last executing test programs: 16.044850307s ago: executing program 3 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x0) 15.840965394s ago: executing program 3 (id=157): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = syz_ublk_setup_io_uring(0xd34, &(0x7f0000000480)={0x0, 0x56ca, 0x1, 0xfffffff9, 0x8313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000640)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaae1ffffffffff85dd60fca33f0000fa0e00000000000000000000000000000000fe8000000000000000000000fcb400aab23ecab2dd74e174dc18246e44cbfc51cbcb99a8dca250200a30663286a5"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x401, 0x80500) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdff2, 0x80000001, 0x0, 0x0, 0x3b9aca03, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x4, 0x4, 0xfffffffffffffffc}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8924, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000000180)=""/93, 0x5d) shutdown(r1, 0x0) 13.621347732s ago: executing program 0 (id=159): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x10000000000c, 0xa, 0x1, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0, 0x10000f0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 13.568059034s ago: executing program 3 (id=161): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 11.146620827s ago: executing program 1 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x0) 10.553865331s ago: executing program 1 (id=166): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) socket(0x2, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 8.145720785s ago: executing program 0 (id=167): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.958660043s ago: executing program 3 (id=168): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x10000, 0x88, 0x5}, 0x18) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x10200, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 6.90779605s ago: executing program 1 (id=176): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0xa0, r1}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) timer_getoverrun(r2) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.662343197s ago: executing program 0 (id=169): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) r7 = gettid() sendmsg$nl_generic(r6, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001a40)={0x11b0, 0x3a, 0x400, 0x70bd27, 0x25dfdbfb, {0x1e}, [@typed={0x4, 0x98}, @nested={0x109e, 0x143, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x119, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x3c}, @typed={0x1004, 0xab, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xd9, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x17}, @generic="9867dd1bfdc83053843457777dba8374f8d609cfb0a03702feec7cb9d23b657c824cb9e316f489c9f4a695f1bfd473e4345a74701d746e52d44db1ef6ceb458e761eb2883dc141de8e359689eb6d892ce2551ae3a463e32b3e2242639c00687e01885696a9582501c3f3"]}, @nested={0x4e, 0x12e, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x16b, 0x0, 0x0, @fd=r5}, @generic="10eb694661bb5da8e52952e56084e429ff29b9e25bb8e3905eb3eb59793fe2fd853b1b2de479ee78f5cdab9f90e0fde271cde9b58bec", @nested={0x4, 0x46}]}, @generic="bbcaf096e5bf020b68540a61b379cb40c23398cd8e4b0e48b1062d8f5b3e173d05aa48ac6823df13", @generic="70d2ce35c98d53c8623d0c18e4e2832dfcde743dc2ed4bd195b669ec57d9828c9ef7b6680474ed1ab4c39ee10bc5f7bb33f52ff7d7b83c9b4adfd6f21502011d9c3769c40710ec9bd90cf38fd0fc19edbeecc2bdcb72344ca75c59f08e8830cc9c4063698fc1bd6378cd677519f535e97e16c26495", @typed={0x4, 0x89, 0x0, 0x0, @binary}, @nested={0x4, 0x70}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 5.14396965s ago: executing program 2 (id=170): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.82290647s ago: executing program 2 (id=171): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0], 0x48}}, 0x0) 4.486777442s ago: executing program 2 (id=172): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x10000000000c, 0xa, 0x1, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0, 0x10000f0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 4.049861965s ago: executing program 0 (id=173): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x7ffffffe}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0xa0, r1}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="95140900000000090000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) timer_getoverrun(r2) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.289542151s ago: executing program 2 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x0) 3.178325327s ago: executing program 3 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x14) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 3.027459912s ago: executing program 1 (id=177): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x10000000000c, 0xa, 0x1, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0, 0x10000f0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 3.026909735s ago: executing program 2 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x10000, 0x88, 0x5}, 0x18) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x10200, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.589085668s ago: executing program 1 (id=179): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 1.278889991s ago: executing program 0 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6e, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x5}}}}, @qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x81}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}]}}]}, 0x164}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02c5150d44df388611cd97cfa0a3fed26f75e79c0974641f432d3898c7d3c675ba2c3ce3d6fe05a7512383bfbe1eb6d1810c27d15dbe1162d734c030ec6f8622998ae46b037973c99e98a911412b19", 0x4f}, {&(0x7f0000000340)="e6f616b848c25d1364996bdebcb618b09a9cdd91df285326497368692222f3fd6227cf49d8de356dd8deb6b5e7c8b2c1e4d1ea1680f4968daf7c4589e66c71ade65011b5cb2a4c", 0x47}, {&(0x7f00000003c0)="ba094f7f1691908f95ba6bb6e2f77ed31bc14707f30a41717cb4924ca63bd44d13", 0x21}], 0x3, 0x0, 0x0, 0x890}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0xfffffffc, 0x7a120, 0x7, {0x98c1, 0x400}, 0x200}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 1.242819328s ago: executing program 1 (id=181): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_connect(0x1, 0x6aa, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xd5, 0x8a, 0xcd, 0x20, 0x1066, 0x600, 0x3bc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x698, 0x2, 0xac, 0x6, 0x20, 0x8, "", [{{0x9, 0x4, 0xb, 0x81, 0x10, 0x69, 0x19, 0xe0, 0x6, [], [{{0x9, 0x5, 0xd, 0xe6c9b9c8226b437d, 0x3ff, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x74d8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf1, 0x1, [@generic={0x60, 0x3, "04293d5c00b5921815da197215485b7b6eea22881fabd07860b213e8ebed27c38fd4835a4b76db092bfbb9b89e8ae594020d5b6ffbb46dc383ecfe550bc922b98a33da97504fb42dac42b49e7cbfd3606c8c4ca6b5fc87770f4c61935191"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xbd, 0xeb, 0x4}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x6, 0x3, 0x30, [@generic={0xc8, 0xa, "0af975299672714db6c856528425b6c00c186ed55cef83dcb25e647d6d96582c2f29a993ee926d2f76605b5dd656e5e4df8a82050f89248bbe261e7a55c4a3bdaf31b2b882691fa3ceaf9c874d409cc02d3c267a7183c50f249bbf59cc582dff18af630fec681f2969bd490c17a9acccc1910ff9bf109bdc261587a88978e5633dc8f31c637600953796a9fe3c420bd35baa79e052e2de9a966d82c72eacd4ac32d3f7fe2b5214640e1b2357ffb18fd852b637bffb09144f3a73608dfb7b99c21c1c91003d80"}, @generic={0x41, 0x10, "6dee54ac6416c1e907c9eefd298f4bc161b0c6f1936bf7c9006df80241c736f4cbe7eefae53d02993a930bea982b5d8946752a5b3874af596f79b526b60a0a"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x38, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x958}]}}, {{0x9, 0x5, 0x80, 0x6, 0x0, 0x9, 0x10, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1}, @generic={0x14, 0x1, "117aa1a653d3922c9da7305d6434b41758f5"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x81, 0x3, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7d, 0x5, 0xfa}}, {{0x9, 0x5, 0x7, 0x11, 0x8, 0x0, 0x1, 0xf7}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x7, 0xed, 0x20, [@generic={0x92, 0x1, "184e9cd7229ac39a36c36094b40b00d22d09cf229ede8e5d36f1a1401f3e79475e8241806108f868b2e5a00da78eadcdf011f963dd0f0873f0153813d59ac0d9715363305c33e0696d592e275a72bb7d8be9ded26f62229a9406722ab46c467f516b4b1702b210c94c20556e067b697f626790014a824fedb685bdb53ad84810badcc12b5d10dd139b8d944f473f691a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7e, 0x93f2}]}}, {{0x9, 0x5, 0xd, 0xa, 0x400, 0xe, 0x9, 0x9, [@generic={0xa3, 0x22, "2d7465010c5585499d935de4d275f95586bda0e53683a3de58c48c561206e09bd2e6c8ba74490beb50dc6e7af23d2df688c8d2903a87eef9f5f5b35f7184587ddeb9c037faa99e88039ebce817bb66322925e55fa5e5052ec0a6ccd58ae90f585afc900057433895ddd9bd7fdb027d5004b25b0ceeda55522224ce54da850f5d9a12ee078e497a6144c42d0f82f3f88b1b77c2a1bcfd3716bf9e081983e5648309"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xcc}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x6, 0x9, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x8}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0xac, 