last executing test programs: 26m45.016592773s ago: executing program 32 (id=11): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005600)={&(0x7f00000055c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x24d8}], 0x1}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x884) 25m30.531206019s ago: executing program 33 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 25m11.237457977s ago: executing program 34 (id=133): timer_create(0x6, &(0x7f0000000180)={0x0, 0x22, 0x4, @thr={&(0x7f0000000000)="b73c16e9cdeff9d6f524e4", 0x0}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x4}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) timer_gettime(0x0, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="ad85c126fb71c4a39b27a1899d43f08202c3a9124858e945bd9def445b146340a00aac17e7d1ff363df94300a09c10cf22462c62c215351a531d2f07e66a53b683a3fc1d06d55dd99d1f281978605c230f21d354ebd92d04160b57204ffd67fefa0e0c9129794ab9ab9dab94e900a8e7116918", @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0) 24m41.846953131s ago: executing program 35 (id=174): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x3a8, 0x0, 0xffffffff, 0x3a8, 0x108, 0x498, 0x498, 0xffffffff, 0x498, 0x498, 0x5, &(0x7f0000000140), {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff000000, 'ip_vti0\x00', 'vxcan1\x00', {}, {}, 0x33, 0x0, 0x8}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x3, [0x0, 0xe, 0x0, 0x2, 0x0, 0x1], 0x1, 0x2}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x3}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'ip6gre0\x00', {}, {0xff}, 0xff, 0x3, 0xc}, 0x0, 0x198, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x20, 0x1, 'syz1\x00', 0x8}}, @common=@ah={{0x30}, {[0x6], 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xb, @local, @remote, @gre_key=0x3, @gre_key=0x7ff}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x0, 0xbf}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @empty, @broadcast, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff000000, 0x0, 'bond_slave_0\x00', 'sit0\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x1}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'netbios-ns\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @loopback, @port=0x4e20, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) utimes(0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000100000", @ANYRES32, @ANYBLOB="0000000000968466fddc4e1d224e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x24020400) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x40, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000a10000000100000000000000", @ANYRESDEC=r5, @ANYRES64=0xea60, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="0000000001000000020000a0350100003093ebffb664b59cf78fe57ac57e3cc009a12d6be465672618ef1bdd6a5f603eba4d015f62d3d6822142c7b9105b3fdd9ad64e410000000000"], 0x80}}, 0x8000) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 23m14.692275076s ago: executing program 36 (id=340): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) utimes(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x24020400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x40, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x80}}, 0x8000) 22m24.079500899s ago: executing program 37 (id=436): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={[], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20m35.778857517s ago: executing program 38 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) splice(r2, 0x0, r2, 0x0, 0x7, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) getitimer(0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00003ef000/0x3000)=nil) 20m24.862838101s ago: executing program 39 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x400, &(0x7f0000000400)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000003c0)={0x0, 0xfffd}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000000340)=""/172, 0xfffffffffffffe69) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000b00)={[0x1000, 0x9800, 0xf000, 0x10000], 0x5, 0x20, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) request_key(&(0x7f0000000540)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='\x00', r7) socket$nl_generic(0x11, 0x3, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r8, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/142, 0x8e}], 0x1, 0x7a, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) 18m5.74933298s ago: executing program 40 (id=925): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff02000000aabb86dd601200a8000000000000e57cda03adad8f1e2902207435ad4a154590945b00000000247fa38f003abda54000e200d142"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fadvise64(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES16=r3], &(0x7f0000000400)='syzkaller\x00', 0x6b, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="020a00000700000009000000000000000500"], 0x38}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0x25, 0xf, 0x14, 0x14, 0xb, 0x3, 0x4, 0x73, 0xffffffffffffffff}}) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000085000000220000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x52, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x1a, &(0x7f00000003c0)="17000000", 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) 16m34.038061873s ago: executing program 41 (id=1132): socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b0030001400991a54fc28"], 0x38}], 0x1}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x121a02, 0x114) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, 0x0) sendfile(r6, r4, 0x0, 0x8) 15m18.252419817s ago: executing program 42 (id=1259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)=ANY=[], 0x110) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002f40)=@getpolicy={0x858, 0x15, 0x0, 0x70bd26, 0x25dfdbfb, {{@in=@empty, @in=@multicast1, 0x4e23, 0xfff, 0x4e23, 0xf6f4, 0xa, 0xa0, 0x0, 0x6}, 0x0, 0x1}, [@algo_auth={0x796, 0x1, {{'ghash-generic\x00'}, 0x3a70, "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"}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xab}}, @sec_ctx={0x61, 0x8, {0x5d, 0x8, 0x0, 0xe8, 0x55, "4ab495814b9164d03cc31c86a125508fc947f64c4ef466d5debfac87104cc6d3d3490f4c730958dd5e45cabea9838a66be5100db35323d8d7c6c5476d403e32cdb11029bca7d4f345a81d918eff20cfd58b3069ff6"}}]}, 0x858}, 0x1, 0x0, 0x0, 0x4004000}, 0x4050) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000006162636465666768696a6b6c6d6e6f707172737475867778797a30313233343536"], 0x29, 0xfffffffffffffff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40111}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x100}]]}}}]}, 0x48}}, 0x0) 14m49.080946022s ago: executing program 43 (id=1313): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12m0.322832256s ago: executing program 4 (id=1834): syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) 11m59.417380874s ago: executing program 4 (id=1836): socket$key(0xf, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) umount2(&(0x7f0000001040)='./file0\x00', 0x4) 11m45.50810852s ago: executing program 44 (id=1825): socket$key(0xf, 0x3, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) umount2(&(0x7f0000001040)='./file0\x00', 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x50, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x6, 0x810, r2, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r2, 0xded94000) 11m42.016182752s ago: executing program 45 (id=1837): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffc97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20004010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x368, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 0x4e23, 0x6c, 0x1, 0x4e22, 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 11m41.656829512s ago: executing program 46 (id=1836): socket$key(0xf, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) umount2(&(0x7f0000001040)='./file0\x00', 0x4) 11m6.144295848s ago: executing program 47 (id=1885): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57b, &(0x7f0000000680)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_submit(0x0, 0x0, &(0x7f0000000540)) close_range(r3, 0xffffffffffffffff, 0x0) 8m55.791604303s ago: executing program 48 (id=2077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x0) unshare(0x68040280) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, 0x0, 0x0, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") execve(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d28616573292900"/234], 0x150}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000002f000000000000000071120500000000009500000000000000d737187f44a9e9e213ed0975ef45b07194966a2b2eff3b044786399f2e6f6077ced201823460cf0b2892fd48e91253dc008970a3239f83970b990a9fee16e926ed8cdc0d3d55128762f5bd2802f1d879a4744fece0106b1088079947fe3e3efa479068b3c6fb3e194c067c29f37779ba0d5f50268d8dfb3e0124928086adecb0f280cd2134135e58a437246cd064f6e6b488c5d94d3f79131f3f8875f8a6c7fa75620bd0c58894f32fee552e936e2352f197096be965c964e2658e06dc4e3ff993d8d14d6bc1f83f3594e55b"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m40.850656588s ago: executing program 49 (id=2199): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffc97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20004010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x368, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 0x4e23, 0x6c, 0x1, 0x4e22, 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 7m36.276929405s ago: executing program 50 (id=2204): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffc97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20004010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x368, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 0x4e23, 0x6c, 0x1, 0x4e22, 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 6m40.174091552s ago: executing program 1 (id=2293): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x0) 6m36.702398202s ago: executing program 1 (id=2298): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 6m35.111898896s ago: executing program 1 (id=2302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 6m34.118231113s ago: executing program 1 (id=2303): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m33.450222875s ago: executing program 5 (id=2305): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', '', [], 0xa, "4c9c74196ccd8402f86f7419d8df3ca312d13b9cf7468b2ae05f2587c61d87ae6ce6ae8e4447a7c3c5360fcae7b044f283cecf0136297c2ce50f4c7d962a9d6e302cbf723c4b5b772a61c2"}, 0x4f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 6m32.391461088s ago: executing program 1 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e000000000001090224000100000000090400000203000200092100000001220200090581"], 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r5, 0x0, 0x0) 6m30.557809365s ago: executing program 5 (id=2310): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 6m28.394454299s ago: executing program 5 (id=2313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 6m27.777839517s ago: executing program 1 (id=2315): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x200, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@discard}, {@jqfmt_vfsold}]}, 0x1, 