][ T5748] team0: Port device team_slave_1 added [ 77.461063][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.463477][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.471200][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.484035][ T5751] team0: Port device team_slave_0 added [ 77.487526][ T5751] team0: Port device team_slave_1 added [ 77.495872][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.498001][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.506220][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.526573][ T5750] hsr_slave_0: entered promiscuous mode [ 77.529559][ T5750] hsr_slave_1: entered promiscuous mode [ 77.536043][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.538241][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.546458][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.563974][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.566190][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.575765][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.585515][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.587762][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.596396][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.613723][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.615890][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.623846][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.647205][ T5749] hsr_slave_0: entered promiscuous mode [ 77.649433][ T5749] hsr_slave_1: entered promiscuous mode [ 77.651509][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 77.653887][ T5749] Cannot create hsr debugfs directory [ 77.684644][ T5748] hsr_slave_0: entered promiscuous mode [ 77.687363][ T5748] hsr_slave_1: entered promiscuous mode [ 77.689599][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 77.691405][ T5748] Cannot create hsr debugfs directory [ 77.738739][ T5751] hsr_slave_0: entered promiscuous mode [ 77.741046][ T5751] hsr_slave_1: entered promiscuous mode [ 77.743354][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 77.745201][ T5751] Cannot create hsr debugfs directory [ 77.930530][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.940356][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.943478][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.948366][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.953634][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.963814][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.966502][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.972112][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.021531][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.027058][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.029755][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.035508][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.038234][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.042696][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.045806][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.050340][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.107218][ T5748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.112782][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.121003][ T5748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.125747][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.128473][ T5748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.133651][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.136940][ T5748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.140993][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.193143][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.197574][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.203577][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.207340][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.210309][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.214352][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.224175][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.227022][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.231104][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.276030][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.291449][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.295017][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.308048][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.319603][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.321914][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.341100][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.346831][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.349137][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.367976][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.370272][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.374830][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.413985][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.432557][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.435807][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.448463][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.450752][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.457155][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.478653][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.494370][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.496763][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.507384][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.509732][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.544565][ T5103] Bluetooth: hci0: command tx timeout [ 78.544569][ T5764] Bluetooth: hci1: command tx timeout [ 78.544811][ T5764] Bluetooth: hci3: command tx timeout [ 78.545715][ T64] Bluetooth: hci2: command tx timeout [ 78.680923][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.709352][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.719493][ T5750] veth0_vlan: entered promiscuous mode [ 78.733312][ T5750] veth1_vlan: entered promiscuous mode [ 78.756611][ T5749] veth0_vlan: entered promiscuous mode [ 78.767893][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.771594][ T5749] veth1_vlan: entered promiscuous mode [ 78.778710][ T5750] veth0_macvtap: entered promiscuous mode [ 78.783563][ T5750] veth1_macvtap: entered promiscuous mode [ 78.797254][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.802518][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.807320][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.825849][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.829002][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.838576][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.841353][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.860194][ T5749] veth0_macvtap: entered promiscuous mode [ 78.866701][ T5748] veth0_vlan: entered promiscuous mode [ 78.871291][ T5749] veth1_macvtap: entered promiscuous mode [ 78.889955][ T5748] veth1_vlan: entered promiscuous mode [ 78.901550][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.905657][ T5751] veth0_vlan: entered promiscuous mode [ 78.916406][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.930457][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.931190][ T5751] veth1_vlan: entered promiscuous mode [ 78.933640][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.938905][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.941800][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.953371][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.965037][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.980121][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.984489][ T5748] veth0_macvtap: entered promiscuous mode [ 78.985894][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.002607][ T5748] veth1_macvtap: entered promiscuous mode [ 79.012266][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.016283][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.023873][ T5751] veth0_macvtap: entered promiscuous mode [ 79.028146][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.037265][ T5750] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.045912][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.049810][ T5751] veth1_macvtap: entered promiscuous mode [ 79.050224][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.054968][ T5750] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.056394][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.064150][ T5750] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.067399][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.069284][ T5750] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.073926][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.076893][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086728][ T5750] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.087657][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.096042][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.121686][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.144257][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151643][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.165165][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.167923][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.186226][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.193928][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.220881][ T5905] binder: 5903:5905 ioctl c00c6211 0 returned -14 [ 79.226354][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.231020][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.242425][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.250212][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.276766][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.282802][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.422398][ T5912] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.448423][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.573498][ T5919] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 79.577357][ T5919] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 79.705725][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 79.719370][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 79.795925][ T5923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 79.798880][ T5923] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.805979][ T5923] vhci_hcd vhci_hcd.0: Device attached [ 80.122228][ T5928] process 'syz.2.6' launched './file2' with NULL argv: empty string added [ 80.169135][ T5924] vhci_hcd: connection closed [ 80.172815][ T5837] usb 38-1: SetAddress Request (2) to port 0 [ 80.174427][ T5829] vhci_hcd vhci_hcd.0: stop threads [ 80.177824][ T5837] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 80.179712][ T5829] vhci_hcd vhci_hcd.0: release socket [ 80.187771][ T5829] vhci_hcd vhci_hcd.0: disconnect device [ 80.194043][ T5837] usb 38-1: enqueue for inactive port 0 [ 80.253301][ T5917] orangefs_mount: mount request failed with -4 [ 80.472197][ T5938] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 80.475693][ T5932] IPVS: stopping master sync thread 5938 ... [ 80.483915][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 80.594921][ T5837] usb usb38-port1: attempt power cycle [ 80.624887][ T5764] Bluetooth: hci0: command tx timeout [ 80.626909][ T5764] Bluetooth: hci2: command tx timeout [ 80.629076][ T5103] Bluetooth: hci3: command tx timeout [ 80.631040][ T5103] Bluetooth: hci1: command tx timeout [ 80.953273][ T5963] binder: 5961:5963 ioctl c00c6211 0 returned -14 [ 81.105377][ T40] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 81.179585][ T5837] usb usb38-port1: unable to enumerate USB device [ 81.200875][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.285330][ T40] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 81.295527][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.383052][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 