0x6}}]}}, {{0x9, 0x4, 0x80, 0x18, 0xc, 0x8c, 0x63, 0xc6, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x60, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xf, 0x4, 0x2, [@generic={0xbe, 0x3, "1787299603b59e1b90b76a613e50120f01547b3827836ab257eff2be60379d5efa723489ca287f3ec2d87938105521025a3d15a030193328b800be4692cb43e6c58a3b40a55d1846d3d0c5748c5f4fb81780a9cfc04d84dfc670af2b083fe743a4489d28c1ded62d60ce1e21c591c66384ebd2ce2d450e533b93ee28f40df7e0092935124f932e6f9893ecad7009614cc5a3f658419e04e4cebf2d9ff48bc69fdffd4d21e26978e5325149e0dcd994f185c57a2a8e8a368f33261645"}]}}, {{0x9, 0x5, 0x8, 0x11, 0x400, 0xc, 0xfc, 0x2a}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x28, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x1, 0x6, 0x0, [@generic={0xc2, 0xa, "bbaa2f3269b082dc7ec191f376874a27409cba863648f4cf85d64830a1239de3558a9284ddf2f51f904fa1760ab0546b728d98a915a0a70495c489b0179c8256934f2b713b3f1bf28ddea115be1ce1db478d8ecb655bcef243ac720d599000b941d62978afc5f18d7d737d0d18277e18855bd1ec0b2c61be5f079315e4ccdee1d4ddc18ab69c1fa9e25c5d1b567fad55f1d024a4db539fc9efd5a3eb0d33c9b688101a6dba7bb1a3ad6cc5cb3fa4e9454366addefb318dd4a688b3eb8de1e4a3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x40, 0x8}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x9, 0x72, 0x4, [@generic={0xd8, 0x23, "b5469e125375b58e179aeaaf0fb48a8349e5322f9556129db2b1f4d5634427f9f8ec4048ef973e076549f7960169043a250ceb8d4823f882ad8af18df28919b1a9e6abb41b13c7f897f65425c14d7597f58a1c1a54f07901f36bc6eef636c0771ef1e7bea8fe8e14ceb08a3f3d5140568bf5827b8690f698c253f200dd5dd03efec2541b1f71ebf3d16d8a0fd3fd2771267efd9e9f61e3fceec80322efe1b9039927c0fe6ab22e8e32b817cab0e3ed3cf2eb9b60ad9c291345905bddcf2d8c6a8d3c9ba74ce3df004d01467c3eb12cc1e1f0fd89e603"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0xc, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x0, 0x3, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x3, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x2, 0x8, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x8, 0x3, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x2, 0xff, 0x70, 0x8, 0x1}, 0xc, &(0x7f0000000f00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x4, 0x4}]}, 0x5, [{0xf7, &(0x7f0000000f40)=@string={0xf7, 0x3, "9f4495a534ce836e0ac5bba5cbe83b6f11d1672b64ca2df45a29d252ba28534106a67371dd91f735e8ed8976cd846b155780f80dfcdbe5a27ae071f1395445e4e11e759ab769e4fec4a28e6e16c36e4d040c2d9c24599b8b6b5db9dbbbd186f58778a80eb90f13b3b0bdbec004da3724a0efe07f278a09ec956a4c68fb137385ce50a497a22508748b60fd8c7879d4f8049b0533f858a6903bfb24e59b133097a3d02a52fb32a01a9fe7f2243f5a215b3f7611f8b7afe6dcbab9899d0775082191fe5f53e06f4150bc604fa082e18632e55e8bf1da4fd15c1e677664976f9cff449ca3050b500b83b8eac6c634a96844042cf99e6c"}}, {0x23, &(0x7f0000001040)=@string={0x23, 0x3, "59887cb68c925d52e8237f12b0e4264b44af6dc995361a0af6c43467869b38bba8"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x842}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000000) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004b0000400000000000059078ac1414416401010044140503e0000002000000000a0100ff00000001830301004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200ed8f7800002ced34587473ebdc1527484a5af8d509de405a50b7e82d08bbc4fb421c49a5828f65915966a7fbc1c3b3003e4c0e0afb40b5a8484bea164e824eaabbd678b33650015e020548b7e3e0decef7e199aac750c2d7429168cf2865b90f5a3446265bfeba66e80acd5cd29a9cf7a1ba9a0e0c7676679578c5713eaed55b695930bc827ff2b97af41c15f07c3ede476dbadf6d56cbc9a007a0fc008bc2090ac629a402f8f7d0f27d84b4bbde714fcaf0e73c11e577e6e13c82bc"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) 761.333983ms ago: executing program 2 (id=182): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002) syz_io_uring_setup(0xf00, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000)) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$mice(0xffffff9c, &(0x7f0000000040), 0x41) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000080)=0x200004, 0x4) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x30) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02b725bcdf1e909dac6c27f4374acc00"/191], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 394.565154ms ago: executing program 0 (id=183): socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f00000003c0), 0x4880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400004c87701dbce397f8c175639a963a20a6dc4082e4d507e3fa6ec2307caf6e866d51e367aaeda5a8dc42fdb6e848fa171d939801f1ae961eab6abceff41f8aa7bbb08d5f97e4c9187c46a31f06b45c40cf2badab46d1d3b55c42801cd3c5eac5226577cca997e642c80fbf1a99c16dd7d8da998bedfd96c0a94306538c81ccdda95d2d5207b29c300cca38433f1ad94ffc1b8947d8883ec0fc8ab9caf03dc22ef9303c28ce4fee61c32fab9b1075fbf32204b81a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000", 0x51}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x36, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 3 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46055' (ED25519) to the list of known hosts. [ 41.979369][ T5732] cgroup: Unknown subsys name 'net' [ 42.102496][ T5732] cgroup: Unknown subsys name 'cpuset' [ 42.106760][ T5732] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.017486][ T5732] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.617908][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.622188][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.624848][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.629704][ T5761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.632343][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.634776][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.636369][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.638891][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.638944][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.639497][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.639718][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.640762][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.644088][ T5763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.648898][ T5762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.652793][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.654445][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.659432][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.663051][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.664950][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.667531][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.228264][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.231355][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.233687][ T5748] bridge_slave_0: entered allmulticast mode [ 47.236422][ T5748] bridge_slave_0: entered promiscuous mode [ 47.240805][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.243121][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.245406][ T5748] bridge_slave_1: entered allmulticast mode [ 47.247947][ T5748] bridge_slave_1: entered promiscuous mode [ 47.329591][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.336115][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.338211][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.340524][ T5746] bridge_slave_0: entered allmulticast mode [ 47.343202][ T5746] bridge_slave_0: entered promiscuous mode [ 47.346990][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.349623][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.351884][ T5746] bridge_slave_1: entered allmulticast mode [ 47.354440][ T5746] bridge_slave_1: entered promiscuous mode [ 47.357146][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.359432][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.361656][ T5758] bridge_slave_0: entered allmulticast mode [ 47.364253][ T5758] bridge_slave_0: entered promiscuous mode [ 47.367418][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.369702][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.371942][ T5758] bridge_slave_1: entered allmulticast mode [ 47.375101][ T5758] bridge_slave_1: entered promiscuous mode [ 47.380396][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.411009][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.413327][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.415618][ T5747] bridge_slave_0: entered allmulticast mode [ 47.418285][ T5747] bridge_slave_0: entered promiscuous mode [ 47.440862][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.442878][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.445725][ T5747] bridge_slave_1: entered allmulticast mode [ 47.448668][ T5747] bridge_slave_1: entered promiscuous mode [ 47.453514][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.458634][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.462799][ T5748] team0: Port device team_slave_0 added [ 47.467291][ T5748] team0: Port device team_slave_1 added [ 47.475959][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.480745][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.527752][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.532355][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.536310][ T5758] team0: Port device team_slave_0 added [ 47.540512][ T5758] team0: Port device team_slave_1 added [ 47.543250][ T5746] team0: Port device team_slave_0 added [ 47.545783][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.548018][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.555922][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.581271][ T5746] team0: Port device team_slave_1 added [ 47.583896][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.586682][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.594850][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.608707][ T5747] team0: Port device team_slave_0 added [ 47.616111][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.618654][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.626703][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.631719][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.633940][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.642077][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.646645][ T5747] team0: Port device team_slave_1 added [ 47.660604][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.662803][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.671065][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.696239][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.699297][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.709927][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.726933][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.730008][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.740391][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.759040][ T5758] hsr_slave_0: entered promiscuous mode [ 47.761449][ T5758] hsr_slave_1: entered promiscuous mode [ 47.764045][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.766263][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.774249][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.780583][ T5748] hsr_slave_0: entered promiscuous mode [ 47.782804][ T5748] hsr_slave_1: entered promiscuous mode [ 47.784926][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 47.786800][ T5748] Cannot create hsr debugfs directory [ 47.835432][ T5746] hsr_slave_0: entered promiscuous mode [ 47.837719][ T5746] hsr_slave_1: entered promiscuous mode [ 47.840589][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 47.842395][ T5746] Cannot create hsr debugfs directory [ 47.878052][ T5747] hsr_slave_0: entered promiscuous mode [ 47.881270][ T5747] hsr_slave_1: entered promiscuous mode [ 47.884181][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 47.886602][ T5747] Cannot create hsr debugfs directory [ 48.117579][ T5758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.125085][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.128272][ T5758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.135583][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.138544][ T5758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.142722][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.146365][ T5758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.153355][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.198768][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.204889][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.208523][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.214483][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.218545][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.223732][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.227209][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.233169][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.302773][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.310272][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.313857][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.322502][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.326079][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.335912][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.339950][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.345919][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.403871][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.408171][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.410848][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.414841][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.417466][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.423924][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.426808][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.431243][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.458708][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.485578][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.507162][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.520433][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.523004][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.533633][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.540662][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.542974][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.560261][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.562645][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.577361][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.589520][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.591821][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.603988][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.609640][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.621043][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.623339][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.640423][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.642737][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.660249][ T5750] Bluetooth: hci0: command tx timeout [ 48.666301][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.674148][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.676628][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.693515][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.695871][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.738134][ T5750] Bluetooth: hci1: command tx timeout [ 48.747953][ T5752] Bluetooth: hci3: command tx timeout [ 48.750331][ T5750] Bluetooth: hci2: command tx timeout [ 48.885883][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.912861][ T5758] veth0_vlan: entered promiscuous mode [ 48.918198][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.926962][ T5758] veth1_vlan: entered promiscuous mode [ 48.942025][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.958175][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.971742][ T5748] veth0_vlan: entered promiscuous mode [ 48.980717][ T5748] veth1_vlan: entered promiscuous mode [ 49.002978][ T5746] veth0_vlan: entered promiscuous mode [ 49.013540][ T5758] veth0_macvtap: entered promiscuous mode [ 49.019132][ T5746] veth1_vlan: entered promiscuous mode [ 49.025507][ T5758] veth1_macvtap: entered promiscuous mode [ 49.042484][ T5747] veth0_vlan: entered promiscuous mode [ 49.046172][ T5748] veth0_macvtap: entered promiscuous mode [ 49.056063][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.059139][ T5748] veth1_macvtap: entered promiscuous mode [ 49.066841][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.070775][ T5747] veth1_vlan: entered promiscuous mode [ 49.087452][ T5557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.091572][ T5557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.097418][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.100987][ T5746] veth0_macvtap: entered promiscuous mode [ 49.104817][ T5557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.112505][ T5746] veth1_macvtap: entered promiscuous mode [ 49.116323][ T5557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.122758][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.135960][ T5557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.141137][ T5557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.149595][ T5557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.152745][ T5557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.171426][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.181112][ T5747] veth0_macvtap: entered promiscuous mode [ 49.190235][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.197012][ T5747] veth1_macvtap: entered promiscuous mode [ 