last executing test programs: 6.543223958s ago: executing program 3 (id=8): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 5.277663183s ago: executing program 3 (id=9): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000940)='./file1\x00') socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380), &(0x7f0000000440), 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="de0000000001000000000013730000a10000001100000018010000646c6c2500000000002020207b1af8ff00ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x1e4}}, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 4.926321622s ago: executing program 1 (id=2): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) time(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x4048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r6, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64e", 0x13}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r4}}) 3.320926145s ago: executing program 1 (id=10): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1000, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x35, 0x2f, 0x0, @multicast2, @loopback}}}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='11', 0x2) 3.2187104s ago: executing program 3 (id=11): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000940)='./file1\x00') r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380), &(0x7f0000000440), 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fbdbdf251800000008000100706330303a31302e3000000000080003000200000408000b000200000006001600010000000500120000000000060011000a00000008000b00030000000e0001006e657464657673696dacdb83e3410000000f0002006e657464657673696d300000080003000000000008000b00ffffff7f06001600050000000500120001000000060011004333000008000b002ca4bc4f0801007063690011000200303030303a30303a31302e3000000000080003000000000008000b00050000000600160008000000050012000100000006001100700e000008000b00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000310fdffffff08000b000600000006001600020000000500120000000000060011005bb4000008000b0003000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000d0000000600160007000000050012000100000006001100450b000008000b009739000008000100706329001100303a30303a31302e3000000000080003000200000008000b000010000006001600580200000500120000000000060011000400000008000b0004000000000000000000000000001bb7447cb5923d51243d69ac5c6e2b8a1dd574f26adb3450fc32b04870a18f8f46e3083b57b8667c14d7991654cd9828"], 0x1e4}}, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3.149277693s ago: executing program 5 (id=6): mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000b01010126bd7d00fbdbdf250500000509005d006365706800000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005580)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2.607002964s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x14, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x2c}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) 2.108276432s ago: executing program 3 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc0200"/37], 0x0) 2.051343835s ago: executing program 2 (id=3): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f09058103204003086409050203080020"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x81, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) 1.964509578s ago: executing program 5 (id=13): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.910058701s ago: executing program 4 (id=5): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528", 0x78}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.380829531s ago: executing program 5 (id=14): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1000, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x35, 0x2f, 0x0, @multicast2, @loopback}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) 1.378833938s ago: executing program 4 (id=15): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010004000000fbdbdf250a404000030000080800000014000200fc020000000000000000000000000000140001002001"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) 1.280398296s ago: executing program 3 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r6, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 87.176949ms ago: executing program 3 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=18): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r2 = inotify_init() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x20000040) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) read(r4, &(0x7f0000000000)=""/147, 0x93) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 87.765906][ T5608] cgroup: Unknown subsys name 'net' [ 87.907865][ T5608] cgroup: Unknown subsys name 'cpuset' [ 87.917617][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.562211][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.184575][ T10] cfg80211: failed to load regulatory.db [ 92.074515][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.086758][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.095523][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.105379][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.117223][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.158881][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.168842][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.177850][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.186921][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.194684][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.273755][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.283360][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.291175][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.303730][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.316379][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.327642][