81.399497][ T56] usb 7-1: config index 0 descriptor too short (expected 13339, got 27) [ 81.403827][ T56] usb 7-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 81.412838][ T56] usb 7-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 81.619498][ T56] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.623764][ T56] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.626392][ T56] usb 7-1: Product: syz [ 81.627770][ T56] usb 7-1: Manufacturer: syz [ 81.629763][ T56] usb 7-1: SerialNumber: syz [ 81.764020][ T40] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 81.774610][ T40] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 81.827105][ T40] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 81.911364][ T5999] netlink: 200 bytes leftover after parsing attributes in process `syz.1.16'. [ 82.122818][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.134060][ T5947] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 82.163187][ T61] cfg80211: failed to load regulatory.db [ 82.195068][ T5959] Bluetooth: MGMT ver 1.23 [ 82.274682][ T5837] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 82.281939][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.290315][ T5837] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 82.437533][ T56] usb 7-1: USB disconnect, device number 2 [ 82.499047][ T5997] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 82.507719][ T5837] usb 5-1: emi26_load_firmware - request_firmware() failed [ 82.517299][ T5837] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 82.520488][ T40] usb 8-1: emi26_load_firmware - request_firmware() failed [ 82.526050][ T5837] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 82.529462][ T40] usb 8-1: emi26_load_firmware - error loading firmware: error = -2 [ 82.536042][ T40] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 82.540286][ T5837] usb 5-1: USB disconnect, device number 2 [ 82.548522][ T40] usb 8-1: USB disconnect, device number 2 [ 82.712837][ T5767] Bluetooth: hci1: command tx timeout [ 82.712963][ T5764] Bluetooth: hci3: command tx timeout [ 82.713109][ T64] Bluetooth: hci0: command tx timeout [ 82.718802][ T5103] Bluetooth: hci2: command tx timeout [ 82.725948][ T5999] orangefs_mount: mount request failed with -4 [ 82.788971][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 82.802598][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 82.817625][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 82.920237][ T6013] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 82.923573][ T6013] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 83.282857][ T40] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 83.307792][ T6025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 83.310030][ T6025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.327395][ T6025] vhci_hcd vhci_hcd.0: Device attached [ 83.445056][ T40] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.450246][ T40] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.455703][ T40] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.460466][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.576094][ T6030] binder: 6029:6030 ioctl c00c6211 0 returned -14 [ 83.716457][ T5837] usb 38-1: SetAddress Request (6) to port 0 [ 83.726570][ T5837] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 83.749082][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.770412][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.842076][ T40] usb 8-1: usb_control_msg returned -32 [ 84.038706][ T40] usbtmc 8-1:16.0: can't read capabilities [ 84.104388][ T6026] vhci_hcd: connection reset by peer [ 84.112510][ T5829] vhci_hcd vhci_hcd.0: stop threads [ 84.116770][ T5829] vhci_hcd vhci_hcd.0: release socket [ 84.119710][ T5829] vhci_hcd vhci_hcd.0: disconnect device [ 84.518648][ T6042] netlink: 200 bytes leftover after parsing attributes in process `syz.2.26'. [ 84.782846][ T5764] Bluetooth: hci1: command tx timeout [ 84.792915][ T5103] Bluetooth: hci0: command tx timeout [ 84.792944][ T5767] Bluetooth: hci2: command tx timeout [ 84.794809][ T5764] Bluetooth: hci3: command tx timeout [ 84.870899][ T6049] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 84.871644][ T6045] IPVS: stopping master sync thread 6049 ... [ 84.878523][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 85.335233][ T6042] orangefs_mount: mount request failed with -4 [ 85.430773][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 85.464360][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 85.471319][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 85.586800][ T6071] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 85.589323][ T6071] netlink: 'syz.2.32': attribute type 2 has an invalid length. [ 86.156536][ T56] usb 8-1: USB disconnect, device number 3 [ 86.424766][ T6084] binder: 6083:6084 ioctl c00c6211 0 returned -14 [ 86.982799][ T56] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.003305][ T6001] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 87.148709][ T56] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 87.161355][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.173226][ T6001] usb 6-1: Using ep0 maxpacket: 32 [ 87.180516][ T56] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 87.189660][ T6001] usb 6-1: config index 0 descriptor too short (expected 12827, got 27) [ 87.196336][ T56] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 87.203880][ T56] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 87.450969][ T6001] usb 6-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 87.456753][ T6001] usb 6-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 87.466625][ T6001] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 87.474202][ T6097] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 87.476354][ T6097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.483684][ T6001] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.487834][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.498243][ T6001] usb 6-1: Product: syz [ 87.501177][ T6001] usb 6-1: Manufacturer: syz [ 87.510607][ T6001] usb 6-1: SerialNumber: syz [ 87.517660][ T6097] vhci_hcd vhci_hcd.0: Device attached [ 87.717703][ T6105] vhci_hcd: connection closed [ 87.718314][ T5829] vhci_hcd vhci_hcd.0: stop threads [ 87.721557][ T5829] vhci_hcd vhci_hcd.0: release socket [ 87.724148][ T5829] vhci_hcd vhci_hcd.0: disconnect device [ 87.822037][ T6001] usb 6-1: USB disconnect, device number 2 [ 88.062067][ T6119] netlink: 200 bytes leftover after parsing attributes in process `syz.3.40'. [ 88.318011][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 88.322802][ T6001] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 88.334086][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 88.339331][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 88.448393][ T6124] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 88.451016][ T6124] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 88.488806][ T6130] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 88.493777][ T6127] IPVS: stopping master sync thread 6130 ... [ 88.501309][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 88.820566][ T5837] usb 38-1: device descriptor read/8, error -110 [ 88.891286][ T6119] orangefs_mount: mount request failed with -4 [ 89.088341][ T6001] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.103958][ T6132] binder: 6131:6132 ioctl c00c6211 0 returned -14 [ 89.323877][ T6001] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.354121][ T6001] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.357302][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.593082][ T3267] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.615781][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.618526][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.621496][ T6001] usb 7-1: usb_control_msg returned -32 [ 89.623618][ T6001] usbtmc 7-1:16.0: can't read capabilities [ 89.703664][ T5837] usb usb38-port1: attempt power cycle [ 89.745500][ T3267] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 89.748372][ T3267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.756363][ T3267] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 90.305286][ T5837] usb usb38-port1: unable to enumerate USB device [ 90.330975][ T6148] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 90.333469][ T6148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.336651][ T6148] vhci_hcd vhci_hcd.0: Device attached [ 90.643283][ T5837] usb 44-1: SetAddress Request (2) to port 0 [ 90.650115][ T5837] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 90.717022][ T6156] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 90.719490][ T6156] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.740521][ T6156] vhci_hcd vhci_hcd.0: Device attached [ 91.033025][ T5435] usb 40-1: SetAddress Request (2) to port 0 [ 91.035336][ T5435] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 91.090623][ T5534] usb 7-1: USB disconnect, device number 3 [ 91.171982][ T6149] vhci_hcd: connection reset by peer [ 91.174694][ T5829] vhci_hcd vhci_hcd.3: stop threads [ 91.178034][ T5829] vhci_hcd vhci_hcd.3: release socket [ 91.180590][ T5829] vhci_hcd vhci_hcd.3: disconnect device [ 91.184500][ T6165] netlink: 200 bytes leftover after parsing attributes in process `syz.2.52'. [ 91.337570][ T6157] vhci_hcd: connection reset by peer [ 91.341188][ T5829] vhci_hcd vhci_hcd.1: stop threads [ 91.343189][ T5829] vhci_hcd vhci_hcd.1: release socket [ 91.345189][ T5829] vhci_hcd vhci_hcd.1: disconnect device [ 91.394957][ T6170] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 91.396295][ T6169] IPVS: stopping master sync thread 6170 ... [ 91.401229][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 92.010688][ T6165] orangefs_mount: mount request failed with -4 [ 92.058509][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 92.403257][ T6192] binder: 6189:6192 ioctl c00c6211 0 returned -14 [ 93.572817][ T5900] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 93.663054][ T5755] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.735445][ T5900] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.738390][ T5900] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.742547][ T5900] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.745630][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.814044][ T5755] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 93.817088][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.822288][ T5755] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 93.954553][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.958782][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.962348][ T5900] usb 7-1: usb_control_msg returned -32 [ 93.964513][ T5900] usbtmc 7-1:16.0: can't read capabilities [ 94.845165][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.911125][ T6225] warning: `syz.3.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.928808][ T6225] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 94.932089][ T6225] netlink: 'syz.3.63': attribute type 2 has an invalid length. [ 95.243440][ T6230] netlink: 200 bytes leftover after parsing attributes in process `syz.1.64'. [ 95.618284][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'. [ 95.754141][ T5837] usb 44-1: device descriptor read/8, error -110 [ 95.915039][ T6238] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 95.931664][ T6237] IPVS: stopping master sync thread 6238 ... [ 95.940822][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 96.072402][ T6230] orangefs_mount: mount request failed with -4 [ 96.118588][ T6240] binder: 6239:6240 ioctl c00c6211 0 returned -14 [ 96.201752][ T5435] usb 40-1: device descriptor read/8, error -110 [ 96.210695][ T5837] usb usb44-port1: attempt power cycle [ 96.341428][ T5862] usb 7-1: USB disconnect, device number 4 [ 96.704240][ T5435] usb usb40-port1: attempt power cycle [ 96.923939][ T5837] usb usb44-port1: unable to