49.220682][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.224100][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.237560][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.240960][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.244907][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.247435][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.254179][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.274809][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.279604][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.282660][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.291836][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.294973][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.303872][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.306846][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.314849][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.317892][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.325364][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.328406][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.347169][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.350660][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.387393][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.390149][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.390906][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.395751][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.403570][ T5758] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.410833][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.413856][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.419500][ T5748] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.424672][ T5758] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.426030][ T5748] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.448046][ T5748] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.838282][ T1480] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.022893][ T1480] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 50.027516][ T1480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.075932][ T1480] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 50.098487][ T1480] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 50.107900][ T1480] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 50.279375][ T5904] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 50.293329][ T1480] usb 6-1: emi26_load_firmware - request_firmware() failed [ 50.300409][ T1480] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 50.311887][ T1480] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 50.350843][ T1480] usb 6-1: USB disconnect, device number 2 [ 50.455931][ T5853] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.667748][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 50.677348][ T5853] usb 5-1: config index 0 descriptor too short (expected 13339, got 27) [ 50.680050][ T5853] usb 5-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 50.684180][ T5853] usb 5-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 50.691420][ T5853] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 50.696000][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 50.701851][ T5853] usb 5-1: Product: syz [ 50.705214][ T5853] usb 5-1: Manufacturer: syz [ 50.715870][ T5853] usb 5-1: SerialNumber: syz [ 50.747860][ T5752] Bluetooth: hci0: command tx timeout [ 50.793051][ T5952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 50.795509][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 50.803189][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 50.817850][ T5752] Bluetooth: hci3: command tx timeout [ 50.819724][ T5752] Bluetooth: hci2: command tx timeout [ 50.821924][ T5750] Bluetooth: hci1: command tx timeout [ 51.078242][ T5745] usb 44-1: SetAddress Request (2) to port 0 [ 51.093526][ T5745] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 51.262682][ T5910] Bluetooth: MGMT ver 1.23 [ 51.318598][ T5853] usb 5-1: USB disconnect, device number 2 [ 51.352884][ T5953] vhci_hcd: connection reset by peer [ 51.356979][ T5896] vhci_hcd vhci_hcd.3: stop threads [ 51.360383][ T5896] vhci_hcd vhci_hcd.3: release socket [ 51.363514][ T5896] vhci_hcd vhci_hcd.3: disconnect device [ 51.489588][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 51.503744][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 51.508242][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 51.543673][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 51.568558][ T5976] team0 (unregistering): Port device team_slave_0 removed [ 51.573762][ T5976] team0 (unregistering): Port device team_slave_1 removed [ 51.597617][ T5978] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.613579][ T5978] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 51.616436][ T5978] netlink: 'syz.1.6': attribute type 2 has an invalid length. [ 51.666430][ T5980] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 51.668968][ T5980] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 52.564258][ T5982] binder: 5981:5982 unknown command 1078485781 [ 52.566297][ T5982] binder: 5981:5982 ioctl c0306201 80000300 returned -22 [ 52.817735][ T5752] Bluetooth: hci0: command tx timeout [ 52.856658][ T5992] process 'syz.3.12' launched './file2' with NULL argv: empty string added [ 52.899222][ T5752] Bluetooth: hci2: command tx timeout [ 52.899252][ T64] Bluetooth: hci1: command tx timeout [ 52.903526][ T5752] Bluetooth: hci3: command tx timeout [ 53.268952][ T6004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 53.287940][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 53.978435][ T1494] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.209540][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 54.217747][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 54.287831][ T1494] usb 8-1: Using ep0 maxpacket: 32 [ 54.294276][ T1494] usb 8-1: config index 0 descriptor too short (expected 13339, got 27) [ 54.299560][ T1494] usb 8-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 54.306314][ T1494] usb 8-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 54.320654][ T1494] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 54.326546][ T1494] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 54.333812][ T1494] usb 8-1: Product: syz [ 54.336369][ T1494] usb 8-1: Manufacturer: syz [ 54.340342][ T1494] usb 8-1: SerialNumber: syz [ 54.659913][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'. [ 54.662760][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 54.850578][ T6009] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 54.899114][ T5752] Bluetooth: hci0: command tx timeout [ 54.981578][ T5752] Bluetooth: hci3: command tx timeout [ 54.981663][ T5750] Bluetooth: hci2: command tx timeout [ 54.985359][ T64] Bluetooth: hci1: command tx timeout [ 55.548665][ T1494] usb 8-1: USB disconnect, device number 2 [ 56.077001][ T6082] binder: 6081:6082 ioctl c00c6211 0 returned -14 [ 56.177824][ T5745] usb 44-1: device descriptor read/8, error -110 [ 56.177900][ T5824] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.350669][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 56.427426][ T5824] usb 5-1: config index 0 descriptor too short (expected 13339, got 27) [ 56.442173][ T5824] usb 5-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 56.446251][ T5824] usb 5-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 56.461827][ T5824] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 56.465617][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 56.471567][ T5824] usb 5-1: Product: syz [ 56.472966][ T5824] usb 5-1: Manufacturer: syz [ 56.474427][ T5824] usb 5-1: SerialNumber: syz [ 56.625195][ T6091] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 56.635658][ T6085] IPVS: stopping master sync thread 6091 ... [ 56.639607][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 56.969741][ T5745] usb usb44-port1: attempt power cycle [ 57.041213][ T6103] binder: 6102:6103 ioctl c00c6211 0 returned -14 [ 57.860257][ T6123] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 57.862321][ T6123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 57.870388][ T6123] vhci_hcd vhci_hcd.0: Device attached [ 57.958171][ T5745] usb usb44-port1: unable to enumerate USB device [ 58.028694][ T5824] usb 5-1: USB disconnect, device number 3 [ 58.077168][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 58.158385][ T6132] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 58.160958][ T6132] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 58.279167][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.448782][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 58.476792][ T60] usb 8-1: config index 0 descriptor too short (expected 13339, got 27) [ 58.488886][ T60] usb 8-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 58.509900][ T60] usb 8-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 58.546088][ T60] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 58.549251][ T60] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 58.551750][ T60] usb 8-1: Product: syz [ 58.552997][ T60] usb 8-1: Manufacturer: syz [ 58.554417][ T60] usb 8-1: SerialNumber: syz [ 58.664813][ T6124] vhci_hcd: connection closed [ 58.665113][ T12] vhci_hcd vhci_hcd.2: stop threads [ 58.669124][ T12] vhci_hcd vhci_hcd.2: release socket [ 58.670792][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 58.735599][ T5857] usb 42-1: enqueue for inactive port 0 [ 59.204027][ T60] usb 8-1: USB disconnect, device number 3 [ 59.560772][ T5857] usb usb42-port1: attempt power cycle [ 60.120414][ T5857] usb usb42-port1: unable to enumerate USB device [ 60.152921][ T6159] netlink: 200 bytes leftover after parsing attributes in process `syz.1.35'. [ 