0x556, &(0x7f00000002c0)="$eJzs3c9vHFcdAPDvjL32Nk3rBHqACkiAQkBRduNNG1W9tFxAqKqEqDggDqmxN5bJbjZk16U2lnD/BpBA4gR/AgckDkg9ceDGEYkDQpQDUgELFCNxWDSza2dr7zZL9xfxfj7SZObNm5nve+vsvLdv7XkBzK3LEbEfEUsR8UZErHT3J90lXuks2XEPDvbWDw/21pNot1//e5LnZ/ui55zMk91rFiPi61+J+HZyOm5zZ/fOWq1Wvd9Nl1v1e+Xmzu61rfraZnWzerdSubl68/qLN16ojK2ul+q/eO/LW69+49e/+uS7v9v/4vezYp3v5vXWY5w6VS8cx8ksRsSrkwg2Awvd9dKMy8GHk0bERyLiM/n7fyUW8v+dAMBZ1m6vRHulNw0AnHVpPgaWpKWISNNuJ6DUGcN7Js6ltUazdfV2Y/vuRmes7EIU0ttbter1i8t/+G5+cCHJ0qt5Xp6fpysn0jci4mJE/Gj5iTxdWm/UNmbT5QGAufdkb/sfEf9aTtNSaahT+3yrBwA8NoqzLgAAMHXafwCYP9p/AJg/Q7T/3S/79ydeFgBgOnz+B4D5o/0HgPmj/QeAufK1117LlvZh9/nXG2/ubN9pvHlto9q8U6pvr5fWG/fvlTYbjc38mT31R12v1mjcW30+tt8qt6rNVrm5s3ur3ti+27qVP9f7VrUwlVoBAB/k4qV3fp9ExP5LT+RL9MzloK2Gsy0d41HA42VhlJN1EOCxZrYvmF9DNeF5J+G3Ey8LMBt9H+Zd7Lv5fj/5H4L4PSP4v3Ll48OP/5vjGc4WI/swvz7c+P/LYy8HMH3G/2F+tdvJyTn/l46zAIAzaYRf4Wv/YFydEGCmHjWZ91i+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAz5nxEfCeStJTPBZ5m/6alUsRTEXEhCsntrVr1ekQ8HZciorCcpVdnXWgAYETpX5Pu/F9XVp47fzJ3Kfn3cr6OiO/99PUfv7XWat1fzfb/43j/8tH0YZWH540wryAAMLw/D3NQ3n5XuuueD/IPDvbWj5YJlvGU9750PPno+uHBXr50chaj3W63I4p5X+LcP5NY7J5TjIhnI2JhDPH33z7qqZysf5KPjVzoznzaGz+6sZ8aS/yI+Fjn9S98YPz0ffHTPK+zzl6+j46hLDBv3snuP6/0u/+lcTlf93//F/M71Ojy+18x4ujed9gTf7EbaaFP/Ow9f3nYGM//5qundrZXOnlvRzy72C9+chw/GRD/uSHj//ETn/rhywPy2j+LuBL94/fGKrfq98rNnd1rW/W1zepm9W6lcnP15vUXb7xQKedj1OWjkerT/vbS1acHlS2r/7kB8Yt96790fO7nhqz/z//zxrc+/TC5fDL+Fz7b/+f/TN/4HVmr9fkh46+d++XA6buz+BsD6v+on//VIeO/+5fdjSEPBQCmoLmze2etVqveH2kj+xQ6juuc2siKONzBR93F0YL+KfKNMb0sAzayztgwBxcm9apOfGPxuK843it/M7vilKuTjr0WI208mFas2d2TgOl4+KafdUkAAAAAAAAAAAAAAIBBJvVXREfP5vGXBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEzSfwMAAP//zwm9bw==") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x0, "00efffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) quotactl_fd$Q_SYNC(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200000, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="12010003000000206d0462c24000010203011902240001010900f2090400040203010310092109040000000000000081030004008f09bb2021b748081e0a44c0ba7ae2e0f2c297a5fce19000009a8cf1f466b5cb9757bb38223db4ae0809e414bfcc8f2b332af73f6c85ca5469bcda98f911e594cb2ab05391994edb09fe093321c2ad495914d0ee60ca51d8f7be4459d8f7cb9fd64c4eee29939e5443ef936bb0ae122eb060a44a689fc98fcb9fbaebf0e3ed"], &(0x7f00000008c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x8, 0xb, 0x40, 0x4}, 0x14, &(0x7f0000000240)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x9, 0xf, 0x6}]}, 0x1, [{0x69, &(0x7f0000000840)=@string={0x69, 0x3, "f40bab8819ede9d980faff49f94fbbe9129df5d8508f41b8d7e484d636442fe450e79e4c49970a1dc797e461ae299c1295a38a6b5fc4d46af02ea7a7e632ff074a3eed8d97b750ee50533d91798efe7f477ff8b045e49cf626a233122ee1aa1a7062280d2b59b6"}}]}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r4, &(0x7f00000018c0)=[{0x0}], 0x1) 6m27.436489606s ago: executing program 5 (id=2316): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m25.61076361s ago: executing program 5 (id=2320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m23.30073179s ago: executing program 5 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001fe, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0x8, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/174) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019700)=ANY=[], 0x50) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./file0\x00', 0x208000, &(0x7f0000000000)=ANY=[@ANYBLOB="626172726965722c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030303137372c00ec7b0f0bb60895886b753ac1f1ed6212567630aefd8652d456d3bac3b127c46608a2b6778e8e09646bf79f5c384ddfc99c94fbb510df12bec18f048c10788c400583e3ad295f853d947e9714ac48a57150c0b4ff83161be79e31255a7e8d742c88c35ea3d6a8632d0edeedfe1f22cf6fc398b2ca704e812e23912f5a5780815a43b6b4d79e17e0cae6b266b08a69"], 0xfd, 0x691, &(0x7f00000002c0)="$eJzs3U1sHGf9B/DvrDdrO/+/UrdN2oKQGjUigkYkdpaSIEAEhFAOFYrEpRcOVuI0VjZp5bjIrRB1eb1y7KGHIhQOPaEekIo4VJQzEhInLrlH4u4Ti2Z2dr3Oxo43b7uBz0eanWfmeZnf/PzM7JusDfA/6/xrObCZIudPvLpRbt+62e7cutm+1i8nmU3SSJq9VYrrSfFZci69JZ8rd9bDFbsd55Xbn3xw/P2P2r2tZr1U7Rt79Rtx15ab9ZKjSWbq9QPYMd7FBx6vGMRdJuxYP3Ewad0Rm+N03/91C0ytove8OWIhOZhkrn4dkPru0Hi80T18Y93lAAAA4An11Fa2spFDk44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAniT17/8X9dLol4+m6P/+f6va16qatyYd74P6dNIBAAAAAAAAAMBD8OJWtrKRQ/3tblF95/9StXG4evy/vJUbWclaTmYjy1nPetaylGShqn+vemxtLK+vry3t1rPb7b7bnal6nh70zFDP0yOhFXtH3p194JMHAAAAAAAAgCfMHl+W/yznt7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaVAkM71VtRzulxfSaCaZS9Iq220mf+6Xn2SfTjoAAAAAeAye2spWNnKo+Hdvu1tU7/mfq973z+WtXM96VrOeTlZyqfosoPeuv/H3zXbn1s32tXIZHfc7/xorjGrE9D57uPuRF6sWR+r2m0m+nx/mRI7mQtaymh9nOetZydF8ryotp8hCNdY/v5XUcY7EO1s+nNsRyoV7xfpCFcl8Lme1iu1kLg4+Bmn02wwd7Y+tZEeGGnmvzE7x7do+c3SpXpd/g9/U6+mwUJ3UgUFGFuvcl9l4+tZuua/05sns+Edq1nsag8+gDu91pPvM+cF6Xeb6V8M5f3G/ET8qwzkvozqdxmD2Pbd3zpMv/+MvF650rl+9cvnGiemZRrvqdrvv7l575+xrDzIxl+f3n4nNXTLx8c7Nmbu1mRvzhB6RVp2NXozbd8vk/PDdsttNRu6WL1V9D2U1P8gbuZSVnMlilnI2i/l6Tqe9Y4Yd2Tuv1bXWGO9aO/alujCf5Nf1ejqUeX16KK/Dd7qFqm54z3aWntlHlsa8IzU/XxfKY/x86Bln8u7MxNJQJp7dOxO/LWdkbnSuX127svzmPo93vF6Xl+0vdz4f/u5hnM/9K+fLM+Ufq9raOTvKumfvWrdU1R0e1DVG6o4M6u51pbbq13CjI/Xqnr9rXbuqe2GobsernLyRzuBVCADToju66+DLB1vzt+f/Nv/h/C/mr8y/Ovfd2bOzX2jlwF+bf5r5Q+P3jW8WL+fD/DSHJhEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8t7nx9jtXlzudlbUpLKQxXq/yfCYd89QWZpOM26toPtwwPk5y3937vxXY3/PFzkr+f49ezaEZvt1rKv4WD174xo/qZNyjcXO8y3y+HnB6flwMeHROrV9789SNt9/5yuq15ddXXl+5fvrsmbNn2l9b+uqpy6udlcXe46SjBB6F7Wf/SUcCAAAAAAAAAAAA7Nfj+I+FSZ8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GQ7/1oObKbI0uLJxXL71s12p1z65e2WzSSNJMVPkuKz5Fx6SxaGhit2O84rtz/54Pj7H7W3x2r22zf26rc/m/WSo0lm6vWdDUbN7mu8i8PjNe4nvGJwhmXCjvUTB5P2nwAAAP//euIAEg==") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000019640)='cpuacct.usage_all\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x10082, 0x0) 6m11.004323246s ago: executing program 51 (id=2315): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x200, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@discard}, {@jqfmt_vfsold}]}, 0x1, 0x556, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x0, "00efffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) quotactl_fd$Q_SYNC(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200000, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="12010003000000206d0462c24000010203011902240001010900f2090400040203010310092109040000000000000081030004008f09bb2021b748081e0a44c0ba7ae2e0f2c297a5fce19000009a8cf1f466b5cb9757bb38223db4ae0809e414bfcc8f2b332af73f6c85ca5469bcda98f911e594cb2ab05391994edb09fe093321c2ad495914d0ee60ca51d8f7be4459d8f7cb9fd64c4eee29939e5443ef936bb0ae122eb060a44a689fc98fcb9fbaebf0e3ed"], &(0x7f00000008c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x8, 0xb, 0x40, 0x4}, 0x14, &(0x7f0000000240)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x9, 0xf, 0x6}]}, 0x1, [{0x69, &(0x7f0000000840)=@string={0x69, 0x3, "f40bab8819ede9d980faff49f94fbbe9129df5d8508f41b8d7e484d636442fe450e79e4c49970a1dc797e461ae299c1295a38a6b5fc4d46af02ea7a7e632ff074a3eed8d97b750ee50533d91798efe7f477ff8b045e49cf626a233122ee1aa1a7062280d2b59b6"}}]}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r4, &(0x7f00000018c0)=[{0x0}], 0x1) 6m6.092741117s ago: executing program 52 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001fe, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0x8, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/174) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019700)=ANY=[], 0x50) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./file0\x00', 0x208000, &(0x7f0000000000)=ANY=[@ANYBLOB="626172726965722c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030303137372c00ec7b0f0bb60895886b753ac1f1ed6212567630aefd8652d456d3bac3b127c46608a2b6778e8e09646bf79f5c384ddfc99c94fbb510df12bec18f048c10788c400583e3ad295f853d947e9714ac48a57150c0b4ff83161be79e31255a7e8d742c88c35ea3d6a8632d0edeedfe1f22cf6fc398b2ca704e812e23912f5a5780815a43b6b4d79e17e0cae6b266b08a69"], 0xfd, 0x691, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000019640)='cpuacct.usage_all\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x10082, 0x0) 5m58.016368225s ago: executing program 3 (id=2348): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 5m57.093523153s ago: executing program 3 (id=2350): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r3, 0x4023}], 0x1, 0x3fb) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000580), 0x1, 0x4fa, &(0x7f00000005c0)="$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") listxattr(&(0x7f00000008c0)='./file1\x00', 0x0, 0x0) 5m50.548936309s ago: executing program 3 (id=2354): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x797, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x8d) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) chdir(0x0) close_range(r0, r2, 0x0) syz_usb_connect$uac1(0x2, 0x99, 0x0, 0x0) 5m46.471474318s ago: executing program 3 (id=2358): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 5m41.850494917s ago: executing program 3 (id=2361): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5m33.633679019s ago: executing program 3 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1e, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x4c, 0x1a, 0x1a0, 0x73, 0x2d0, 0x258, 0x258, 0x2d0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0x11}, 0xc) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000080)={0x17c04, r5, 0x5, 0x1000fffff, 0x0, 0xfffffffffffffffc}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) 5m20.669997009s ago: executing program 4 (id=2331): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 5m19.406448268s ago: executing program 4 (id=2380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 5m18.099545291s ago: executing program 4 (id=2383): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x14) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m16.564560635s ago: executing program 53 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1e, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x4c, 0x1a, 0x1a0, 0x73, 0x2d0, 0x258, 0x258, 0x2d0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0x11}, 0xc) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000080)={0x17c04, r5, 0x5, 0x1000fffff, 0x0, 0xfffffffffffffffc}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) 5m15.085083969s ago: executing program 4 (id=2387): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/15) 5m8.027263214s ago: executing program 6 (id=2398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e000000000001090224000100000000090400000203000200092100000001220200090581"], 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r5, 0x0, 0x0) 5m2.962879801s ago: executing program 0 (id=2403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 5m2.653156903s ago: executing program 6 (id=2404): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000300000008"], 0x84}}, 0x0) 5m1.173505782s ago: executing program 0 (id=2405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 5m0.778234856s ago: executing program 6 (id=2406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000300000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109040, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x66) 4m59.658614109s ago: executing program 7 (id=2407): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m59.624867585s ago: executing program 0 (id=2408): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) msync(&(0x7f00005fd000/0x2000)=nil, 0x2000, 0x2) 4m58.238334s ago: executing program 54 (id=2387): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/15) 4m58.074046388s ago: executing program 0 (id=2410): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xb4}}, 0x0) 4m57.544424418s ago: executing program 7 (id=2411): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m57.438432417s ago: executing program 6 (id=2412): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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") timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 4m56.752065621s ago: executing program 0 (id=2413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e000000000001090224000100000000090400000203000200092100000001220200090581"], 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r5, 0x0, 0x0) 4m55.846119725s ago: executing program 6 (id=2414): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x2, r1, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x3, 0x0, r3, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x2, r2}]) 4m55.181374786s ago: executing program 7 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600030000000800"], 0x84}}, 0x0) 4m54.465862138s ago: executing program 6 (id=2416): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_PTRACER(0x59616d61, r1) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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") r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522, r6}, &(0x7f0000000080)={0x7547, 0x2, 0x2, 0x7, 0xd3, 0x9}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040100"], 0xe) 4m52.017011829s ago: executing program 7 (id=2417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 4m50.831530589s ago: executing program 0 (id=2418): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x368, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 0x4e23, 0x6c, 0x1, 0x4e22, 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 4m50.187360727s ago: executing program 7 (id=2419): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m48.764179101s ago: executing program 7 (id=2420): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffc97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20004010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x320, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 4m37.260486125s ago: executing program 55 (id=2416): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_PTRACER(0x59616d61, r1) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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") r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522, r6}, &(0x7f0000000080)={0x7547, 0x2, 0x2, 0x7, 0xd3, 0x9}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040100"], 0xe) 4m33.361453909s ago: executing program 56 (id=2418): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x368, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 0x4e23, 0x6c, 0x1, 0x4e22, 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 4m31.725396359s ago: executing program 57 (id=2420): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffc97) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20004010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x320, 0x0, 0xb, 0x148, 0x108, 0x148, 0x2d0, 0x230, 0x242, 0x2d0, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xec010000, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30}, {[0x4]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:qemu_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 4m23.586573642s ago: executing program 2 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600030000000800"], 0x84}}, 0x0) 4m21.040244533s ago: executing program 2 (id=2426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e000000000001090224000100000000090400000203000200092100000001220200090581"], 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r5, 0x0, 0x0) 4m15.508446315s ago: executing program 2 (id=2427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e80000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 4m14.294230405s ago: executing program 2 (id=2428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m12.767078743s ago: executing program 2 (id=2429): r0 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x4, 0x400, 0x2, 0x1000003}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 4m11.430457818s ago: executing program 2 (id=2430): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_emit_vhci(0x0, 0x7) epoll_create1(0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0xcbc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@oldalloc}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 3m55.282445018s ago: executing program 9 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600030000000800"], 0x84}}, 0x0) 3m54.386759297s ago: executing program 58 (id=2430): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_emit_vhci(0x0, 0x7) epoll_create1(0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0xcbc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@oldalloc}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 3m53.736203684s ago: executing program 9 (id=2434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e80000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xdc}], 0x1, 0x0, 0x0) 3m51.883571145s ago: executing program 9 (id=2435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m49.849607796s ago: executing program 9 (id=2436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) gettid() timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r3, &(0x7f0000000080)=""/102, 0x18) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 3m47.310417458s ago: executing program 9 (id=2437): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nouid32}, {@sysvgroups}, {@noblock_validity}, {@user_xattr}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0xa0f}}]}, 0x1, 0x50f, &(0x7f0000001000)="$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") lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x12, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) sched_setscheduler(0x0, 0x1, 0x0) fchdir(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x9) 3m43.023432384s ago: executing program 9 (id=2438): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c00, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa29, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001900010000000000000000000a000000000000010000000008001e000004"], 0x38}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) 3m25.682570311s ago: executing program 59 (id=2438): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c00, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa29, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001900010000000000000000000a000000000000010000000008001e000004"], 0x38}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) 7.89997469s ago: executing program 8 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.970642879s ago: executing program 8 (id=2557): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(&(0x7f0000000080), 0x101, 0x200) r0 = socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) unshare(0x2a020400) inotify_init1(0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) 5.706678772s ago: executing program 8 (id=2558): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x127081) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpgid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 3.613688436s ago: executing program 8 (id=2559): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.400918891s ago: executing program 8 (id=2560): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 0s ago: executing program 8 (id=2561): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58 [ 1690.024064][T14821] usb 9-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 1690.032677][T14821] usb 9-1: Product: syz [ 1690.036996][T14821] usb 9-1: Manufacturer: syz [ 1690.041836][T14821] usb 9-1: SerialNumber: syz [ 1690.142461][T15901] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1690.152194][T15901] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1690.161005][T15901] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1690.206238][T15901] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1690.224498][T15901] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1690.233532][T15901] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1690.325442][T14821] usb 9-1: config 0 descriptor?? [ 1690.492510][T14821] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1691.308834][T14821] gspca_zc3xx: reg_w_i err -71 [ 1692.014390][T14821] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1692.021041][T14821] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1692.248840][T14821] usb 9-1: USB disconnect, device number 48 [ 1692.480868][T15901] Bluetooth: hci15: command tx timeout [ 1692.766812][T10919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.925048][T15952] chnl_net:caif_netlink_parms(): no params data found [ 1693.094532][T10919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.355796][T10919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.516853][T14821] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1693.684979][T10919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.762182][T14821] usb 9-1: Using ep0 maxpacket: 32 [ 1693.803087][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.814427][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.824530][T14821] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1693.849772][T14821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.239504][T14821] usb 9-1: config 0 descriptor?? [ 1694.336724][T14821] hub 9-1:0.0: USB hub found [ 1694.579185][T14821] hub 9-1:0.0: 1 port detected [ 1694.621898][T10919] bridge_slave_1: left allmulticast mode [ 1694.633164][T10919] bridge_slave_1: left promiscuous mode [ 1694.639609][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.744756][T11816] Bluetooth: hci15: command tx timeout [ 1694.886155][T10919] bridge_slave_0: left allmulticast mode [ 1694.892115][T10919] bridge_slave_0: left promiscuous mode [ 1694.898848][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.267459][ T8] hub 9-1:0.0: activate --> -90 [ 1696.532632][T14821] usb 9-1: USB disconnect, device number 49 [ 1696.554906][ T8] usb 9-1.1: new full-speed USB device number 50 using dummy_hcd [ 1696.563109][ T8] usb 9-1.1: parent hub has no TT [ 1696.569159][ T8] usb 9-1-port1: attempt power cycle [ 1696.599536][T15901] Bluetooth: hci13: command 0x0406 tx timeout [ 1696.703863][T10919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1696.757982][T10919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.780738][T10919] bond0 (unregistering): Released all slaves [ 1697.003847][T11816] Bluetooth: hci15: command tx timeout [ 1697.352338][T10919] hsr_slave_0: left promiscuous mode [ 1697.436899][T10919] hsr_slave_1: left promiscuous mode [ 1697.478270][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1697.486794][T10919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1697.583254][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1697.591229][T10919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.746280][T10919] veth1_macvtap: left promiscuous mode [ 1697.751974][T10919] veth0_macvtap: left promiscuous mode [ 1697.758081][T10919] veth1_vlan: left promiscuous mode [ 1697.763502][T10919] veth0_vlan: left promiscuous mode [ 1698.446669][T14821] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1698.762685][T14821] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1698.774023][T14821] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1698.787583][T14821] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1698.906912][T14821] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1698.917936][T14821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.926425][T14821] usb 9-1: Product: syz [ 1698.947413][T14821] usb 9-1: Manufacturer: syz [ 1698.957015][T14821] usb 9-1: SerialNumber: syz [ 1699.316494][T11816] Bluetooth: hci15: command tx timeout [ 1699.574232][T10919] team0 (unregistering): Port device team_slave_1 removed [ 1699.628466][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.638353][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.808720][T10919] team0 (unregistering): Port device team_slave_0 removed [ 1700.550673][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.560628][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.014719][T15952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.022700][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.031326][T15952] bridge_slave_0: entered allmulticast mode [ 1701.070677][T15952] bridge_slave_0: entered promiscuous mode [ 1701.410844][T15952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.418765][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.427183][T15952] bridge_slave_1: entered allmulticast mode [ 1701.437468][T15952] bridge_slave_1: entered promiscuous mode [ 1702.115028][T14821] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1702.215223][T15952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.307447][T14821] usb 9-1: USB disconnect, device number 54 [ 1702.318631][T14821] usblp0: removed [ 1702.424070][T15952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.992145][T15952] team0: Port device team_slave_0 added [ 1703.030267][T15952] team0: Port device team_slave_1 added [ 1703.142696][T14821] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1703.324711][T15952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.332009][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.358581][T15952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.506202][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1703.517656][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.527888][T14821] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1703.537279][T14821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.589370][T15952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.623553][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.650009][T15952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.740664][T14821] usb 9-1: config 0 descriptor?? [ 1703.752678][T14821] hub 9-1:0.0: USB hub found [ 1704.008709][T14821] hub 9-1:0.0: 1 port detected [ 1704.412007][T15952] hsr_slave_0: entered promiscuous mode [ 1704.523675][T15952] hsr_slave_1: entered promiscuous mode [ 1704.578376][T15952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1704.586553][T15952] Cannot create hsr debugfs directory [ 1704.747435][T14821] hub 9-1:0.0: activate --> -90 [ 1705.662502][T15426] usb 9-1: USB disconnect, device number 55 [ 1705.743253][T14821] usb 9-1.1: new full-speed USB device number 56 using dummy_hcd [ 1705.764752][T14821] usb 9-1-port1: attempt power cycle [ 1706.892784][T15426] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1707.106455][T15426] usb 9-1: Using ep0 maxpacket: 8 [ 1707.133310][T15426] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.165341][T15426] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1707.177313][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1707.188519][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1707.198611][T15426] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1707.336756][T15426] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1707.346337][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1707.354576][T15426] usb 9-1: Product: syz [ 1707.359111][T15426] usb 9-1: Manufacturer: syz [ 1707.380145][T15426] usb 9-1: SerialNumber: syz [ 1707.455790][T15426] usb 9-1: config 0 descriptor?? [ 1707.730644][T15426] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1707.740301][T15426] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1707.882271][T15426] usb 9-1: USB disconnect, device number 60 [ 1710.779791][T15426] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1710.989647][T15426] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1711.001536][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1711.011734][T15426] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1711.021766][T15426] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.130644][T15426] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1711.155776][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.168981][T15426] usb 9-1: Product: syz [ 1711.173293][T15426] usb 9-1: Manufacturer: syz [ 1711.178014][T15426] usb 9-1: SerialNumber: syz [ 1711.243040][T15426] usb 9-1: config 0 descriptor?? [ 1711.302632][T15426] redrat3 9-1:0.0: Couldn't find all endpoints [ 1711.542413][T15426] usb 9-1: USB disconnect, device number 61 [ 1712.100930][T15426] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1712.296908][T15426] usb 9-1: Using ep0 maxpacket: 16 [ 1712.315727][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1712.325901][T15426] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1712.337005][T15426] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1712.349010][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1712.375341][T15426] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1712.510791][T15426] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1712.520316][T15426] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1712.528832][T15426] usb 9-1: Product: syz [ 1712.533142][T15426] usb 9-1: Manufacturer: syz [ 1712.538098][T15426] usb 9-1: SerialNumber: syz [ 1712.618746][T15426] usb 9-1: config 0 descriptor?? [ 1712.652961][T15426] usb 9-1: NFC: intf ffff8881355c0c00 id ffffffff91b2b3e0 [ 1712.897136][T15426] nfcmrvl 9-1:0.0: NFC: registered with nci successfully [ 1713.080076][T15426] usb 9-1: USB disconnect, device number 62 [ 1713.087703][T15426] usb 9-1: NFC: intf ffff8881355c0c00 [ 1713.117170][T11816] Bluetooth: hci14: command 0x0406 tx timeout [ 1714.371156][T15426] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1714.617445][T15426] usb 9-1: config 0 has no interfaces? [ 1714.623185][T15426] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1714.632550][T15426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.771122][T15426] usb 9-1: config 0 descriptor?? [ 1714.983568][T11816] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1714.994098][T11816] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1715.012672][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.038930][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.167612][T11816] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1715.180122][T11816] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1715.193576][T11816] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1715.220186][T11816] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1715.330989][T15426] usb 9-1: USB disconnect, device number 63 [ 1716.100036][T15426] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1716.367424][T15426] usb 9-1: Using ep0 maxpacket: 8 [ 1716.511817][T15426] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.522731][T15426] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1716.534586][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1716.545801][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1716.557211][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1716.568373][T15426] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.172641][T15426] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1717.183336][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.191487][T15426] usb 9-1: Product: syz [ 1717.196121][T15426] usb 9-1: Manufacturer: syz [ 1717.200844][T15426] usb 9-1: SerialNumber: syz [ 1717.229900][T15901] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1717.297344][T15426] usb 9-1: config 0 descriptor?? [ 1717.378605][T15426] usb 9-1: can't set config #0, error -71 [ 1717.410255][T15901] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1717.418823][T15901] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1717.432018][T15901] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1717.530658][T15901] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1717.538261][T13552] Bluetooth: hci16: command tx timeout [ 1717.546170][T15901] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1717.566439][T15426] usb 9-1: USB disconnect, device number 64 [ 1718.432064][T15984] chnl_net:caif_netlink_parms(): no params data found [ 1718.677049][T15426] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1718.923544][T15426] usb 9-1: Using ep0 maxpacket: 8 [ 1718.959717][T15426] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1718.968099][T15426] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1718.978186][T15426] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1718.988316][T15426] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1718.998575][T15426] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1719.028867][T15426] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1719.042956][T15426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.396223][T11816] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1719.419079][T11816] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1719.431457][T11816] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1719.478154][T11816] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1719.488848][T11816] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 1719.499229][T11816] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1719.806122][T15901] Bluetooth: hci16: command tx timeout [ 1720.060298][T15426] usb 9-1: usb_control_msg returned -32 [ 1720.066251][T15426] usbtmc 9-1:16.0: can't read capabilities [ 1720.084928][T15901] Bluetooth: hci17: command tx timeout [ 1720.762267][T15988] chnl_net:caif_netlink_parms(): no params data found [ 1721.297126][T15984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.304854][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.313345][T15984] bridge_slave_0: entered allmulticast mode [ 1721.322754][T15984] bridge_slave_0: entered promiscuous mode [ 1721.553313][T15984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.560981][T15984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.594838][T15984] bridge_slave_1: entered allmulticast mode [ 1721.607223][T15984] bridge_slave_1: entered promiscuous mode [ 1721.830590][T11816] Bluetooth: hci21: command tx timeout [ 1721.877433][T14821] usb 9-1: USB disconnect, device number 65 [ 1722.036326][T11816] Bluetooth: hci16: command tx timeout [ 1722.303097][T11816] Bluetooth: hci17: command tx timeout [ 1722.452408][T15984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.719539][T15984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.924794][T14821] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1723.055351][T15996] chnl_net:caif_netlink_parms(): no params data found [ 1723.187267][T14821] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1723.196752][T14821] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1723.207425][T14821] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1723.216796][T14821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1723.245025][T14821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1723.416983][T15984] team0: Port device team_slave_0 added [ 1723.526678][T14821] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1723.536207][T14821] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1723.544642][T14821] usb 9-1: Product: syz [ 1723.548937][T14821] usb 9-1: Manufacturer: syz [ 1723.648031][T15984] team0: Port device team_slave_1 added [ 1723.664799][T15988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.699330][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.707704][T15988] bridge_slave_0: entered allmulticast mode [ 1723.717147][T15988] bridge_slave_0: entered promiscuous mode [ 1723.841866][T14821] cdc_wdm 9-1:1.0: skipping garbage [ 1723.847619][T14821] cdc_wdm 9-1:1.0: skipping garbage [ 1723.881951][T14821] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1723.888090][T14821] cdc_wdm 9-1:1.0: Unknown control protocol [ 1724.035212][T11816] Bluetooth: hci21: command tx timeout [ 1724.090508][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.098184][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.106638][T15988] bridge_slave_1: entered allmulticast mode [ 1724.142583][T15988] bridge_slave_1: entered