enumerate USB device [ 97.343455][ T5435] usb usb40-port1: unable to enumerate USB device [ 97.396171][ T6282] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 97.398531][ T6282] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 97.401361][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'. [ 97.407456][ T6282] vhci_hcd vhci_hcd.0: Device attached [ 97.414549][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 97.702901][ T5435] usb 38-1: SetAddress Request (10) to port 0 [ 97.710731][ T5435] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 98.036638][ T6298] netlink: 200 bytes leftover after parsing attributes in process `syz.2.75'. [ 98.226040][ T6284] vhci_hcd: connection reset by peer [ 98.228349][ T5829] vhci_hcd vhci_hcd.0: stop threads [ 98.230115][ T5829] vhci_hcd vhci_hcd.0: release socket [ 98.231976][ T5829] vhci_hcd vhci_hcd.0: disconnect device [ 98.794931][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.77'. [ 98.880874][ T6298] orangefs_mount: mount request failed with -4 [ 99.191614][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'. [ 99.195566][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 99.221524][ T6312] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 99.226017][ T6308] IPVS: stopping master sync thread 6312 ... [ 99.228490][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 99.879480][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 99.883975][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 100.023909][ T6320] binder: 6319:6320 ioctl c00c6211 0 returned -14 [ 101.394283][ T6361] netlink: 200 bytes leftover after parsing attributes in process `syz.1.86'. [ 102.183484][ T6394] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 102.185111][ T6387] IPVS: stopping master sync thread 6394 ... [ 102.220860][ T6361] orangefs_mount: mount request failed with -4 [ 102.312771][ T5837] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 102.342319][ T6406] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 102.347649][ T6405] IPVS: stopping master sync thread 6406 ... [ 102.463024][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 102.472884][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.476209][ T5837] usb 7-1: config 0 has no interfaces? [ 102.480372][ T5837] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.487706][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.490407][ T5837] usb 7-1: Product: syz [ 102.491798][ T5837] usb 7-1: Manufacturer: syz [ 102.493568][ T5837] usb 7-1: SerialNumber: syz [ 102.499386][ T5837] usb 7-1: config 0 descriptor?? [ 102.763376][ T5837] usb 7-1: USB disconnect, device number 5 [ 102.793086][ T5435] usb 38-1: device descriptor read/8, error -110 [ 103.185694][ T5435] usb usb38-port1: attempt power cycle [ 103.189262][ T6414] __nla_validate_parse: 3 callbacks suppressed [ 103.189276][ T6414] netlink: 200 bytes leftover after parsing attributes in process `syz.0.101'. [ 103.345578][ T6418] binder: 6417:6418 ioctl c00c6211 0 returned -14 [ 103.763449][ T5435] usb usb38-port1: unable to enumerate USB device [ 104.015432][ T6414] orangefs_mount: mount request failed with -4 [ 104.056883][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97'. [ 104.233432][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 104.237484][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 105.742845][ T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 105.892823][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 105.895808][ T61] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 105.899657][ T61] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 105.902478][ T61] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 105.906327][ T61] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 105.910744][ T61] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.915172][ T61] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.917787][ T61] usb 7-1: Product: syz [ 105.919113][ T61] usb 7-1: Manufacturer: syz [ 105.920576][ T61] usb 7-1: SerialNumber: syz [ 106.223890][ T61] usb 7-1: USB disconnect, device number 6 [ 107.061996][ T6496] netlink: 200 bytes leftover after parsing attributes in process `syz.3.106'. [ 107.343078][ T1041] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.492783][ T1041] usb 7-1: Using ep0 maxpacket: 32 [ 107.496650][ T1041] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 107.499957][ T1041] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 107.503782][ T1041] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 107.507874][ T1041] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 107.515201][ T1041] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.518766][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.521978][ T1041] usb 7-1: Product: syz [ 107.523817][ T1041] usb 7-1: Manufacturer: syz [ 107.525913][ T1041] usb 7-1: SerialNumber: syz [ 107.841921][ T1041] usb 7-1: USB disconnect, device number 7 [ 107.882649][ T6496] orangefs_mount: mount request failed with -4 [ 107.913092][ T6514] binder: 6513:6514 ioctl c00c6211 0 returned -14 [ 108.377827][ T6517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 108.379936][ T6517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.382520][ T6517] vhci_hcd vhci_hcd.0: Device attached [ 108.652833][ T5837] usb 38-1: SetAddress Request (14) to port 0 [ 108.655960][ T5837] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 108.896056][ T6524] vhci_hcd: connection reset by peer [ 108.898161][ T5829] vhci_hcd vhci_hcd.0: stop threads [ 108.900026][ T5829] vhci_hcd vhci_hcd.0: release socket [ 108.901889][ T5829] vhci_hcd vhci_hcd.0: disconnect device [ 109.690002][ T6540] netlink: 200 bytes leftover after parsing attributes in process `syz.1.115'. [ 110.520131][ T6540] orangefs_mount: mount request failed with -4 [ 110.559020][ T6545] netlink: 200 bytes leftover after parsing attributes in process `syz.1.116'. [ 110.657833][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 