60.274693][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34'. [ 60.279717][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 60.325282][ T6166] binder: 6164:6166 ioctl c00c6211 0 returned -14 [ 60.979535][ T6159] orangefs_mount: mount request failed with -4 [ 61.085281][ T6175] binder: 6174:6175 ioctl c00c6211 0 returned -14 [ 61.792073][ T5752] Bluetooth: hci1: command 0x2016 tx timeout [ 62.106986][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.43'. [ 62.117087][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 62.567985][ T1494] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.719004][ T1494] usb 7-1: Using ep0 maxpacket: 32 [ 62.725641][ T1494] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 62.729051][ T1494] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 62.737585][ T1494] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 62.752921][ T1494] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 62.772916][ T1494] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 62.777060][ T1494] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 62.785522][ T1494] usb 7-1: Product: syz [ 62.791565][ T1494] usb 7-1: Manufacturer: syz [ 62.801730][ T1494] usb 7-1: SerialNumber: syz [ 63.071862][ T6237] binder: 6236:6237 ioctl c00c6211 0 returned -14 [ 63.858705][ T5750] Bluetooth: hci1: command 0x2016 tx timeout [ 64.121668][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 64.125674][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 64.611597][ T1494] usb 7-1: USB disconnect, device number 2 [ 65.989252][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 65.992457][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 65.995710][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 65.998699][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 66.499827][ T6296] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 66.506539][ T6292] IPVS: stopping master sync thread 6296 ... [ 66.512153][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 66.651472][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.58'. [ 66.671749][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 66.682058][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 66.843517][ T6300] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 66.846787][ T6300] netlink: 'syz.0.58': attribute type 2 has an invalid length. [ 67.687287][ T6312] __nla_validate_parse: 4 callbacks suppressed [ 67.687301][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 67.725087][ T6314] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 67.727198][ T6314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 67.734477][ T6314] vhci_hcd vhci_hcd.0: Device attached [ 67.737575][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 68.017824][ T1494] usb 40-1: SetAddress Request (2) to port 0 [ 68.021652][ T1494] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.035335][ T6321] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 68.037415][ T6321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.042609][ T6321] vhci_hcd vhci_hcd.0: Device attached [ 68.389568][ T5745] usb 38-1: SetAddress Request (2) to port 0 [ 68.392094][ T5745] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.697793][ T6315] vhci_hcd: connection reset by peer [ 68.704369][ T12] vhci_hcd vhci_hcd.1: stop threads [ 68.706130][ T12] vhci_hcd vhci_hcd.1: release socket [ 68.708366][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 68.720399][ T6322] vhci_hcd: connection reset by peer [ 68.724618][ T12] vhci_hcd vhci_hcd.0: stop threads [ 68.727141][ T12] vhci_hcd vhci_hcd.0: release socket [ 68.731980][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 69.348363][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.64'. [ 69.354406][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.64'. [ 69.477381][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'. [ 69.670373][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 69.681007][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 69.684204][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 69.687181][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 70.172773][ T6350] binder: 6349:6350 unknown command 1078485781 [ 70.176570][ T6350] binder: 6349:6350 ioctl c0306201 80000300 returned -22 [ 70.308774][ T6355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.70'. [ 70.557841][ T1480] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.720658][ T1480] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 70.728166][ T1480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.751087][ T1480] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 70.757185][ T1480] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 70.762799][ T1480] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 70.900987][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.903839][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294173][ T6371] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 71.296292][ T6371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.300207][ T6371] vhci_hcd vhci_hcd.0: Device attached [ 71.313746][ T6371] Zero length message leads to an empty skb [ 71.577764][ T5852] usb 42-1: SetAddress Request (6) to port 0 [ 71.580090][ T5852] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 71.914861][ T6372] vhci_hcd: connection reset by peer [ 71.930803][ T12] vhci_hcd vhci_hcd.2: stop threads [ 71.934725][ T12] vhci_hcd vhci_hcd.2: release socket [ 71.947347][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 72.842097][ T6416] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 72.844239][ T6416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.877697][ T6416] vhci_hcd vhci_hcd.0: Device attached [ 73.166325][ T1494] usb 40-1: device descriptor read/8, error -110 [ 73.310656][ T41] usb 44-1: SetAddress Request (6) to port 0 [ 73.329168][ T41] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 73.458261][ T5745] usb 38-1: device descriptor read/8, error -110 [ 73.521914][ T6417] vhci_hcd: connection reset by peer [ 73.523913][ T12] vhci_hcd vhci_hcd.3: stop threads [ 73.526241][ T12] vhci_hcd vhci_hcd.3: release socket [ 73.530934][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 73.625686][ T1494] usb usb40-port1: attempt power cycle [ 73.875005][ T5745] usb usb38-port1: attempt power cycle [ 74.312769][ T1494] usb usb40-port1: unable to enumerate USB device [ 74.559147][ T5745] usb usb38-port1: unable to enumerate USB device [ 74.586460][ T6422] binder: 6421:6422 unknown command 1078485781 [ 74.589397][ T6422] binder: 6421:6422 ioctl c0306201 80000300 returned -22 [ 74.737816][ T6431] __nla_validate_parse: 4 callbacks suppressed [ 74.737863][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 74.749627][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'. [ 75.414276][ T6461] binder: 6459:6461 ioctl c00c6211 0 returned -14 [ 76.277788][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.337744][ T148] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.420827][ T6471] netlink: 200 bytes leftover after parsing attributes in process `syz.1.96'. [ 76.471416][ T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 76.475396][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.480740][ T6473] binder: 6472:6473 ioctl c00c6211 0 returned -14 [ 76.486418][ T10] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 76.617702][ T148] usb 8-1: Using ep0 maxpacket: 32 [ 76.621866][ T148] usb 8-1: config index 0 descriptor too short (expected 13339, got 27) [ 76.625553][ T148] usb 8-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 76.630103][ T148] usb 8-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 76.636509][ T148] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.640299][ T148] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.643827][ T148] usb 8-1: Product: syz [ 76.645704][ T148] usb 8-1: Manufacturer: syz [ 76.647835][ T148] usb 8-1: SerialNumber: syz [ 76.661619][ T5852] usb 42-1: device descriptor read/8, error -110 [ 77.058787][ T5852] usb usb42-port1: attempt power cycle [ 77.236988][ T148] usb 8-1: USB disconnect, device number 4 [ 77.251550][ T6471] orangefs_mount: mount request failed with -4 [ 77.639105][ T6486] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 77.641212][ T6486] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.647766][ T6486] vhci_hcd vhci_hcd.0: Device attached [ 77.690698][ T5852] usb usb42-port1: unable to enumerate USB device [ 77.730897][ T6490] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 77.733089][ T6490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.736026][ T6490] vhci_hcd vhci_hcd.0: Device attached [ 77.841862][ T6495] binder: 6494:6495 ioctl c00c6211 0 returned -14 [ 77.978142][ T5745] usb 38-1: SetAddress Request (6) to port 0 [ 77.985239][ T5745] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 78.222925][ T148] usb 40-1: SetAddress Request (6) to port 0 [ 78.225102][ T148] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 78.361559][ T6487] vhci_hcd: connection reset by peer [ 78.364167][ T12] vhci_hcd vhci_hcd.0: stop threads [ 78.369025][ T12] vhci_hcd