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.336971][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.345026][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.359106][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.381685][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.390227][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.399637][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.410374][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.421724][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.430291][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.498329][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.507086][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.515258][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.528701][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.536533][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.212602][ T5625] Bluetooth: hci1: command tx timeout [ 94.222444][ T5625] Bluetooth: hci0: command tx timeout [ 94.451843][ T5625] Bluetooth: hci3: command tx timeout [ 94.451851][ T5629] Bluetooth: hci2: command tx timeout [ 94.531878][ T5625] Bluetooth: hci4: command tx timeout [ 94.612596][ T5625] Bluetooth: hci5: command tx timeout [ 94.935069][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.942721][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.949992][ T5646] bridge_slave_0: entered allmulticast mode [ 94.958988][ T5646] bridge_slave_0: entered promiscuous mode [ 95.020304][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.027456][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.034706][ T5646] bridge_slave_1: entered allmulticast mode [ 95.042355][ T5646] bridge_slave_1: entered promiscuous mode [ 95.147123][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.154375][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.161517][ T5624] bridge_slave_0: entered allmulticast mode [ 95.169222][ T5624] bridge_slave_0: entered promiscuous mode [ 95.207294][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.236490][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.243743][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.250877][ T5624] bridge_slave_1: entered allmulticast mode [ 95.258867][ T5624] bridge_slave_1: entered promiscuous mode [ 95.265997][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.273217][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.280332][ T5635] bridge_slave_0: entered allmulticast mode [ 95.288051][ T5635] bridge_slave_0: entered promiscuous mode [ 95.310392][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.319700][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.327032][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.334527][ T5628] bridge_slave_0: entered allmulticast mode [ 95.342359][ T5628] bridge_slave_0: entered promiscuous mode [ 95.384903][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.392098][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.399231][ T5635] bridge_slave_1: entered allmulticast mode [ 95.406958][ T5635] bridge_slave_1: entered promiscuous mode [ 95.433780][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.440895][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.448556][ T5628] bridge_slave_1: entered allmulticast mode [ 95.456097][ T5628] bridge_slave_1: entered promiscuous mode [ 95.477970][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.546547][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.578828][ T5646] team0: Port device team_slave_0 added [ 95.597284][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.604499][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.611625][ T5639] bridge_slave_0: entered allmulticast mode [ 95.619294][ T5639] bridge_slave_0: entered promiscuous mode [ 95.642264][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.666211][ T5646] team0: Port device team_slave_1 added [ 95.687095][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.696621][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.703876][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.711037][ T5639] bridge_slave_1: entered allmulticast mode [ 95.719198][ T5639] bridge_slave_1: entered promiscuous mode [ 95.743336][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.780390][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.805013][ T5624] team0: Port device team_slave_0 added [ 95.823377][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.830542][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.838023][ T5634] bridge_slave_0: entered allmulticast mode [ 95.845509][ T5634] bridge_slave_0: entered promiscuous mode [ 95.854023][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.861019][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.886979][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.925743][ T5624] team0: Port device team_slave_1 added [ 95.943627][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.950800][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.958000][ T5634] bridge_slave_1: entered allmulticast mode [ 95.965797][ T5634] bridge_slave_1: entered promiscuous mode [ 95.974222][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.981201][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.007124][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.036105][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.061050][ T5635] team0: Port device team_slave_0 added [ 96.090329][ T5628] team0: Port device team_slave_0 added [ 96.098539][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.123279][ T5635] team0: Port device team_slave_1 added [ 96.145695][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.157280][ T5628] team0: Port device team_slave_1 added [ 