110.661468][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 111.388353][ T6545] orangefs_mount: mount request failed with -4 [ 111.996211][ T6577] binder: 6576:6577 ioctl c00c6211 0 returned -14 [ 112.833186][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 112.948942][ T6591] Zero length message leads to an empty skb [ 112.998272][ T6595] netlink: 200 bytes leftover after parsing attributes in process `syz.1.124'. [ 113.114173][ T6599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 113.116445][ T6599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.120149][ T6599] vhci_hcd vhci_hcd.0: Device attached [ 113.191708][ T6604] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 113.194008][ T6598] IPVS: stopping master sync thread 6604 ... [ 113.205532][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 113.383431][ T6001] usb 44-1: SetAddress Request (6) to port 0 [ 113.386416][ T6001] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 113.649697][ T6600] vhci_hcd: connection reset by peer [ 113.652483][ T5829] vhci_hcd vhci_hcd.3: stop threads [ 113.654312][ T5829] vhci_hcd vhci_hcd.3: release socket [ 113.656733][ T5829] vhci_hcd vhci_hcd.3: disconnect device [ 113.742871][ T5837] usb 38-1: device descriptor read/8, error -110 [ 113.827070][ T6595] orangefs_mount: mount request failed with -4 [ 114.153633][ T5837] usb usb38-port1: attempt power cycle [ 114.317810][ T5435] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 114.474200][ T5435] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.477471][ T5435] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.481629][ T5435] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.485515][ T5435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.696129][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.699810][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.703611][ T5435] usb 7-1: usb_control_msg returned -32 [ 114.706099][ T5435] usbtmc 7-1:16.0: can't read capabilities [ 114.715539][ T5837] usb usb38-port1: unable to enumerate USB device [ 115.318254][ T5837] usb 7-1: USB disconnect, device number 8 [ 115.862681][ T6658] binder: 6657:6658 ioctl c00c6211 0 returned -14 [ 116.773352][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.134'. [ 116.955690][ T6667] netlink: 200 bytes leftover after parsing attributes in process `syz.1.135'. [ 117.783660][ T6667] orangefs_mount: mount request failed with -4 [ 118.038787][ T6701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 118.040883][ T6701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.053210][ T6701] vhci_hcd vhci_hcd.0: Device attached [ 118.228443][ T6708] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 118.234536][ T6707] IPVS: stopping master sync thread 6708 ... [ 118.237833][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 118.352819][ T5837] usb 40-1: SetAddress Request (6) to port 0 [ 118.354798][ T5837] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 118.463042][ T6001] usb 44-1: device descriptor read/8, error -110 [ 118.544966][ T6716] binder: 6715:6716 ioctl c00c6211 0 returned -14 [ 118.658085][ T6702] vhci_hcd: connection reset by peer [ 118.662471][ T5829] vhci_hcd vhci_hcd.1: stop threads [ 118.668028][ T5829] vhci_hcd vhci_hcd.1: release socket [ 118.669875][ T5829] vhci_hcd vhci_hcd.1: disconnect device [ 118.905853][ T6001] usb usb44-port1: attempt power cycle [ 119.553983][ T6001] usb usb44-port1: unable to enumerate USB device [ 119.576657][ T5900] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 119.768820][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 119.804528][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 119.838084][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.844023][ T5900] usb 7-1: config 0 has no interfaces? [ 120.128624][ T5900] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.275176][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.279014][ T5900] usb 7-1: Product: syz [ 120.281093][ T5900] usb 7-1: Manufacturer: syz [ 120.484877][ T5900] usb 7-1: SerialNumber: syz [ 120.554426][ T5900] usb 7-1: config 0 descriptor?? [ 120.765396][ T6760] netlink: 200 bytes leftover after parsing attributes in process `syz.3.147'. [ 121.564029][ T6760] orangefs_mount: mount request failed with -4 [ 122.061509][ T61] usb 7-1: USB disconnect, device number 9 [ 122.445131][ T6777] IPVS: stopping master sync thread 6778 ... [ 122.449326][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 122.935586][ T6783] binder: 6782:6783 ioctl c00c6211 0 returned -14 [ 123.423215][ T5837] usb 40-1: device descriptor read/8, error -110 [ 123.463754][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'. [ 123.907794][ T6781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 123.914413][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.995416][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 124.036579][ T5837] usb 40-1: SetAddress Request (7) to port 0 [ 124.040932][ T5837] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 124.126838][ T6787] vhci_hcd: connection reset by peer [ 124.129392][ T5829] vhci_hcd vhci_hcd.1: stop threads [ 124.131782][ T5829] vhci_hcd vhci_hcd.1: release socket [ 124.135988][ T5829] vhci_hcd vhci_hcd.1: disconnect device [ 125.282929][ T6816] netlink: 200 bytes leftover after parsing attributes in process `syz.0.159'. [ 126.079421][ T6818] orangefs_mount: mount request failed with -4 [ 126.742358][ T6842] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 126.762529][ T6839] IPVS: stopping master sync thread 6842 ... [ 126.782589][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 126.919799][ T6845] binder: 6844:6845 ioctl c00c6211 0 returned -14 [ 127.356090][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.164'. [ 127.375256][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 128.084250][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 128.297777][ T3267] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 128.304036][ T3267] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 