vhci_hcd.0: release socket [ 78.371006][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 78.417964][ T41] usb 44-1: device descriptor read/8, error -110 [ 78.463740][ T6491] vhci_hcd: connection reset by peer [ 78.466199][ T12] vhci_hcd vhci_hcd.1: stop threads [ 78.467980][ T12] vhci_hcd vhci_hcd.1: release socket [ 78.472959][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 78.808472][ T41] usb usb44-port1: attempt power cycle [ 79.168229][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.241461][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 79.329206][ T6529] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 79.331730][ T6529] netlink: 'syz.0.95': attribute type 2 has an invalid length. [ 79.505630][ T41] usb usb44-port1: unable to enumerate USB device [ 79.638089][ T60] usb 7-1: Using ep0 maxpacket: 32 [ 79.647150][ T60] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 79.651657][ T60] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 79.654441][ T60] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 79.660807][ T60] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 79.666642][ T60] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.670288][ T60] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.676197][ T60] usb 7-1: Product: syz [ 79.678159][ T60] usb 7-1: Manufacturer: syz [ 79.679682][ T60] usb 7-1: SerialNumber: syz [ 80.724810][ T6553] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 80.725903][ T6543] IPVS: stopping master sync thread 6553 ... [ 80.735838][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 80.745282][ T60] usb 7-1: USB disconnect, device number 3 [ 80.783188][ T6555] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 80.784400][ T6554] IPVS: stopping master sync thread 6555 ... [ 80.794728][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 81.144167][ T29] cfg80211: failed to load regulatory.db [ 81.312254][ T6557] netlink: 200 bytes leftover after parsing attributes in process `syz.2.100'. [ 81.474847][ T6560] binder: 6559:6560 ioctl c00c6211 0 returned -14 [ 82.140380][ T6557] orangefs_mount: mount request failed with -4 [ 82.177704][ T6569] binder: 6568:6569 ioctl c00c6211 0 returned -14 [ 82.311186][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 82.314452][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 82.658453][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 83.084211][ T5745] usb 38-1: device descriptor read/8, error -110 [ 83.318020][ T148] usb 40-1: device descriptor read/8, error -110 [ 83.472984][ T6613] binder: 6612:6613 ioctl c00c6211 0 returned -14 [ 83.478485][ T5745] usb usb38-port1: attempt power cycle [ 83.596476][ T6621] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 83.597235][ T6611] IPVS: stopping master sync thread 6621 ... [ 83.603432][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 83.718581][ T148] usb usb40-port1: attempt power cycle [ 84.152276][ T5745] usb usb38-port1: unable to enumerate USB device [ 84.308640][ T148] usb usb40-port1: unable to enumerate USB device [ 84.807909][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.969472][ T60] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 84.977588][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.989520][ T60] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 85.738623][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.115'. [ 85.755682][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 85.869879][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 85.982483][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 86.187340][ T6707] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 86.189747][ T6707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 86.215495][ T6707] vhci_hcd vhci_hcd.0: Device attached [ 86.547817][ T1494] usb 44-1: SetAddress Request (10) to port 0 [ 86.550889][ T1494] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 86.885292][ T6708] vhci_hcd: connection reset by peer [ 86.888248][ T12] vhci_hcd vhci_hcd.3: stop threads [ 86.889977][ T12] vhci_hcd vhci_hcd.3: release socket [ 86.893175][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 87.160994][ T6731] binder: 6730:6731 ioctl c00c6211 0 returned -14 [ 87.307990][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.749166][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 87.754363][ T24] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 87.757240][ T24] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 87.760190][ T24] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 87.763824][ T24] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 87.768598][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.771435][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.773991][ T24] usb 7-1: Product: syz [ 87.775332][ T24] usb 7-1: Manufacturer: syz [ 87.776795][ T24] usb 7-1: SerialNumber: syz [ 87.893608][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 87.898086][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 88.186223][ T24] usb 7-1: USB disconnect, device number 4 [ 88.853839][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'. [ 88.857208][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 89.252883][ T6771] binder: 6770:6771 ioctl c00c6211 0 returned -14 [ 90.018805][ T6786] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 90.020927][ T6786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.025754][ T6786] vhci_hcd vhci_hcd.0: Device attached [ 90.344034][ T6796] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 90.345935][ T6795] IPVS: stopping master sync thread 6796 ... [ 90.354497][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 90.424376][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 90.647311][ T6787] vhci_hcd: connection closed [ 90.647745][ T5896] vhci_hcd vhci_hcd.3: stop threads [ 90.652118][ T5896] vhci_hcd vhci_hcd.3: release socket [ 90.654547][ T5896] vhci_hcd vhci_hcd.3: disconnect device [ 91.619082][ T1494] usb 44-1: device descriptor read/8, error -110 [ 91.704202][ T6825] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 91.708956][ T6824] IPVS: stopping master sync thread 6825 ... [ 91.712118][ T6824] __nla_validate_parse: 1 callbacks suppressed [ 91.712128][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 91.760326][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 91.763838][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 91.790533][ T6827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 91.792847][ T6827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.804281][ T6827] vhci_hcd vhci_hcd.0: Device attached [ 92.009431][ T1494] usb usb44-port1: attempt power cycle [ 92.078097][ T5852] usb 42-1: SetAddress Request (10) to port 0 [ 92.081220][ T5852] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 92.269235][ T6828] vhci_hcd: connection reset by peer [ 92.272343][ T5896] vhci_hcd vhci_hcd.2: stop threads [ 92.274307][ T5896] vhci_hcd vhci_hcd.2: release socket [ 92.278346][ T5896] vhci_hcd vhci_hcd.2: disconnect device [ 92.610189][ T1494] usb usb44-port1: unable to enumerate USB device [ 92.649040][ T6851] netlink: 200 bytes leftover after parsing attributes in process `syz.3.137'. [ 92.751535][ T6853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 92.753601][ T6853] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.758668][ T6853] vhci_hcd vhci_hcd.0: Device attached [ 93.028142][ T1494] usb 40-1: SetAddress Request (10) to port 0 [ 93.033047][ T1494] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 93.317723][ T5824] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.384291][ T6854] vhci_hcd: connection reset by peer [ 93.386789][ T5896] vhci_hcd vhci_hcd.1: stop threads [ 93.388674][ T5896] vhci_hcd vhci_hcd.1: release socket [ 93.390760][ T5896] vhci_hcd vhci_hcd.1: disconnect device [ 93.469010][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.472971][ T5824] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.476867][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.478576][ T6851] orangefs_mount: mount request failed with -4 [ 93.484977][ T5824] usb 7-1: config 0 descriptor?? [ 93.707838][ T6861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.139'. [ 93.712812][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 93.717550][ T5824] usbhid 7-1:0.0: can't add hid device: -71 [ 93.722476][ T5824] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 93.777471][ T5824] usb 7-1: USB disconnect, device number 5 [ 94.394215][ T6866] binder: 6864:6866 ioctl c00c6211 0 returned -14 [ 94.394396][ T5824] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.602594][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.643406][ T5824] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.656241][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.669701][ T5824] usb 7-1: config 0 descriptor?? [ 95.286396][ T5824] usbhid 7-1:0.0: can't add hid device: -71 [ 95.295421][ T5824] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 95.308130][ T5824] usb 7-1: USB disconnect, device number 6 [ 95.637496][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'. [ 