96.188419][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.195679][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.222286][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.261938][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.292057][ T5625] Bluetooth: hci0: command tx timeout [ 96.298558][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.302051][ T5625] Bluetooth: hci1: command tx timeout [ 96.306114][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.337279][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.361293][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.368303][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.394323][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.418874][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.425892][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.452201][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.465919][ T5639] team0: Port device team_slave_0 added [ 96.503181][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.510115][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.532062][ T5625] Bluetooth: hci3: command tx timeout [ 96.536602][ T5629] Bluetooth: hci2: command tx timeout [ 96.541945][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.571512][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.578557][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.604972][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.615891][ T5629] Bluetooth: hci4: command tx timeout [ 96.624723][ T5639] team0: Port device team_slave_1 added [ 96.651899][ T5646] hsr_slave_0: entered promiscuous mode [ 96.658514][ T5646] hsr_slave_1: entered promiscuous mode [ 96.675974][ T5634] team0: Port device team_slave_0 added [ 96.691847][ T5629] Bluetooth: hci5: command tx timeout [ 96.707893][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.714948][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.741775][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.754401][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.761339][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.787251][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.801010][ T5634] team0: Port device team_slave_1 added [ 96.925354][ T5628] hsr_slave_0: entered promiscuous mode [ 96.932122][ T5628] hsr_slave_1: entered promiscuous mode [ 96.938324][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 96.944383][ T5628] Cannot create hsr debugfs directory [ 96.952593][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.959544][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.985617][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.004004][ T5624] hsr_slave_0: entered promiscuous mode [ 97.010479][ T5624] hsr_slave_1: entered promiscuous mode [ 97.016925][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 97.022690][ T5624] Cannot create hsr debugfs directory [ 97.064262][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.071222][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.097497][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.136778][ T5635] hsr_slave_0: entered promiscuous mode [ 97.143297][ T5635] hsr_slave_1: entered promiscuous mode [ 97.149522][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 97.155376][ T5635] Cannot create hsr debugfs directory [ 97.292913][ T5639] hsr_slave_0: entered promiscuous mode [ 97.299394][ T5639] hsr_slave_1: entered promiscuous mode [ 97.305821][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 97.311538][ T5639] Cannot create hsr debugfs directory [ 97.394901][ T5634] hsr_slave_0: entered promiscuous mode [ 97.401436][ T5634] hsr_slave_1: entered promiscuous mode [ 97.407762][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 97.413721][ T5634] Cannot create hsr debugfs directory [ 98.027656][ T5628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.040481][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.050079][ T5628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.061432][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.070735][ T5628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.082413][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.090555][ T5628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.101050][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.181900][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.195671][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.213673][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.224562][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.243551][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.253576][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.273159][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.283817][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.347656][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.357804][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.371902][ T5629] Bluetooth: hci1: command tx timeout [ 98.375451][ T5625] Bluetooth: hci0: command tx timeout [ 98.378703][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.394867][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.409218][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.420778][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.429243][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.439139][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.549637][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.561373][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.570101][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.580022][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.602700][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.612592][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.614219][ T5625] Bluetooth: hci3: command tx timeout [ 98.622742][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.625770][ T5629] Bluetooth: hci2: command tx timeout [ 98.641966][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.701912][ T5629] Bluetooth: hci4: command tx timeout [ 98.733135][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.781853][ T5629] Bluetooth: hci5: command tx timeout [ 98.797937][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.808777][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.817085][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.827110][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.835360][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.845636][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.873040][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.884211][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.950931][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.003532][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.015547][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.022919][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.070600][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.081548][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.092195][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.099316][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.117944][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.128580][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.137038][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.147729][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.164695][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.177255][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.226252][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.259354][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.266473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.285777][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.326230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.333391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.383632][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.399722][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.450180][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.468298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.475420][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.509560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.516689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.548792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.555966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.595105][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.602271][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.688082][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.730186][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.857041][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.875324][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.923206][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.930363][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.940466][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.947677][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.010284][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.017477][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.034565][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.041695][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.453706][ T5629] Bluetooth: hci1: command tx timeout [ 100.454720][ T5625] Bluetooth: hci0: command tx timeout [ 100.695366][ T5625] Bluetooth: hci2: command tx timeout [ 100.695381][ T5629] Bluetooth: hci3: command tx timeout [ 100.773069][ T5625] Bluetooth: hci4: command tx timeout [ 100.853750][ T5625] Bluetooth: hci5: command tx timeout [ 101.105272][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.150423][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.388777][ T5646] veth0_vlan: entered promiscuous mode [ 101.483451][ T5646] veth1_vlan: entered promiscuous mode [ 101.653282][ T5646] veth0_macvtap: entered promiscuous mode [ 101.691669][ T5646] veth1_macvtap: entered promiscuous mode [ 101.800082][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.857313][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.938758][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.968233][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.089588][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.143832][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.201970][ T2980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.216048][ T2980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.239803][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.359760][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.363593][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.392365][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.483718][ T5634] veth0_vlan: entered promiscuous mode [ 102.497689][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.508683][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.559307][ T5634] veth1_vlan: entered promiscuous mode [ 102.598601][ T5628] veth0_vlan: entered promiscuous mode [ 102.604725][ T5646] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.626174][ T5639] veth0_vlan: entered promiscuous mode [ 102.653273][ T5624] veth0_vlan: entered promiscuous mode [ 102.706217][ T5628] veth1_vlan: entered promiscuous mode [ 102.715286][ T5624] veth1_vlan: entered promiscuous mode [ 102.740735][ T5639] veth1_vlan: entered promiscuous mode [ 102.827720][ T5635] veth0_vlan: entered promiscuous mode [ 102.851643][ T5634] veth0_macvtap: entered promiscuous mode [ 102.913864][ T5634] veth1_macvtap: entered promiscuous mode [ 102.948006][ T5635] veth1_vlan: entered promiscuous mode [ 103.003225][ T5628] veth0_macvtap: entered promiscuous mode [ 103.029823][ T5624] veth0_macvtap: entered promiscuous mode [ 103.044828][ T5639] veth0_macvtap: entered promiscuous mode [ 103.065072][ T5624] veth1_macvtap: entered promiscuous mode [ 103.078833][ T5628] veth1_macvtap: entered promiscuous mode [ 103.090810][ T5639] veth1_macvtap: entered promiscuous mode [ 103.108811][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.186049][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.232357][ T440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250585][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.277563][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.290064][ T5635] veth0_macvtap: entered promiscuous mode [ 103.305314][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.339199][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.360066][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.387878][ T5635] veth1_macvtap: entered promiscuous mode [ 103.408531][ T2980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.421549][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.471864][ T2980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.524290][ T5862] misc userio: The device must be registered before sending interrupts [ 103.964362][ T500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.103562][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.180890][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.241401][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.490314][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 104.631839][ T440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.751453][ T440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758296][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.772562][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.797354][ T440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.862829][ T137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.169495][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.181445][ T137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.212108][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.232325][ T500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.242749][ T500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.255771][ T500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.291966][ T3374] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.348468][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.368916][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.396217][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.418011][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.527134][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.540384][ T3374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.559190][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.602826][ T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.627191][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.637326][ T137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.739739][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.787616][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.877835][ T5882] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5634] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[5882] [ 107.139168][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.160870][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.559400][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.604247][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.760270][ T5889] ======================================================= [ 107.760270][ T5889] WARNING: The mand mount option has been deprecated and [ 107.760270][ T5889] and is ignored by this kernel. Remove the mand [ 107.760270][ T5889] option from the mount to silence this warning. [ 107.760270][ T5889] ======================================================= [ 107.937190][ T5890] syz.5.6 uses obsolete (PF_INET,SOCK_PACKET) [ 107.950665][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.972683][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.043913][ T5893] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6'. [ 108.182961][ T3374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.208097][ T3374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.432292][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.456137][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.154189][ T5919] Zero length message leads to an empty skb [ 109.272784][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.402832][ T5780] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.486633][ T29] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 109.548232][ T29] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 109.593865][ T5780] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.614124][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 109.643230][ T29] usb 3-1: string descriptor 0 read error: -22 [ 109.650590][ T5780] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.668285][ T29] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.701377][ T5780] usb 1-1: Dual-Role OTG device on HNP port [ 109.923057][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.949741][ T5780] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 110.747314][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.798624][ C1] ------------[ cut here ]------------ [ 110.804321][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 110.810926][ C1] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#1: kworker/1:6/5780 [ 110.821658][ C1] Modules linked in: [ 110.825639][ C1] CPU: 1 UID: 0 PID: 5780 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 110.835024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.845086][ C1] Workqueue: usb_hub_wq