128.307531][ T3267] CPU: 3 UID: 0 PID: 3267 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 128.311695][ T3267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.316115][ T3267] Workqueue: usb_hub_wq hub_event [ 128.318306][ T3267] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 128.321392][ T3267] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 128.334538][ T3267] RSP: 0000:ffffc900267f6ec8 EFLAGS: 00010202 [ 128.337495][ T3267] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 128.341996][ T3267] RDX: ffff8880260da540 RSI: 0000000000000004 RDI: 0000000000000004 [ 128.346440][ T3267] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 128.350530][ T3267] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 128.355213][ T3267] R13: ffff888000c948c0 R14: ffffc900267f6fe8 R15: dffffc0000000000 [ 128.358817][ T3267] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 128.364632][ T3267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.367964][ T3267] CR2: 00000000f548446c CR3: 0000000066184000 CR4: 0000000000352ef0 [ 128.372914][ T3267] Call Trace: [ 128.374530][ T3267] [ 128.376408][ T3267] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 128.381559][ T3267] ? emi26_probe+0x114/0xe30 [ 128.384608][ T3267] emi26_probe+0x13c/0xe30 [ 128.387827][ T3267] ? _raw_spin_lock_irqsave+0x52/0x60 [ 128.391005][ T3267] ? find_held_lock+0x2b/0x80 [ 128.393434][ T3267] ? __pfx_emi26_probe+0x10/0x10 [ 128.396329][ T3267] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.399387][ T3267] ? lockdep_hardirqs_on+0x78/0x100 [ 128.402686][ T3267] ? __pm_runtime_set_status+0x13c/0x970 [ 128.406361][ T3267] usb_probe_interface+0x303/0x8f0 [ 128.409727][ T3267] ? __pfx_usb_probe_interface+0x10/0x10 [ 128.413234][ T3267] really_probe+0x241/0xa60 [ 128.416011][ T3267] __driver_probe_device+0x20e/0x450 [ 128.419158][ T3267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.422997][ T3267] driver_probe_device+0x4a/0x140 [ 128.426140][ T3267] __device_attach_driver+0x1df/0x320 [ 128.429748][ T3267] ? __pfx___device_attach_driver+0x10/0x10 [ 128.433563][ T3267] bus_for_each_drv+0x159/0x1e0 [ 128.437051][ T3267] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.440507][ T3267] ? lockdep_hardirqs_on+0x78/0x100 [ 128.444004][ T3267] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.448093][ T3267] __device_attach+0x1e4/0x4d0 [ 128.450903][ T3267] ? __pfx___device_attach+0x10/0x10 [ 128.454430][ T3267] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.458070][ T3267] device_initial_probe+0xaf/0xd0 [ 128.461269][ T3267] bus_probe_device+0x64/0x160 [ 128.465118][ T3267] device_add+0x121d/0x1970 [ 128.468244][ T3267] ? __pfx_device_add+0x10/0x10 [ 128.471246][ T3267] ? mark_held_locks+0x40/0x70 [ 128.474366][ T3267] usb_set_configuration+0xd97/0x1c60 [ 128.477056][ T3267] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 128.479966][ T3267] usb_generic_driver_probe+0xa1/0xe0 [ 128.482449][ T3267] usb_probe_device+0xef/0x400 [ 128.484635][ T3267] ? __pfx_usb_probe_device+0x10/0x10 [ 128.486878][ T3267] really_probe+0x241/0xa60 [ 128.488902][ T3267] __driver_probe_device+0x20e/0x450 [ 128.491495][ T3267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.495244][ T3267] driver_probe_device+0x4a/0x140 [ 128.498867][ T3267] __device_attach_driver+0x1df/0x320 [ 128.502662][ T3267] ? __pfx___device_attach_driver+0x10/0x10 [ 128.506542][ T3267] bus_for_each_drv+0x159/0x1e0 [ 128.508862][ T3267] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.511514][ T3267] ? lockdep_hardirqs_on+0x78/0x100 [ 128.514787][ T3267] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.517799][ T3267] __device_attach+0x1e4/0x4d0 [ 128.520386][ T3267] ? __pfx___device_attach+0x10/0x10 [ 128.523153][ T3267] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.525620][ T3267] device_initial_probe+0xaf/0xd0 [ 128.527647][ T3267] bus_probe_device+0x64/0x160 [ 128.529800][ T3267] device_add+0x121d/0x1970 [ 128.532142][ T3267] ? __pfx_device_add+0x10/0x10 [ 128.535154][ T3267] ? usb_detect_static_quirks+0x335/0x3e0 [ 128.539823][ T3267] usb_new_device.cold+0x685/0x115c [ 128.543988][ T3267] ? _mutex_trylock_nest_lock+0x241/0x310 [ 128.548419][ T3267] ? do_raw_spin_lock+0x128/0x260 [ 128.552008][ T3267] ? __pfx_usb_new_device+0x10/0x10 [ 128.555546][ T3267] ? mark_held_locks+0x40/0x70 [ 128.559188][ T3267] hub_event+0x30a3/0x4a60 [ 128.562085][ T3267] ? __pfx_hub_event+0x10/0x10 [ 128.565510][ T3267] ? debug_object_deactivate+0x2e4/0x3b0 [ 128.569059][ T3267] ? rcu_is_watching+0x12/0xc0 [ 128.574051][ T3267] process_one_work+0xa23/0x1940 [ 128.580154][ T3267] ? __pfx_process_one_work+0x10/0x10 [ 128.583350][ T3267] ? __pfx_hub_event+0x10/0x10 [ 128.586398][ T3267] worker_thread+0x5ef/0xe50 [ 128.590498][ T3267] ? __pfx_worker_thread+0x10/0x10 [ 128.592615][ T3267] ? kthread+0x13a/0x450 [ 128.594472][ T3267] ? __pfx_worker_thread+0x10/0x10 [ 128.596698][ T3267] kthread+0x370/0x450 [ 128.598505][ T3267] ? __pfx_kthread+0x10/0x10 [ 128.601436][ T3267] ret_from_fork+0x72b/0xd50 [ 128.603810][ T3267] ? __pfx_ret_from_fork+0x10/0x10 [ 128.606575][ T3267] ? __switch_to+0x800/0x10f0 [ 128.609155][ T3267] ? __pfx_kthread+0x10/0x10 [ 128.611785][ T3267] ret_from_fork_asm+0x1a/0x30 [ 128.614806][ T3267] [ 128.617601][ T3267] Modules linked in: [ 128.621332][ T5755] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 128.625510][ T5755] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 128.628463][ T5755] CPU: 2 UID: 0 PID: 5755 Comm: kworker/2:3 Tainted: G D syzkaller #0 PREEMPT(full) [ 128.633614][ T5755] Tainted: [D]=DIE [ 128.636448][ T5755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.643259][ T3267] ---[ end trace 0000000000000000 ]--- [ 128.657526][ T5755] Workqueue: usb_hub_wq hub_event [ 128.657655][ T5755] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 128.657782][ T5755] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 128.657888][ T5755] RSP: 0018:ffffc9000442eec8 EFLAGS: 00010202 [ 128.657902][ T5755] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 128.657912][ T5755] RDX: ffff888023724a80 RSI: 0000000000000004 RDI: 0000000000000004 [ 128.657921][ T5755] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 128.657966][ T5755] R10: 0000000000000000 R11: ffffffff81d5692c R12: 0000000000000000 [ 128.657978][ T5755] R13: ffff88806dd10580 R14: ffffc9000442efe8 R15: dffffc0000000000 [ 128.657990][ T5755] FS: 0000000000000000(0000) GS:ffff888096de3000(0000) knlGS:0000000000000000 [ 128.658022][ T5755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.658036][ T5755] CR2: 000000000c3be5fe CR3: 0000000049f7b000 CR4: 0000000000352ef0 [ 128.658047][ T5755] Call Trace: [ 128.658056][ T5755] [ 128.658065][ T5755] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 128.658136][ T5755] ? emi26_probe+0x114/0xe30 [ 128.658158][ T5755] emi26_probe+0x13c/0xe30 [ 128.658250][ T5755] ? _raw_spin_lock_irqsave+0x52/0x60 [ 128.658270][ T5755] ? find_held_lock+0x2b/0x80 [ 128.658292][ T5755] ? __pfx_emi26_probe+0x10/0x10 [ 128.658350][ T5755] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.658404][ T5755] ? lockdep_hardirqs_on+0x78/0x100 [ 128.658426][ T5755] ? __pm_runtime_set_status+0x13c/0x970 [ 128.658490][ T5755] usb_probe_interface+0x303/0x8f0 [ 128.658520][ T5755] ? __pfx_usb_probe_interface+0x10/0x10 [ 128.658583][ T5755] really_probe+0x241/0xa60 [ 128.658609][ T5755] __driver_probe_device+0x20e/0x450 [ 128.658668][ T5755] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.658695][ T5755] driver_probe_device+0x4a/0x140 [ 128.658755][ T5755] __device_attach_driver+0x1df/0x320 [ 128.658781][ T5755] ? __pfx___device_attach_driver+0x10/0x10 [ 128.658858][ T5755] bus_for_each_drv+0x159/0x1e0 [ 128.658880][ T5755] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.658900][ T5755] ? lockdep_hardirqs_on+0x78/0x100 [ 128.658919][ T5755] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.658975][ T5755] __device_attach+0x1e4/0x4d0 [ 128.659001][ T5755] ? __pfx___device_attach+0x10/0x10 [ 128.659061][ T5755] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.659122][ T5755] device_initial_probe+0xaf/0xd0 [ 128.659149][ T5755] bus_probe_device+0x64/0x160 [ 128.659170][ T5755] device_add+0x121d/0x1970 [ 128.659236][ T5755] ? __pfx_device_add+0x10/0x10 [ 128.659299][ T5755] ? mark_held_locks+0x40/0x70 [ 128.659327][ T5755] usb_set_configuration+0xd97/0x1c60 [ 128.659422][ T5755] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 128.659444][ T5755] usb_generic_driver_probe+0xa1/0xe0 [ 128.659464][ T5755] usb_probe_device+0xef/0x400 [ 128.659525][ T5755] ? __pfx_usb_probe_device+0x10/0x10 [ 128.659586][ T5755] really_probe+0x241/0xa60 [ 128.659610][ T5755] __driver_probe_device+0x20e/0x450 [ 128.659670][ T5755] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.659729][ T5755] driver_probe_device+0x4a/0x140 [ 128.659751][ T5755] __device_attach_driver+0x1df/0x320 [ 128.659811][ T5755] ? __pfx___device_attach_driver+0x10/0x10 [ 128.659871][ T5755] bus_for_each_drv+0x159/0x1e0 [ 128.659892][ T5755] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.659912][ T5755] ? lockdep_hardirqs_on+0x78/0x100 [ 128.659969][ T5755] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.660025][ T5755] __device_attach+0x1e4/0x4d0 [ 128.660049][ T5755] ? __pfx___device_attach+0x10/0x10 [ 128.660113][ T5755] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.660193][ T5755] device_initial_probe+0xaf/0xd0 [ 128.660253][ T5755] bus_probe_device+0x64/0x160 [ 128.660277][ T5755] device_add+0x121d/0x1970 [ 128.660304][ T5755] ? __pfx_device_add+0x10/0x10 [ 128.660329][ T5755] ? usb_detect_static_quirks+0x335/0x3e0 [ 128.660353][ T5755] usb_new_device.cold+0x685/0x115c [ 128.660376][ T5755] ? _mutex_trylock_nest_lock+0x241/0x310 [ 128.660397][ T5755] ? do_raw_spin_lock+0x128/0x260 [ 128.660415][ T5755] ? __pfx_usb_new_device+0x10/0x10 [ 128.660438][ T5755] ? mark_held_locks+0x40/0x70 [ 128.660465][ T5755] hub_event+0x30a3/0x4a60 [ 128.660497][ T5755] ? __pfx_hub_event+0x10/0x10 [ 128.660519][ T5755] ? debug_object_deactivate+0x2e4/0x3b0 [ 128.660548][ T5755] ? rcu_is_watching+0x12/0xc0 [ 128.660570][ T5755] process_one_work+0xa23/0x1940 [ 128.660599][ T5755] ? __pfx_process_one_work+0x10/0x10 [ 128.660626][ T5755] ? __pfx_hub_event+0x10/0x10 [ 128.660650][ T5755] worker_thread+0x5ef/0xe50 [ 128.660677][ T5755] ? __pfx_worker_thread+0x10/0x10 [ 128.660701][ T5755] ? kthread+0x13a/0x450 [ 128.660723][ T5755] ? __pfx_worker_thread+0x10/0x10 [ 128.660747][ T5755] kthread+0x370/0x450 [ 128.660784][ T5755] ? __pfx_kthread+0x10/0x10 [ 128.660807][ T5755] ret_from_fork+0x72b/0xd50 [ 128.660829][ T5755] ? __pfx_ret_from_fork+0x10/0x10 [ 128.660849][ T5755] ? rcu_is_watching+0x12/0xc0 [ 128.660869][ T5755] ? __switch_to+0x800/0x10f0 [ 128.660895][ T5755] ? __pfx_kthread+0x10/0x10 [ 128.660918][ T5755] ret_from_fork_asm+0x1a/0x30 [ 128.660947][ T5755] [ 128.660953][ T5755] Modules linked in: [ 128.661786][ T5755] ---[ end trace 0000000000000000 ]--- [ 128.875327][ T56] usb 8-1: emi26_load_firmware - request_firmware() failed [ 128.889225][ T3267] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 128.889264][ T3267] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 128.889281][ T3267] RSP: 0000:ffffc900267f6ec8 EFLAGS: 00010202 [ 128.889297][ T3267] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 128.889309][ T3267] RDX: ffff8880260da540 RSI: 0000000000000004 RDI: 0000000000000004 [ 128.889321][ T3267] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 128.889330][ T3267] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 128.889341][ T3267] R13: ffff888000c948c0 R14: ffffc900267f6fe8 R15: dffffc0000000000 [ 128.889352][ T3267] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 128.889388][ T3267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.889403][ T3267] CR2: 00000000f7248950 CR3: 00000000516bd000 CR4: 0000000000352ef0 [ 128.889416][ T3267] Kernel panic - not syncing: Fatal exception [ 128.893682][ T3267] Kernel Offset: disabled