promiscuous mode [ 1724.281408][T14821] usb 9-1: USB disconnect, device number 66 [ 1724.307518][T11816] Bluetooth: hci16: command tx timeout [ 1724.442716][T15984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.469850][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.501828][T15984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.603779][T11816] Bluetooth: hci17: command tx timeout [ 1724.959362][T15984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.966718][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.995161][T15984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.032825][T14821] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1725.073779][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.200738][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.303835][T14821] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1725.312907][T14821] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1725.323416][T14821] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1725.333783][T14821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1725.367277][T14821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1725.723676][T14821] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1725.733163][T14821] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1725.741522][T14821] usb 9-1: Product: syz [ 1725.745816][T14821] usb 9-1: Manufacturer: syz [ 1726.286690][T11816] Bluetooth: hci21: command tx timeout [ 1726.377977][T14821] usb 9-1: can't set config #1, error -71 [ 1726.416343][T14821] usb 9-1: USB disconnect, device number 67 [ 1726.479325][T15988] team0: Port device team_slave_0 added [ 1726.532125][T15984] hsr_slave_0: entered promiscuous mode [ 1726.642931][T15984] hsr_slave_1: entered promiscuous mode [ 1726.734514][T15984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1726.742448][T15984] Cannot create hsr debugfs directory [ 1726.814003][T11816] Bluetooth: hci17: command tx timeout [ 1726.908875][T15988] team0: Port device team_slave_1 added [ 1726.960713][T15996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.968475][T15996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.977140][T15996] bridge_slave_0: entered allmulticast mode [ 1726.986059][T15996] bridge_slave_0: entered promiscuous mode [ 1727.304641][T15996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.312668][T15996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.320774][T15996] bridge_slave_1: entered allmulticast mode [ 1727.357612][T15996] bridge_slave_1: entered promiscuous mode [ 1727.463772][T14821] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1727.539719][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1727.546261][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1727.659208][T14821] usb 9-1: Using ep0 maxpacket: 32 [ 1727.701014][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.712862][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.722918][T14821] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1727.732321][T14821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.909326][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.916440][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.944089][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.075409][T14821] usb 9-1: config 0 descriptor?? [ 1728.156693][T14821] hub 9-1:0.0: USB hub found [ 1728.327675][T14821] hub 9-1:0.0: 1 port detected [ 1728.485532][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.492998][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.519583][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.614137][T15996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.757731][T11816] Bluetooth: hci21: command tx timeout [ 1728.937922][T15996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.084210][T14821] hub 9-1:0.0: activate --> -90 [ 1729.753880][T15426] usb 9-1: USB disconnect, device number 68 [ 1729.770239][T14821] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1729.795194][T14821] usb 9-1-port1: attempt power cycle [ 1730.034677][T15996] team0: Port device team_slave_0 added [ 1730.303056][T15996] team0: Port device team_slave_1 added [ 1730.402611][T15988] hsr_slave_0: entered promiscuous mode [ 1730.515995][T15988] hsr_slave_1: entered promiscuous mode [ 1730.630982][T15988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1730.638854][T15988] Cannot create hsr debugfs directory [ 1731.173295][T15996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1731.180675][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1731.207061][T15996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.634963][T15426] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1731.687621][T15996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.695072][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1731.721586][T15996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.917662][T15426] usb 9-1: Using ep0 maxpacket: 8 [ 1731.966047][T15426] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1731.973833][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1731.985571][T15426] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1732.014529][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1732.030967][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1732.385388][T15426] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.393304][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1732.404941][T15426] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1732.416918][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1732.428529][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1732.747394][T15996] hsr_slave_0: entered promiscuous mode [ 1732.828645][T15996] hsr_slave_1: entered promiscuous mode [ 1732.857381][T15426] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.865190][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1732.877963][T15426] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1732.906210][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1732.922563][T15426] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1732.979712][T15996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1732.987555][T15996] Cannot create hsr debugfs directory [ 1733.303747][T15426] usb 9-1: string descriptor 0 read error: -22 [ 1733.310345][T15426] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1733.319877][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.541889][T15426] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1733.867638][T15426] usb 9-1: USB disconnect, device number 73 [ 1735.633438][T15426] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1735.901454][T15426] usb 9-1: Using ep0 maxpacket: 16 [ 1735.925473][T15426] usb 9-1: config 5 has an invalid interface number: 168 but max is 0 [ 1735.933912][T15426] usb 9-1: config 5 has no interface number 0 [ 1735.940336][T15426] usb 9-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1735.952319][T15426] usb 9-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1735.962814][T15426] usb 9-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1735.973281][T15426] usb 9-1: config 5 interface 168 has no altsetting 0 [ 1736.189909][T15426] usb 9-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1736.199399][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.224335][T15426] usb 9-1: Product: syz [ 1736.233645][T15426] usb 9-1: Manufacturer: syz [ 1736.238442][T15426] usb 9-1: SerialNumber: syz [ 1736.362867][T16022] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1736.372099][T16022] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1736.757636][ C0] usb 9-1: NFC: Urb failure (status -71) [ 1736.810072][ C0] usb 9-1: NFC: Urb failure (status -71) [ 1736.824127][T15426] usb 9-1: NFC: Unable to get FW version [ 1736.830601][T15426] pn533_usb 9-1:5.168: probe with driver pn533_usb failed with error -71 [ 1737.026887][T15426] usb 9-1: USB disconnect, device number 74 [ 1738.406388][T15426] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1738.660455][T15426] usb 9-1: Using ep0 maxpacket: 16 [ 1738.710262][T15426] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.721615][T15426] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1738.731926][T15426] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1738.741828][T15426] usb 9-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1738.755400][T15426] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1738.971679][T15426] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1738.997668][T15426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1739.010804][T15426] usb 9-1: SerialNumber: syz [ 1739.119435][T16026] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1739.131895][T16026] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1739.485906][T16026] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1739.526835][T16026] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1740.086428][T15426] cdc_ether 9-1:1.0 eth9: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1740.599137][T15426] usb 9-1: USB disconnect, device number 75 [ 1740.607349][T15426] cdc_ether 9-1:1.0 eth9: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 1741.732815][T15426] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1741.928061][T15426] usb 9-1: Using ep0 maxpacket: 8 [ 1741.965080][T15426] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1742.039308][T15426] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1742.048838][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.057019][T15426] usb 9-1: Product: syz [ 1742.061792][T15426] usb 9-1: Manufacturer: syz [ 1742.066522][T15426] usb 9-1: SerialNumber: syz [ 1742.157057][T15426] usb 9-1: config 0 descriptor?? [ 1742.181241][T15426] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1746.230805][T15426] gspca_zc3xx: i2c_r status error 10 [ 1746.691095][T15426] gspca_zc3xx: reg_r err -71 [ 1746.696320][T15426] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1746.806433][T15426] usb 9-1: USB disconnect, device number 76 [ 1747.519618][T15426] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 1747.784316][T15426] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1747.795788][T15426] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1747.809248][T15426] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1747.903894][T15426] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1747.913462][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.921811][T15426] usb 9-1: Product: syz [ 1747.926103][T15426] usb 9-1: Manufacturer: syz [ 1747.931107][T15426] usb 9-1: SerialNumber: syz [ 1748.710579][T15426] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1749.337802][ C0] usblp0: nonzero write bulk status received: -71 [ 1749.349723][T15426] usb 9-1: USB disconnect, device number 77 [ 1749.842223][T15426] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1750.042362][T15426] usb 9-1: Using ep0 maxpacket: 16 [ 1750.072716][T15426] usb 9-1: config 0 has an invalid interface number: 14 but max is 0 [ 1750.097306][T15426] usb 9-1: config 0 has no interface number 0 [ 1750.103541][T15426] usb 9-1: config 0 interface 14 has no altsetting 0 [ 1750.178575][T15426] usb 9-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=66.ca [ 1750.204192][T15426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.217508][T15426] usb 9-1: Product: syz [ 1750.221820][T15426] usb 9-1: Manufacturer: syz [ 1750.226892][T15426] usb 9-1: SerialNumber: syz [ 1750.295010][T15426] usb 9-1: config 0 descriptor?? [ 1750.789120][T15426] radio-si470x 9-1:0.14: could not find interrupt in endpoint [ 1750.797376][T15426] radio-si470x 9-1:0.14: probe with driver radio-si470x failed with error -5 [ 1750.806841][T15426] usbhid 9-1:0.14: couldn't find an input interrupt endpoint [ 1750.831390][T16029] usblp0: removed [ 1751.125013][T15426] usb 9-1: USB disconnect, device number 78 [ 1751.723346][T15426] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1751.931581][T15426] usb 9-1: Using ep0 maxpacket: 32 [ 1752.002851][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.014387][T15426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.024334][T15426] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1752.034699][T15426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.178834][T15426] usb 9-1: config 0 descriptor?? [ 1752.266244][T15426] hub 9-1:0.0: USB hub found [ 1752.437499][T15426] hub 9-1:0.0: 1 port detected [ 1753.117766][T15426] hub 9-1:0.0: activate --> -90 [ 1753.168119][T15901] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1753.203408][T15901] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1753.212785][T15901] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1753.265055][T15901] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1753.280707][T15901] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 1753.290102][T15901] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1754.021357][T14821] usb 9-1: USB disconnect, device number 79 [ 1754.035930][T15426] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1754.044103][T15426] usb 9-1-port1: attempt power cycle [ 1755.157225][T16035] chnl_net:caif_netlink_parms(): no params data found [ 1755.579646][T15901] Bluetooth: hci22: command tx timeout [ 1755.903676][T14821] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1756.109721][T14821] usb 9-1: Using ep0 maxpacket: 8 [ 1756.145157][T14821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.243227][T14821] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58 [ 1756.253413][T14821] usb 9-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 1756.261983][T14821] usb 9-1: Product: syz [ 1756.266399][T14821] usb 9-1: Manufacturer: syz [ 1756.271146][T14821] usb 9-1: SerialNumber: syz [ 1756.396495][T14821] usb 9-1: config 0 descriptor?? [ 1756.549577][T14821] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1756.796710][T16035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.804862][T16035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.813709][T16035] bridge_slave_0: entered allmulticast mode [ 1756.824170][T16035] bridge_slave_0: entered promiscuous mode [ 1756.994547][T14821] gspca_zc3xx: reg_w_i err -71 [ 1757.040075][T16035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.047924][T16035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.058056][T16035] bridge_slave_1: entered allmulticast mode [ 1757.094600][T16035] bridge_slave_1: entered promiscuous mode [ 1757.465488][T16035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.560729][T16035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.705606][T14821] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1757.712180][T14821] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1757.822157][T14821] usb 9-1: USB disconnect, device number 84 [ 1757.832983][T15901] Bluetooth: hci22: command tx timeout [ 1758.029348][T16035] team0: Port device team_slave_0 added [ 1758.154410][T16035] team0: Port device team_slave_1 added [ 1758.481378][T16035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.488718][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.534456][T16035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.795243][T16035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.803213][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.830021][T16035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.040618][T16051] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2474'. [ 1759.494048][T16035] hsr_slave_0: entered promiscuous mode [ 1759.595491][T16035] hsr_slave_1: entered promiscuous mode [ 1759.682009][T16035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1759.690014][T16035] Cannot create hsr debugfs directory [ 1759.896214][T14821] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1760.080093][T14821] usb 9-1: Using ep0 maxpacket: 8 [ 1760.087889][T15901] Bluetooth: hci22: command tx timeout [ 1760.128966][T14821] usb 9-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 1760.138449][T14821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.146834][T14821] usb 9-1: Product: syz [ 1760.151239][T14821] usb 9-1: Manufacturer: syz [ 1760.155986][T14821] usb 9-1: SerialNumber: syz [ 1760.343970][T14821] usb 9-1: config 0 descriptor?? [ 1760.373284][T14821] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 1760.673634][T14821] gspca_zc3xx: reg_w_i err -71 [ 1761.522189][T14821] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1761.528880][T14821] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1761.567584][T14821] usb 9-1: USB disconnect, device number 85 [ 1761.975968][T14821] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1762.155123][T14821] usb 9-1: Using ep0 maxpacket: 8 [ 1762.218452][T14821] usb 9-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 1762.227968][T14821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.236322][T14821] usb 9-1: Product: syz [ 1762.240613][T14821] usb 9-1: Manufacturer: syz [ 1762.245564][T14821] usb 9-1: SerialNumber: syz [ 1762.335806][T14821] usb 9-1: config 0 descriptor?? [ 1762.341592][T11816] Bluetooth: hci22: command tx timeout [ 1762.366900][T14821] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 1764.365806][T14821] gspca_zc3xx: reg_r err -32 [ 1765.004373][T14821] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1765.011008][T14821] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1765.250802][T14821] usb 9-1: USB disconnect, device number 86 [ 1767.241462][T14821] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1767.431305][T14821] usb 9-1: Using ep0 maxpacket: 8 [ 1767.455383][T14821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.488738][T14821] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58 [ 1767.514119][T14821] usb 9-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 1767.527408][T14821] usb 9-1: Product: syz [ 1767.531908][T14821] usb 9-1: Manufacturer: syz [ 1767.536658][T14821] usb 9-1: SerialNumber: syz [ 1767.598988][T14821] usb 9-1: config 0 descriptor?? [ 1767.678003][T14821] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1768.101742][T14821] gspca_zc3xx: reg_w_i err -71 [ 1768.753714][T14821] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1768.760375][T14821] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1768.863943][T14821] usb 9-1: USB disconnect, device number 87 [ 1769.265363][ T29] audit: type=1326 audit(1732190140.502:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.305110][ T29] audit: type=1326 audit(1732190140.502:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.332737][ T29] audit: type=1326 audit(1732190140.502:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.684933][ T29] audit: type=1326 audit(1732190140.595:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.707835][ T29] audit: type=1326 audit(1732190140.604:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.747157][ T29] audit: type=1326 audit(1732190140.678:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.775971][ T29] audit: type=1326 audit(1732190140.678:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.798675][ T29] audit: type=1326 audit(1732190140.678:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.821153][ T29] audit: type=1326 audit(1732190140.678:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1769.859093][ T29] audit: type=1326 audit(1732190140.687:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.2480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1773.682637][T14821] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1773.878215][T14821] usb 9-1: Using ep0 maxpacket: 8 [ 1773.893777][T14821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.964194][T14821] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58 [ 1773.973440][T14821] usb 9-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 1773.981963][T14821] usb 9-1: Product: syz [ 1773.986357][T14821] usb 9-1: Manufacturer: syz [ 1773.991098][T14821] usb 9-1: SerialNumber: syz [ 1774.095224][T14821] usb 9-1: config 0 descriptor?? [ 1774.132331][T14821] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1774.570185][T14821] gspca_zc3xx: reg_w_i err -71 [ 1775.211124][T14821] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1775.217743][T14821] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1775.314595][T14821] usb 9-1: USB disconnect, device number 88 [ 1775.847221][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 1775.847274][ T29] audit: type=1326 audit(1732190146.576:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1775.876365][ T29] audit: type=1326 audit(1732190146.576:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1776.136440][ T29] audit: type=1326 audit(1732190146.631:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1776.174651][ T29] audit: type=1326 audit(1732190146.631:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1776.203298][ T29] audit: type=1326 audit(1732190146.631:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1777.031958][T14821] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1777.253237][T14821] usb 9-1: Using ep0 maxpacket: 16 [ 1777.305582][T14821] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1777.315150][T14821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.323557][T14821] usb 9-1: Product: syz [ 1777.327842][T14821] usb 9-1: Manufacturer: syz [ 1777.332563][T14821] usb 9-1: SerialNumber: syz [ 1777.444152][T14821] usb 9-1: config 0 descriptor?? [ 1777.476339][T14821] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1778.565177][T14821] ssu100 9-1:0.0: probe with driver ssu100 failed with error -32 [ 1778.670409][T14821] usb 9-1: USB disconnect, device number 89 [ 1781.106495][T15901] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 1781.126514][T15901] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 1781.135121][T15901] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 1781.204193][T15901] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 1781.214854][T15901] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 1781.223753][T15901] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 1782.653862][T11816] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 1782.675731][T11816] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 1782.686124][T11816] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 1782.743400][T11816] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 1782.770418][T11816] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3 [ 1782.779268][T11816] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 1783.507451][T15901] Bluetooth: hci23: command tx timeout [ 1784.534576][T16097] chnl_net:caif_netlink_parms(): no params data found [ 1785.054721][T15901] Bluetooth: hci24: command tx timeout [ 1785.237887][T15901] Bluetooth: hci18: command 0x0406 tx timeout [ 1785.432033][T16103] chnl_net:caif_netlink_parms(): no params data found [ 1785.488500][T11816] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 1785.505946][T11816] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 1785.562307][T11816] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 1785.573739][T11816] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 1785.605718][T11816] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3 [ 1785.617454][T11816] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 1785.839961][T11816] Bluetooth: hci23: command tx timeout [ 1787.306773][T11816] Bluetooth: hci24: command tx timeout [ 