hub_event [ 110.850145][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 110.855548][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 0a da 61 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 a1 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 94 b7 8c [ 110.875166][ C1] RSP: 0018:ffffc90000a08a10 EFLAGS: 00010046 [ 110.881243][ C1] RAX: dffffc0000000000 RBX: ffff8880283ec0e0 RCX: ffffffff8cb7d820 [ 110.889219][ C1] RDX: 0000000000000081 RSI: ffffffff8cb7a180 RDI: ffffffff91306aa0 [ 110.897194][ C1] RBP: 0000000000000081 R08: ffffffff8cb79460 R09: 0000000000000000 [ 110.905171][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cb79460 [ 110.913147][ C1] R13: 0000000000000000 R14: ffff8880283ec0e0 R15: ffff8880555da0a0 [ 110.921122][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 110.930058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.936646][ C1] CR2: 0000200000011000 CR3: 0000000056b6c000 CR4: 0000000000350ef0 [ 110.944626][ C1] Call Trace: [ 110.947903][ C1] [ 110.950746][ C1] hidg_set_alt+0x190/0xa10 [ 110.955287][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 110.960514][ C1] ? rcu_is_watching+0x12/0xc0 [ 110.965302][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.970964][ C1] composite_setup+0x2ccf/0x9290 [ 110.975938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.981611][ C1] ? __pfx_composite_setup+0x10/0x10 [ 110.986932][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 110.992332][ C1] ? do_raw_spin_lock+0x128/0x260 [ 110.997389][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.002793][ C1] ? configfs_composite_setup+0xfb/0x130 [ 111.008447][ C1] configfs_composite_setup+0xfb/0x130 [ 111.013934][ C1] dummy_timer+0x2045/0x36f0 [ 111.018547][ C1] ? do_raw_spin_lock+0x128/0x260 [ 111.023597][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.029249][ C1] ? find_held_lock+0x2b/0x80 [ 111.033955][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.039628][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.045299][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.051131][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.056784][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.062452][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 111.068470][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 111.073422][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.079075][ C1] ? mark_held_locks+0x40/0x70 [ 111.083855][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 111.089687][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 111.094638][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 111.099880][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 111.105026][ C1] handle_softirqs+0x1ea/0x9b0 [ 111.109817][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 111.115125][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.120778][ C1] ? _raw_spin_unlock+0x28/0x50 [ 111.125643][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.131294][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 111.136971][ C1] __irq_exit_rcu+0x162/0x210 [ 111.141670][ C1] irq_exit_rcu+0x9/0x30 [ 111.145931][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 111.151589][ C1] [ 111.154517][ C1] [ 111.157446][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.163446][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 111.169882][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 7f 28 f6 48 89 df e8 fe ce 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 de 17 f6 65 8b 05 4e 17 a7 08 85 c0 74 16 5b [ 111.189500][ C1] RSP: 0018:ffffc900042af090 EFLAGS: 00000246 [ 111.195584][ C1] RAX: 0000000000000006 RBX: ffff8880283ec000 RCX: 0000000000000040 [ 111.203560][ C1] RDX: 0000000000000000 RSI: ffffffff8e1ac58a RDI: ffffffff8c401a80 [ 111.211534][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 111.219509][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 111.227487][ C1] R13: ffff88802a453478 R14: 0000000000000000 R15: ffff88802a453400 [ 111.235484][ C1] dummy_urb_enqueue+0x56c/0x880 [ 111.240438][ C1] ? device_initial_probe+0x31/0xd0 [ 111.245674][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 111.250807][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.256465][ C1] usb_submit_urb+0x827/0x19b0 [ 111.261252][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.266901][ C1] ? __init_swait_queue_head+0xca/0x150 [ 111.272478][ C1] usb_start_wait_urb+0x10e/0x580 [ 111.277523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.283176][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 111.288738][ C1] ? trace_kmalloc+0xeb/0x110 [ 111.293438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.299089][ C1] ? __asan_memset+0x23/0x50 [ 111.303705][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.309367][ C1] usb_control_msg+0x328/0x4b0 [ 111.314158][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 111.319471][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.325130][ C1] usb_control_msg_send+0xca/0x130 [ 111.330270][ C1] usb_set_configuration+0xb8f/0x1c60 [ 111.335698][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 111.341787][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 111.347189][ C1] usb_probe_device+0xef/0x400 [ 111.351983][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 111.357392][ C1] really_probe+0x241/0xa60 [ 111.361928][ C1] __driver_probe_device+0x20e/0x450 [ 111.367237][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.372897][ C1] driver_probe_device+0x4a/0x140 [ 111.377950][ C1] __device_attach_driver+0x1df/0x320 [ 111.383352][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 111.389277][ C1] bus_for_each_drv+0x159/0x1e0 [ 111.394147][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 111.399539][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.405189][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 