95.643401][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 96.321916][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 96.324966][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 96.714757][ T6887] binder: 6886:6887 ioctl c00c6211 0 returned -14 [ 97.148287][ T5852] usb 42-1: device descriptor read/8, error -110 [ 97.704505][ T5852] usb usb42-port1: attempt power cycle [ 98.114375][ T1494] usb 40-1: device descriptor read/8, error -110 [ 98.516526][ T5852] usb usb42-port1: unable to enumerate USB device [ 98.812169][ T1494] usb usb40-port1: attempt power cycle [ 98.905672][ T6901] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 98.909005][ T6901] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.914899][ T6901] vhci_hcd vhci_hcd.0: Device attached [ 99.164818][ T6907] vhci_hcd: connection closed [ 99.192482][ T5896] vhci_hcd vhci_hcd.3: stop threads [ 99.197778][ T5852] usb 44-1: SetAddress Request (14) to port 0 [ 99.198340][ T5896] vhci_hcd vhci_hcd.3: release socket [ 99.225871][ T5852] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 99.237936][ T5896] vhci_hcd vhci_hcd.3: disconnect device [ 99.259610][ T5852] usb 44-1: enqueue for inactive port 0 [ 99.456670][ T1494] usb usb40-port1: unable to enumerate USB device [ 99.698810][ T5852] usb usb44-port1: attempt power cycle [ 100.312078][ T5852] usb usb44-port1: unable to enumerate USB device [ 100.767739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.115014][ T6938] binder: 6937:6938 ioctl c00c6211 0 returned -14 [ 101.663438][ T6946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 101.666619][ T6946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.679211][ T6946] vhci_hcd vhci_hcd.0: Device attached [ 102.204323][ T5852] usb 40-1: SetAddress Request (14) to port 0 [ 102.207411][ T5852] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 102.359046][ T6944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 102.361902][ T6944] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.851273][ T6944] vhci_hcd vhci_hcd.0: Device attached [ 103.230317][ T6947] vhci_hcd: connection reset by peer [ 103.347060][ T5896] vhci_hcd vhci_hcd.1: stop threads [ 103.353667][ T5745] usb 42-1: SetAddress Request (14) to port 0 [ 103.357909][ T5896] vhci_hcd vhci_hcd.1: release socket [ 103.358661][ T5745] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 103.465868][ T5896] vhci_hcd vhci_hcd.1: disconnect device [ 106.166658][ T6951] vhci_hcd: connection reset by peer [ 106.174021][ T5896] vhci_hcd vhci_hcd.2: stop threads [ 106.181795][ T5896] vhci_hcd vhci_hcd.2: release socket [ 106.185403][ T5896] vhci_hcd vhci_hcd.2: disconnect device [ 107.395287][ T5852] usb 40-1: device descriptor read/8, error -110 [ 107.481791][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 107.609457][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 107.651774][ T7037] binder: 7036:7037 ioctl c00c6211 0 returned -14 [ 108.036685][ T5852] usb usb40-port1: attempt power cycle [ 108.651649][ T5745] usb 42-1: device descriptor read/8, error -110 [ 109.112048][ T5852] usb usb40-port1: unable to enumerate USB device [ 109.209301][ T5745] usb usb42-port1: attempt power cycle [ 109.748084][ T6876] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 109.911847][ T5745] usb usb42-port1: unable to enumerate USB device [ 110.221011][ T6876] usb 7-1: Using ep0 maxpacket: 32 [ 110.350005][ T6876] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 110.361536][ T6876] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 110.399947][ T6876] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 110.440571][ T6876] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 110.590637][ T6876] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 110.595029][ T6876] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 110.639893][ T6876] usb 7-1: Product: syz [ 110.644250][ T6876] usb 7-1: Manufacturer: syz [ 110.646260][ T6876] usb 7-1: SerialNumber: syz [ 112.020615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.487381][ T6876] usb 7-1: USB disconnect, device number 7 [ 114.832263][ T7109] binder: 7108:7109 ioctl c00c6211 0 returned -14 [ 114.948297][ T7083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 114.969819][ T7083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 114.973542][ T7083] vhci_hcd vhci_hcd.0: Device attached [ 115.695754][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.172'. [ 115.700172][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 115.962614][ T7113] vhci_hcd: connection closed [ 115.977063][ T12] vhci_hcd vhci_hcd.3: stop threads [ 116.021747][ T12] vhci_hcd vhci_hcd.3: release socket [ 116.026272][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 116.077906][ T5745] usb 44-1: enqueue for inactive port 0 [ 116.601819][ T5745] usb usb44-port1: attempt power cycle [ 117.201146][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 117.206498][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 117.311162][ T5745] usb usb44-port1: unable to enumerate USB device [ 118.238977][ T7140] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 118.242141][ T7140] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.246419][ T7140] vhci_hcd vhci_hcd.0: Device attached [ 118.380974][ T7143] vhci_hcd: connection closed [ 118.381332][ T12] vhci_hcd vhci_hcd.2: stop threads [ 118.387296][ T12] vhci_hcd vhci_hcd.2: release socket [ 118.390036][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 118.808230][ T7149] netlink: 200 bytes leftover after parsing attributes in process `syz.0.180'. [ 119.412208][ T7156] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 119.439952][ T7155] IPVS: stopping master sync thread 7156 ... [ 119.443668][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 119.572104][ T7149] orangefs_mount: mount request failed with -4 [ 119.675466][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 120.231255][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 120.255431][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 120.259804][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 120.269648][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.288434][ T10] Workqueue: usb_hub_wq hub_event [ 120.290345][ T10] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 120.293006][ T10] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 120.309494][ T10] RSP: 0018:ffffc900001c6ec8 EFLAGS: 00010202 [ 120.311606][ T10] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 120.318563][ T10] RDX: ffff88801c712540 RSI: 0000000000000004 RDI: 0000000000000004 [ 120.321081][ T10] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 120.328619][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 120.339174][ T10] R13: ffff88802980ba80 R14: ffffc900001c6fe8 R15: dffffc0000000000 [ 120.341992][ T10] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 120.350805][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.353512][ T10] CR2: 000000000c3725fe CR3: 000000004b40a000 CR4: 0000000000352ef0 [ 120.360641][ T10] Call Trace: [ 120.361918][ T10] [ 120.363073][ T10] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 120.381150][ T10] ? emi26_probe+0x114/0xe30 [ 120.383455][ T10] emi26_probe+0x13c/0xe30 [ 120.385092][ T10] ? _raw_spin_lock_irqsave+0x52/0x60 [ 120.386839][ T10] ? find_held_lock+0x2b/0x80 [ 120.388366][ T10] ? __pfx_emi26_probe+0x10/0x10 [ 120.390003][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.391932][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 120.393694][ T10] ? __pm_runtime_set_status+0x13c/0x970 [ 120.396233][ T10] usb_probe_interface+0x303/0x8f0 [ 120.412727][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 120.415494][ T10] really_probe+0x241/0xa60 [ 120.417714][ T10] __driver_probe_device+0x20e/0x450 [ 120.419926][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.423226][ T10] driver_probe_device+0x4a/0x140 [ 120.425796][ T10] __device_attach_driver+0x1df/0x320 [ 120.428667][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 120.431567][ T10] bus_for_each_drv+0x159/0x1e0 [ 120.434799][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 120.438984][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 120.440658][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.442504][ T10] __device_attach+0x1e4/0x4d0 [ 120.444106][ T10] ? __pfx___device_attach+0x10/0x10 [ 120.446269][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.449108][ T10] device_initial_probe+0xaf/0xd0 [ 120.452775][ T10] bus_probe_device+0x64/0x160 [ 120.456102][ T10] device_add+0x121d/0x1970 [ 120.459370][ T10] ? __pfx_device_add+0x10/0x10 [ 120.462334][ T10] ? mark_held_locks+0x40/0x70 [ 120.464999][ T10] usb_set_configuration+0xd97/0x1c60 [ 120.467589][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 120.471028][ T10] usb_generic_driver_probe+0xa1/0xe0 [ 120.473558][ T10] usb_probe_device+0xef/0x400 [ 120.476019][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 120.478928][ T10] really_probe+0x241/0xa60 [ 120.481508][ T10] __driver_probe_device+0x20e/0x450 [ 120.494645][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.497395][ T10] driver_probe_device+0x4a/0x140 [ 120.504436][ T10] __device_attach_driver+0x1df/0x320 [ 120.514573][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 120.517127][ T10] bus_for_each_drv+0x159/0x1e0 [ 120.519861][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 120.521945][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 120.530164][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.538380][ T10] __device_attach+0x1e4/0x4d0 [ 120.542640][ T10] ? __pfx___device_attach+0x10/0x10 [ 120.545518][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.547985][ T10] device_initial_probe+0xaf/0xd0 [ 120.550336][ T10] bus_probe_device+0x64/0x160 [ 120.552203][ T10] device_add+0x121d/0x1970 [ 120.553970][ T10] ? __pfx_device_add+0x10/0x10 [ 120.555811][ T10] ? usb_detect_static_quirks+0x335/0x3e0 [ 120.557922][ T10] usb_new_device.cold+0x685/0x115c [ 120.560079][ T10] ? _mutex_trylock_nest_lock+0x241/0x310 [ 120.562519][ T10] ? do_raw_spin_lock+0x128/0x260 [ 120.565141][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 120.567518][ T10] ? mark_held_locks+0x40/0x70 [ 120.569957][ T10] hub_event+0x30a3/0x4a60 [ 120.572085][ T10] ? __pfx_hub_event+0x10/0x10 [ 120.599346][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 120.602558][ T10] ? rcu_is_watching+0x12/0xc0 [ 120.605378][ T10] process_one_work+0xa23/0x1940 [ 120.608580][ T10] ? __pfx_process_one_work+0x10/0x10 [ 120.612340][ T10] ? __pfx_hub_event+0x10/0x10 [ 120.615739][ T10] worker_thread+0x5ef/0xe50 [ 120.619649][ T10] ? __pfx_worker_thread+0x10/0x10 [ 120.622655][ T10] ? kthread+0x13a/0x450 [ 120.624818][ T10] ? __pfx_worker_thread+0x10/0x10 [ 120.627367][ T10] kthread+0x370/0x450 [ 120.629337][ T10] ? __pfx_kthread+0x10/0x10 [ 120.635365][ T10] ret_from_fork+0x72b/0xd50 [ 120.645397][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 120.648124][ T10] ? __switch_to+0x800/0x10f0 [ 120.650679][ T10] ? __pfx_kthread+0x10/0x10 [ 120.667725][ T10] ret_from_fork_asm+0x1a/0x30 [ 120.670374][ T10] [ 120.672295][ T10] Modules linked in: [ 120.675235][ T10] ---[ end trace 0000000000000000 ]--- [ 120.721670][ T60] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 120.726254][ T60] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 120.735267][ T60] CPU: 2 UID: 0 PID: 60 Comm: kworker/2:1 Tainted: G D syzkaller #0 PREEMPT(full) [ 120.747860][ T60] Tainted: [D]=DIE [ 120.750117][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.759894][ T60] Workqueue: usb_hub_wq hub_event [ 120.775383][ T60] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 120.779936][ T60] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 120.789737][ T60] RSP: 0018:ffffc900007beec8 EFLAGS: 00010202 [ 120.820198][ T60] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 120.828024][ T60] RDX: ffff88801cbf2540 RSI: 0000000000000004 RDI: 0000000000000004 [ 120.836535][ T60] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 120.846183][ T60] R10: 0000000000000000 R11: ffffffff81d5692c R12: 0000000000000000 [ 120.855153][ T60] R13: ffff88804ff01200 R14: ffffc900007befe8 R15: dffffc0000000000 [ 120.858404][ T60] FS: 0000000000000000(0000) GS:ffff888096de3000(0000) knlGS:0000000000000000 [ 120.877400][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.880776][ T60] CR2: 0000000080007000 CR3: 000000000e994000 CR4: 0000000000352ef0 [ 120.885159][ T60] Call Trace: [ 120.887655][ T60] [ 120.889585][ T60] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 120.903337][ T60] ? emi26_probe+0x114/0xe30 [ 120.915000][ T60] emi26_probe+0x13c/0xe30 [ 120.917335][ T60] ? _raw_spin_lock_irqsave+0x52/0x60 [ 120.919255][ T60] ? find_held_lock+0x2b/0x80 [ 120.933724][ T60] ? __pfx_emi26_probe+0x10/0x10 [ 120.936014][ T60] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.938525][ T60] ? lockdep_hardirqs_on+0x78/0x100 [ 120.942959][ T60] ? __pm_runtime_set_status+0x13c/0x970 [ 120.945802][ T60] usb_probe_interface+0x303/0x8f0 [ 120.947993][ T60] ? __pfx_usb_probe_interface+0x10/0x10 [ 120.950328][ T60] really_probe+0x241/0xa60 [ 120.953137][ T60] __driver_probe_device+0x20e/0x450 [ 120.956674][ T60] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.960308][ T60] driver_probe_device+0x4a/0x140 [ 120.962827][ T60] __device_attach_driver+0x1df/0x320 [ 120.966010][ T60] ? __pfx___device_attach_driver+0x10/0x10 [ 120.968828][ T60] bus_for_each_drv+0x159/0x1e0 [ 120.970977][ T60] ? __pfx_bus_for_each_drv+0x10/0x10 [ 120.973601][ T60] ? lockdep_hardirqs_on+0x78/0x100 [ 120.976275][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.979296][ T60] __device_attach+0x1e4/0x4d0 [ 120.982221][ T60] ? __pfx___device_attach+0x10/0x10 [ 120.985844][ T60] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.989230][ T60] device_initial_probe+0xaf/0xd0 [ 120.992307][ T60] bus_probe_device+0x64/0x160 [ 120.995341][ T60] device_add+0x121d/0x1970 [ 120.998103][ T60] ? __pfx_device_add+0x10/0x10 [ 121.001078][ T60] ? mark_held_locks+0x40/0x70 [ 121.004092][ T60] usb_set_configuration+0xd97/0x1c60 [ 121.007381][ T60] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 121.011375][ T60] usb_generic_driver_probe+0xa1/0xe0 [ 121.015208][ T60] usb_probe_device+0xef/0x400 [ 121.017541][ T60] ? __pfx_usb_probe_device+0x10/0x10 [ 121.021022][ T60] really_probe+0x241/0xa60 [ 121.023400][ T60] __driver_probe_device+0x20e/0x450 [ 121.025822][ T60] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.028561][ T60] driver_probe_device+0x4a/0x140 [ 121.030910][ T60] __device_attach_driver+0x1df/0x320 [ 121.033606][ T60] ? __pfx___device_attach_driver+0x10/0x10 [ 121.038172][ T60] bus_for_each_drv+0x159/0x1e0 [ 121.041738][ T60] ? __pfx_bus_for_each_drv+0x10/0x10 [ 121.044771][ T60] ? lockdep_hardirqs_on+0x78/0x100 [ 121.048225][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.052593][ T60] __device_attach+0x1e4/0x4d0 [ 121.055492][ T60] ? __pfx___device_attach+0x10/0x10 [ 121.058671][ T60] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.061879][ T60] device_initial_probe+0xaf/0xd0 [ 121.064740][ T60] bus_probe_device+0x64/0x160 [ 121.067597][ T60] device_add+0x121d/0x1970 [ 121.070288][ T60] ? __pfx_device_add+0x10/0x10 [ 121.072616][ T60] ? usb_detect_static_quirks+0x335/0x3e0 [ 121.076512][ T60] usb_new_device.cold+0x685/0x115c [ 121.079869][ T60] ? _mutex_trylock_nest_lock+0x241/0x310 [ 121.083350][ T60] ? do_raw_spin_lock+0x128/0x260 [ 121.086491][ T60] ? __pfx_usb_new_device+0x10/0x10 [ 121.089544][ T60] ? mark_held_locks+0x40/0x70 [ 121.092325][ T60] hub_event+0x30a3/0x4a60 [ 121.095013][ T60] ? __pfx_hub_event+0x10/0x10 [ 121.098091][ T60] ? debug_object_deactivate+0x2e4/0x3b0 [ 121.101495][ T60] ? rcu_is_watching+0x12/0xc0 [ 121.104471][ T60] process_one_work+0xa23/0x1940 [ 121.107506][ T60] ? __pfx_process_one_work+0x10/0x10 [ 121.110734][ T60] ? __pfx_hub_event+0x10/0x10 [ 121.114658][ T60] worker_thread+0x5ef/0xe50 [ 121.118260][ T60] ? __pfx_worker_thread+0x10/0x10 [ 121.121418][ T60] ? kthread+0x13a/0x450 [ 121.123801][ T60] ? __pfx_worker_thread+0x10/0x10 [ 121.127294][ T60] kthread+0x370/0x450 [ 121.130339][ T60] ? __pfx_kthread+0x10/0x10 [ 121.133842][ T60] ret_from_fork+0x72b/0xd50 [ 121.136684][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 121.139329][ T60] ? __switch_to+0x800/0x10f0 [ 121.141754][ T60] ? __pfx_kthread+0x10/0x10 [ 121.144292][ T60] ret_from_fork_asm+0x1a/0x30 [ 121.146978][ T60] [ 121.148864][ T60] Modules linked in: [ 121.152269][ T60] ---[ end trace 0000000000000000 ]--- [ 121.158499][ T1480] usb 6-1: emi26_load_firmware - request_firmware() failed [ 121.162118][ T1480] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 121.168069][ T1480] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 121.176701][ T1480] usb 6-1: USB disconnect, device number 3 [ 121.180602][ T60] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 121.191436][ T60] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 121.192808][ T10] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 121.214801][ T60] RSP: 0018:ffffc900001c6ec8 EFLAGS: 00010202 [ 121.219650][ T10] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 121.219840][ T60] [ 121.222914][ T10] RSP: 0018:ffffc900001c6ec8 EFLAGS: 00010202 [ 121.247583][ T60] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 121.251274][ T10] [ 121.251289][ T10] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 121.268821][ T60] RDX: ffff88801c712540 RSI: 0000000000000004 RDI: 0000000000000004 [ 121.269849][ T10] RDX: ffff88801c712540 RSI: 0000000000000004 RDI: 0000000000000004 [ 121.275269][ T60] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 121.292156][ T10] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 121.306964][ T60] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 121.306981][ T60] R13: ffff88802980ba80 R14: ffffc900001c6fe8 R15: dffffc0000000000 [ 121.306999][ T60] FS: 0000000000000000(0000) GS:ffff888096de3000(0000) knlGS:0000000000000000 [ 121.307033][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.307046][ T60] CR2: 0000000080007000 CR3: 000000002a82b000 CR4: 0000000000352ef0 [ 121.307060][ T60] Kernel panic - not syncing: Fatal exception [ 121.319477][ T60] Kernel Offset: disabled