111.410416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.416065][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.421899][ C1] __device_attach+0x1e4/0x4d0 [ 111.426692][ C1] ? __pfx___device_attach+0x10/0x10 [ 111.432005][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.437657][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 111.442879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.448545][ C1] device_initial_probe+0xaf/0xd0 [ 111.453604][ C1] bus_probe_device+0x64/0x160 [ 111.458400][ C1] device_add+0x121d/0x1970 [ 111.462941][ C1] ? __pfx_device_add+0x10/0x10 [ 111.467820][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 111.473566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.479226][ C1] usb_new_device.cold+0x685/0x115c [ 111.484456][ C1] ? _mutex_trylock_nest_lock+0x241/0x310 [ 111.490202][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 111.495428][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.501085][ C1] ? mark_held_locks+0x40/0x70 [ 111.505871][ C1] hub_event+0x30a3/0x4a60 [ 111.510352][ C1] ? __pfx_hub_event+0x10/0x10 [ 111.515145][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.520812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.526467][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.532123][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.537775][ C1] ? rcu_is_watching+0x12/0xc0 [ 111.542574][ C1] process_one_work+0xa23/0x1940 [ 111.547549][ C1] ? __pfx_process_one_work+0x10/0x10 [ 111.552945][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.558612][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.564268][ C1] worker_thread+0x5ef/0xe50 [ 111.568882][ C1] ? __pfx_worker_thread+0x10/0x10 [ 111.574006][ C1] ? kthread+0x13a/0x450 [ 111.578282][ C1] ? __pfx_worker_thread+0x10/0x10 [ 111.583406][ C1] kthread+0x370/0x450 [ 111.587509][ C1] ? __pfx_kthread+0x10/0x10 [ 111.592132][ C1] ret_from_fork+0x72b/0xd50 [ 111.596749][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 111.601887][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.607541][ C1] ? __switch_to+0x800/0x10f0 [ 111.612252][ C1] ? __switch_to_asm+0x39/0x70 [ 111.617041][ C1] ? __pfx_kthread+0x10/0x10 [ 111.621665][ C1] ret_from_fork_asm+0x1a/0x30 [ 111.626480][ C1] [ 111.629502][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.636784][ C1] CPU: 1 UID: 0 PID: 5780 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 111.646165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.656229][ C1] Workqueue: usb_hub_wq hub_event [ 111.661287][ C1] Call Trace: [ 111.664565][ C1] [ 111.667410][ C1] dump_stack_lvl+0x100/0x190 [ 111.672105][ C1] vpanic+0x552/0x970 [ 111.676098][ C1] ? __pfx_vpanic+0x10/0x10 [ 111.680624][ C1] panic+0xd1/0xe0 [ 111.684359][ C1] ? __pfx_panic+0x10/0x10 [ 111.688802][ C1] ? check_panic_on_warn+0x1f/0x90 [ 111.693951][ C1] check_panic_on_warn.cold+0x19/0x34 [ 111.699337][ C1] ? usb_ep_enable+0x3e6/0x490 [ 111.704132][ C1] __warn.cold+0x191/0x318 [ 111.708567][ C1] __report_bug+0x30f/0x440 [ 111.713095][ C1] ? usb_ep_enable+0x3e6/0x490 [ 111.717891][ C1] ? __pfx___report_bug+0x10/0x10 [ 111.722940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.728592][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.734427][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 111.739648][ C1] ? worker_thread+0x5ef/0xe50 [ 111.744423][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 111.749396][ C1] report_bug_entry+0xe1/0x290 [ 111.754186][ C1] ? usb_ep_enable+0x3f8/0x490 [ 111.758985][ C1] handle_bug+0x1cd/0x2a0 [ 111.763345][ C1] exc_invalid_op+0x17/0x50 [ 111.767889][ C1] asm_exc_invalid_op+0x1a/0x20 [ 111.772752][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 111.778158][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 0a da 61 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 a1 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 94 b7 8c [ 111.797774][ C1] RSP: 0018:ffffc90000a08a10 EFLAGS: 00010046 [ 111.803855][ C1] RAX: dffffc0000000000 RBX: ffff8880283ec0e0 RCX: ffffffff8cb7d820 [ 111.811833][ C1] RDX: 0000000000000081 RSI: ffffffff8cb7a180 RDI: ffffffff91306aa0 [ 111.819810][ C1] RBP: 0000000000000081 R08: ffffffff8cb79460 R09: 0000000000000000 [ 111.827785][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cb79460 [ 111.835761][ C1] R13: 0000000000000000 R14: ffff8880283ec0e0 R15: ffff8880555da0a0 [ 111.843761][ C1] hidg_set_alt+0x190/0xa10 [ 111.848300][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 111.853533][ C1] ? rcu_is_watching+0x12/0xc0 [ 111.858337][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.864000][ C1] composite_setup+0x2ccf/0x9290 [ 111.868981][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.874652][ C1] ? __pfx_composite_setup+0x10/0x10 [ 111.879974][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.885375][ C1] ? do_raw_spin_lock+0x128/0x260 [ 111.890429][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.895833][ C1] ? configfs_composite_setup+0xfb/0x130 [ 111.901488][ C1] configfs_composite_setup+0xfb/0x130 [ 111.906973][ C1] dummy_timer+0x2045/0x36f0 [ 111.911584][ C1] ? do_raw_spin_lock+0x128/0x260 [ 111.916634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.922293][ C1] ? find_held_lock+0x2b/0x80 [ 111.927007][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.932678][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.938348][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.944182][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.949836][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 111.955502][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 111.961534][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 111.966487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.972153][ C1] ? mark_held_locks+0x40/0x70 [ 111.976936][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 111.982768][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 111.987721][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 111.992965][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 111.998111][ C1] handle_softirqs+0x1ea/0x9b0 [ 112.002904][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 112.008209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.013862][ C1] ? _raw_spin_unlock+0x28/0x50 [ 112.018733][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.024397][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 112.030068][ C1] __irq_exit_rcu+0x162/0x210 [ 112.034772][ C1] irq_exit_rcu+0x9/0x30 [ 112.039035][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 112.044691][ C1] [ 112.047621][ C1] [ 112.050560][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.056557][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 112.062997][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 7f 28 f6 48 89 df e8 fe ce 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 de 17 f6 65 8b 05 4e 17 a7 08 85 c0 74 16 5b [ 112.082624][ C1] RSP: 0018:ffffc900042af090 EFLAGS: 00000246 [ 112.088713][ C1] RAX: 0000000000000006 RBX: ffff8880283ec000 RCX: 0000000000000040 [ 112.096690][ C1] RDX: 0000000000000000 RSI: ffffffff8e1ac58a RDI: ffffffff8c401a80 [ 112.104670][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 112.112647][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 112.120625][ C1] R13: ffff88802a453478 R14: 0000000000000000 R15: ffff88802a453400 [ 112.128625][ C1] dummy_urb_enqueue+0x56c/0x880 [ 112.133584][ C1] ? device_initial_probe+0x31/0xd0 [ 112.138822][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 112.143955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.149614][ C1] usb_submit_urb+0x827/0x19b0 [ 112.154408][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.160067][ C1] ? __init_swait_queue_head+0xca/0x150 [ 112.165653][ C1] usb_start_wait_urb+0x10e/0x580 [ 112.170703][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.176361][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 112.181934][ C1] ? trace_kmalloc+0xeb/0x110 [ 112.186639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.192295][ C1] ? __asan_memset+0x23/0x50 [ 112.196913][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.202574][ C1] usb_control_msg+0x328/0x4b0 [ 112.207365][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 112.212678][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.218342][ C1] usb_control_msg_send+0xca/0x130 [ 112.223490][ C1] usb_set_configuration+0xb8f/0x1c60 [ 112.228923][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 112.235009][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 112.240403][ C1] usb_probe_device+0xef/0x400 [ 112.245197][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 112.250605][ C1] really_probe+0x241/0xa60 [ 112.255141][ C1] __driver_probe_device+0x20e/0x450 [ 112.260455][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.266113][ C1] driver_probe_device+0x4a/0x140 [ 112.271170][ C1] __device_attach_driver+0x1df/0x320 [ 112.276577][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 112.282503][ C1] bus_for_each_drv+0x159/0x1e0 [ 112.287380][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 112.292773][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.298438][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 112.303664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.309318][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.315159][ C1] __device_attach+0x1e4/0x4d0 [ 112.319954][ C1] ? __pfx___device_attach+0x10/0x10 [ 112.325271][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.330925][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.336151][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.341812][ C1] device_initial_probe+0xaf/0xd0 [ 112.346916][ C1] bus_probe_device+0x64/0x160 [ 112.351708][ C1] device_add+0x121d/0x1970 [ 112.356261][ C1] ? __pfx_device_add+0x10/0x10 [ 112.361144][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 112.366893][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.372648][ C1] usb_new_device.cold+0x685/0x115c [ 112.377887][ C1] ? _mutex_trylock_nest_lock+0x241/0x310 [ 112.383640][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 112.388868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.394522][ C1] ? mark_held_locks+0x40/0x70 [ 112.399310][ C1] hub_event+0x30a3/0x4a60 [ 112.403798][ C1] ? __pfx_hub_event+0x10/0x10 [ 112.408590][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 112.414260][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.419920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.425576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.431229][ C1] ? rcu_is_watching+0x12/0xc0 [ 112.436032][ C1] process_one_work+0xa23/0x1940 [ 112.441001][ C1] ? __pfx_process_one_work+0x10/0x10 [ 112.446386][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.452053][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.457717][ C1] worker_thread+0x5ef/0xe50 [ 112.462334][ C1] ? __pfx_worker_thread+0x10/0x10 [ 112.467470][ C1] ? kthread+0x13a/0x450 [ 112.471759][ C1] ? __pfx_worker_thread+0x10/0x10 [ 112.476894][ C1] kthread+0x370/0x450 [ 112.481000][ C1] ? __pfx_kthread+0x10/0x10 [ 112.485629][ C1] ret_from_fork+0x72b/0xd50 [ 112.490251][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 112.495395][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.501048][ C1] ? __switch_to+0x800/0x10f0 [ 112.505762][ C1] ? __switch_to_asm+0x39/0x70 [ 112.510555][ C1] ? __pfx_kthread+0x10/0x10 [ 112.515182][ C1] ret_from_fork_asm+0x1a/0x30 [ 112.519996][ C1] [ 112.523234][ C1] Kernel Offset: disabled [ 112.527559][ C1] Rebooting in 86400 seconds..