1787.776744][T16118] chnl_net:caif_netlink_parms(): no params data found [ 1787.841024][T11816] Bluetooth: hci25: command tx timeout [ 1788.103293][T11816] Bluetooth: hci23: command tx timeout [ 1788.286133][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.293895][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.302311][T16097] bridge_slave_0: entered allmulticast mode [ 1788.311508][T16097] bridge_slave_0: entered promiscuous mode [ 1788.763265][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.771037][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.782444][T16097] bridge_slave_1: entered allmulticast mode [ 1788.791712][T16097] bridge_slave_1: entered promiscuous mode [ 1788.956435][T16103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.964213][T16103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.972578][T16103] bridge_slave_0: entered allmulticast mode [ 1788.981833][T16103] bridge_slave_0: entered promiscuous mode [ 1789.559684][ T8707] Bluetooth: hci24: command tx timeout [ 1789.611657][T16103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.619160][T16103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.627782][T16103] bridge_slave_1: entered allmulticast mode [ 1789.637195][T16103] bridge_slave_1: entered promiscuous mode [ 1789.677184][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.851337][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.075035][ T8707] Bluetooth: hci25: command tx timeout [ 1790.337018][ T8707] Bluetooth: hci23: command tx timeout [ 1790.538708][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1790.611137][T16097] team0: Port device team_slave_0 added [ 1790.736340][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.761393][T16097] team0: Port device team_slave_1 added [ 1790.771139][ T8707] Bluetooth: hci19: command 0x0406 tx timeout [ 1790.777392][ T8707] Bluetooth: hci20: command 0x0406 tx timeout [ 1791.587897][T16118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.601101][T16118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.609513][T16118] bridge_slave_0: entered allmulticast mode [ 1791.618716][T16118] bridge_slave_0: entered promiscuous mode [ 1791.638776][T16103] team0: Port device team_slave_0 added [ 1791.702683][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.709854][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.736366][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.773549][T16103] team0: Port device team_slave_1 added [ 1791.858757][T16140] Bluetooth: hci24: command tx timeout [ 1792.049328][T16118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.056882][T16118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.065425][T16118] bridge_slave_1: entered allmulticast mode [ 1792.075049][T16118] bridge_slave_1: entered promiscuous mode [ 1792.280828][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1792.288167][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1792.314504][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1792.414175][T16140] Bluetooth: hci25: command tx timeout [ 1792.617000][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1792.624406][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1792.650841][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1792.753152][T16118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.980046][T16118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.161006][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.168296][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.194661][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.375201][T16097] hsr_slave_0: entered promiscuous mode [ 1793.474794][T16097] hsr_slave_1: entered promiscuous mode [ 1793.537329][T16097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1793.545524][T16097] Cannot create hsr debugfs directory [ 1793.765594][T16118] team0: Port device team_slave_0 added [ 1793.956507][T16118] team0: Port device team_slave_1 added [ 1794.140163][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1794.146686][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.701050][T16140] Bluetooth: hci25: command tx timeout [ 1794.860273][T16103] hsr_slave_0: entered promiscuous mode [ 1794.954587][T16103] hsr_slave_1: entered promiscuous mode [ 1795.047812][T16103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1795.055530][T16103] Cannot create hsr debugfs directory [ 1795.095040][T16118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.103954][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1795.149739][T16118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1795.669677][T16118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1795.697017][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1795.730280][T16118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.729473][T16118] hsr_slave_0: entered promiscuous mode [ 1796.826736][T16118] hsr_slave_1: entered promiscuous mode [ 1796.853937][T16118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1796.861899][T16118] Cannot create hsr debugfs directory [ 1796.983865][ T29] audit: type=1326 audit(1732190166.088:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.8.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1797.022970][ T29] audit: type=1326 audit(1732190166.088:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.8.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1797.051468][ T29] audit: type=1326 audit(1732190166.088:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.8.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1797.074372][ T29] audit: type=1326 audit(1732190166.088:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.8.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1797.097800][ T29] audit: type=1326 audit(1732190166.088:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.8.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1800.034455][ T29] audit: type=1326 audit(1732190168.866:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.8.2505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1800.058283][ T29] audit: type=1326 audit(1732190168.912:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.8.2505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1800.081083][ T29] audit: type=1326 audit(1732190168.912:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.8.2505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1800.327431][ T29] audit: type=1326 audit(1732190168.977:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.8.2505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1800.365285][ T29] audit: type=1326 audit(1732190168.977:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.8.2505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1805.191937][T16174] vlan2: entered allmulticast mode [ 1807.746098][T14821] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1807.931675][T14821] usb 9-1: Using ep0 maxpacket: 16 [ 1807.946921][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.958353][T14821] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1807.967807][T14821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.064737][T14821] usb 9-1: config 0 descriptor?? [ 1808.540175][T14821] hid-steam 0003:28DE:1102.0030: unknown main item tag 0x0 [ 1808.573913][T14821] hid-steam 0003:28DE:1102.0030: unknown main item tag 0x0 [ 1808.640374][T14821] hid-steam 0003:28DE:1102.0030: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 1808.711179][T14821] hid-steam 0003:28DE:1102.0030: Steam Controller 'XXXXXXXXXX' connected [ 1808.723518][T14821] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.0030/input/input36 [ 1808.952417][T14821] hid-steam 0003:28DE:1102.0031: unknown main item tag 0x0 [ 1808.960164][T14821] hid-steam 0003:28DE:1102.0031: unknown main item tag 0x0 [ 1809.036798][T14821] hid-steam 0003:28DE:1102.0031: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 1809.155703][T14821] usb 9-1: USB disconnect, device number 90 [ 1809.188800][T15699] unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 [ 1809.199134][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.199134][T15699] dst_init+0xff/0x370 [ 1809.199134][T15699] dst_alloc+0x1e6/0x240 [ 1809.199134][T15699] ip_route_output_key_hash_rcu+0x2106/0x3810 [ 1809.199134][T15699] ip_route_output_flow+0xca/0x2b0 [ 1809.199134][T15699] geneve_link_config+0x1e0/0x6d0 [ 1809.199134][T15699] geneve_newlink+0x175/0x1b0 [ 1809.199134][T15699] rtnl_newlink+0x2e8f/0x4200 [ 1809.199134][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.199134][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.199134][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.199134][T15699] netlink_unicast+0xf52/0x1260 [ 1809.199134][T15699] netlink_sendmsg+0x10da/0x11e0 [ 1809.199134][T15699] __sock_sendmsg+0x30f/0x380 [ 1809.199134][T15699] __sys_sendto+0x594/0x750 [ 1809.199134][T15699] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1809.199134][T15699] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1809.199134][T15699] [ 1809.291195][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.291195][T15699] netdev_get_by_index+0xf9/0x190 [ 1809.291195][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1809.291195][T15699] ip6_route_info_create+0x1441/0x2090 [ 1809.291195][T15699] ip6_route_add+0x48/0x370 [ 1809.291195][T15699] addrconf_add_linklocal+0x7f0/0xa20 [ 1809.291195][T15699] addrconf_addr_gen+0x9dd/0xba0 [ 1809.291195][T15699] addrconf_init_auto_addrs+0xcb3/0x10a0 [ 1809.291195][T15699] addrconf_notify+0x15ba/0x1c40 [ 1809.291195][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.291195][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.291195][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.291195][T15699] dev_change_flags+0x168/0x1d0 [ 1809.291195][T15699] do_setlink+0x170b/0x7120 [ 1809.291195][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.291195][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.291195][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.291195][T15699] [ 1809.385254][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.385254][T15699] netdev_get_by_index+0xf9/0x190 [ 1809.385254][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1809.385254][T15699] ip6_route_info_create+0x1441/0x2090 [ 1809.385254][T15699] addrconf_f6i_alloc+0x33a/0x5f0 [ 1809.385254][T15699] ipv6_add_addr+0x873/0x1450 [ 1809.385254][T15699] addrconf_add_linklocal+0x315/0xa20 [ 1809.385254][T15699] addrconf_addr_gen+0x9dd/0xba0 [ 1809.385254][T15699] addrconf_init_auto_addrs+0xcb3/0x10a0 [ 1809.385254][T15699] addrconf_notify+0x15ba/0x1c40 [ 1809.385254][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.385254][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.385254][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.385254][T15699] dev_change_flags+0x168/0x1d0 [ 1809.385254][T15699] do_setlink+0x170b/0x7120 [ 1809.385254][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.385254][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.385254][T15699] [ 1809.479691][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.479691][T15699] netdev_get_by_index+0xf9/0x190 [ 1809.479691][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1809.479691][T15699] ip6_route_info_create+0x1441/0x2090 [ 1809.479691][T15699] ip6_route_add+0x48/0x370 [ 1809.479691][T15699] addrconf_add_dev+0x549/0x5f0 [ 1809.479691][T15699] addrconf_init_auto_addrs+0x867/0x10a0 [ 1809.479691][T15699] addrconf_notify+0x15ba/0x1c40 [ 1809.479691][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.479691][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.479691][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.479691][T15699] dev_change_flags+0x168/0x1d0 [ 1809.479691][T15699] do_setlink+0x170b/0x7120 [ 1809.479691][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.479691][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.479691][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.479691][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.479691][T15699] [ 1809.572623][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.572623][T15699] netdev_get_by_index+0xf9/0x190 [ 1809.572623][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1809.572623][T15699] ip6_route_info_create+0x1441/0x2090 [ 1809.572623][T15699] ip6_route_add+0x48/0x370 [ 1809.572623][T15699] addrconf_permanent_addr+0xdef/0x11d0 [ 1809.572623][T15699] addrconf_notify+0xa97/0x1c40 [ 1809.572623][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.572623][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.572623][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.572623][T15699] dev_change_flags+0x168/0x1d0 [ 1809.572623][T15699] do_setlink+0x170b/0x7120 [ 1809.572623][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.572623][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.572623][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.572623][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.572623][T15699] netlink_unicast+0xf52/0x1260 [ 1809.572623][T15699] [ 1809.665410][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.665410][T15699] netdev_get_by_index+0xf9/0x190 [ 1809.665410][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1809.665410][T15699] ip6_route_info_create+0x1441/0x2090 [ 1809.665410][T15699] addrconf_f6i_alloc+0x33a/0x5f0 [ 1809.665410][T15699] addrconf_permanent_addr+0x2ca/0x11d0 [ 1809.665410][T15699] addrconf_notify+0xa97/0x1c40 [ 1809.665410][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.665410][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.665410][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.665410][T15699] dev_change_flags+0x168/0x1d0 [ 1809.665410][T15699] do_setlink+0x170b/0x7120 [ 1809.665410][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.665410][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.665410][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.665410][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.665410][T15699] netlink_unicast+0xf52/0x1260 [ 1809.665410][T15699] [ 1809.758825][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.758825][T15699] fib_check_nh+0xcc2/0x1b40 [ 1809.758825][T15699] fib_create_info+0x26b5/0x3fd0 [ 1809.758825][T15699] fib_table_insert+0x264/0x3650 [ 1809.758825][T15699] fib_magic+0x424/0x590 [ 1809.758825][T15699] fib_add_ifaddr+0x7a1/0xa10 [ 1809.758825][T15699] fib_netdev_event+0x82e/0xc50 [ 1809.758825][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.758825][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.758825][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.758825][T15699] dev_change_flags+0x168/0x1d0 [ 1809.758825][T15699] do_setlink+0x170b/0x7120 [ 1809.758825][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.758825][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.758825][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.758825][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.758825][T15699] netlink_unicast+0xf52/0x1260 [ 1809.758825][T15699] [ 1809.849870][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.849870][T15699] fib_check_nh+0xcc2/0x1b40 [ 1809.849870][T15699] fib_create_info+0x26b5/0x3fd0 [ 1809.849870][T15699] fib_table_insert+0x264/0x3650 [ 1809.849870][T15699] fib_magic+0x424/0x590 [ 1809.849870][T15699] fib_add_ifaddr+0x6de/0xa10 [ 1809.849870][T15699] fib_netdev_event+0x82e/0xc50 [ 1809.849870][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1809.849870][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1809.849870][T15699] __dev_notify_flags+0x217/0x3b0 [ 1809.849870][T15699] dev_change_flags+0x168/0x1d0 [ 1809.849870][T15699] do_setlink+0x170b/0x7120 [ 1809.849870][T15699] rtnl_newlink+0x329e/0x4200 [ 1809.849870][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.849870][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.849870][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.849870][T15699] netlink_unicast+0xf52/0x1260 [ 1809.849870][T15699] [ 1809.940967][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1809.940967][T15699] netdev_tracker_alloc+0x89/0xb0 [ 1809.940967][T15699] fib_create_info+0x2c63/0x3fd0 [ 1809.940967][T15699] fib_table_insert+0x264/0x3650 [ 1809.940967][T15699] fib_magic+0x424/0x590 [ 1809.940967][T15699] fib_add_ifaddr+0x1bb/0xa10 [ 1809.940967][T15699] fib_inetaddr_event+0x16e/0x5f0 [ 1809.940967][T15699] blocking_notifier_call_chain+0x123/0x4b0 [ 1809.940967][T15699] __inet_insert_ifa+0xdb8/0x1010 [ 1809.940967][T15699] inet_rtm_newaddr+0x1c8a/0x2600 [ 1809.940967][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1809.940967][T15699] netlink_rcv_skb+0x375/0x650 [ 1809.940967][T15699] rtnetlink_rcv+0x34/0x40 [ 1809.940967][T15699] netlink_unicast+0xf52/0x1260 [ 1809.940967][T15699] netlink_sendmsg+0x10da/0x11e0 [ 1809.940967][T15699] __sock_sendmsg+0x30f/0x380 [ 1809.940967][T15699] __sys_sendto+0x594/0x750 [ 1809.940967][T15699] [ 1811.457437][T14821] hid-steam 0003:28DE:1102.0030: Steam Controller 'XXXXXXXXXX' disconnected [ 1816.619502][T14821] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1816.849200][T14821] usb 9-1: Using ep0 maxpacket: 16 [ 1816.874990][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.891364][T14821] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1816.900882][T14821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.969873][T14821] usb 9-1: config 0 descriptor?? [ 1817.477265][T14821] hid-steam 0003:28DE:1102.0032: unknown main item tag 0x0 [ 1817.484759][T14821] hid-steam 0003:28DE:1102.0032: unknown main item tag 0x0 [ 1817.587963][T14821] hid-steam 0003:28DE:1102.0032: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 1817.717025][T14821] hid-steam 0003:28DE:1102.0032: Steam Controller 'XXXXXXXXXX' connected [ 1817.731287][T14821] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.0032/input/input37 [ 1817.945805][T14821] hid-steam 0003:28DE:1102.0033: unknown main item tag 0x0 [ 1817.953497][T14821] hid-steam 0003:28DE:1102.0033: unknown main item tag 0x0 [ 1818.031589][T14821] hid-steam 0003:28DE:1102.0033: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 1818.240627][T14821] usb 9-1: USB disconnect, device number 91 [ 1818.486547][T14821] hid-steam 0003:28DE:1102.0032: Steam Controller 'XXXXXXXXXX' disconnected [ 1820.296725][T15901] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 1820.331502][T15901] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 1820.342115][T15901] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 1820.371095][T15901] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 1820.389781][T15901] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3 [ 1820.411710][T15901] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 1821.667635][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1821.667695][ T29] audit: type=1326 audit(1732190188.840:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.8.2527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1821.696353][ T29] audit: type=1326 audit(1732190188.840:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.8.2527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1822.115337][ T29] audit: type=1326 audit(1732190189.015:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.8.2527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1822.138134][ T29] audit: type=1326 audit(1732190189.015:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.8.2527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1822.160715][ T29] audit: type=1326 audit(1732190189.015:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.8.2527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1822.674505][T16140] Bluetooth: hci26: command tx timeout [ 1822.793016][T16210] chnl_net:caif_netlink_parms(): no params data found [ 1824.055515][T15901] Bluetooth: hci15: command 0x0406 tx timeout [ 1824.802620][T16210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.810303][T16210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.818312][T16210] bridge_slave_0: entered allmulticast mode [ 1824.827437][T16210] bridge_slave_0: entered promiscuous mode [ 1824.918445][T16140] Bluetooth: hci26: command tx timeout [ 1825.059703][T16210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.067238][T16210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.101118][T16210] bridge_slave_1: entered allmulticast mode [ 1825.110309][T16210] bridge_slave_1: entered promiscuous mode [ 1825.693014][T16210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.825009][T16210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.348822][T16210] team0: Port device team_slave_0 added [ 1826.497822][T16210] team0: Port device team_slave_1 added [ 1826.900216][T16210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.907353][T16210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.935296][T16210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1827.171554][T16140] Bluetooth: hci26: command tx timeout [ 1827.219632][T16210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1827.226968][T16210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1827.253305][T16210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1828.123446][T16210] hsr_slave_0: entered promiscuous mode [ 1828.259478][T16210] hsr_slave_1: entered promiscuous mode [ 1828.362156][T16210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1828.370048][T16210] Cannot create hsr debugfs directory [ 1829.429952][T16140] Bluetooth: hci26: command tx timeout [ 1831.043622][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2539'. [ 1831.052850][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2539'. [ 1831.062204][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2539'. [ 1834.358166][T16261] capability: warning: `syz.8.2546' uses 32-bit capabilities (legacy support in use) [ 1836.477960][T15888] unregister_netdevice: waiting for netdevsim3 to become free. Usage count = 2 [ 1836.487912][T15888] ref_tracker: eth%d@ffff88804fd26568 has 1/1 users at [ 1836.487912][T15888] netdev_get_by_index+0xf9/0x190 [ 1836.487912][T15888] fib6_nh_init+0x1bc/0x2fd0 [ 1836.487912][T15888] ip6_route_info_create+0x1441/0x2090 [ 1836.487912][T15888] addrconf_f6i_alloc+0x33a/0x5f0 [ 1836.487912][T15888] ipv6_add_addr+0x873/0x1450 [ 1836.487912][T15888] addrconf_add_linklocal+0x315/0xa20 [ 1836.487912][T15888] addrconf_addr_gen+0x9dd/0xba0 [ 1836.487912][T15888] addrconf_init_auto_addrs+0xcb3/0x10a0 [ 1836.487912][T15888] addrconf_notify+0x15ba/0x1c40 [ 1836.487912][T15888] raw_notifier_call_chain+0xe8/0x440 [ 1836.487912][T15888] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1836.487912][T15888] __dev_notify_flags+0x217/0x3b0 [ 1836.487912][T15888] dev_change_flags+0x168/0x1d0 [ 1836.487912][T15888] do_setlink+0x170b/0x7120 [ 1836.487912][T15888] rtnl_newlink+0x329e/0x4200 [ 1836.487912][T15888] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1836.487912][T15888] [ 1837.929930][T14821] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1838.159513][T14821] usb 9-1: Using ep0 maxpacket: 16 [ 1838.238683][T14821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.250181][T14821] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1838.259637][T14821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.429617][T14821] usb 9-1: config 0 descriptor?? [ 1839.009686][T14821] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 1839.017406][T14821] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 1839.103297][T14821] hid-steam 0003:28DE:1102.0034: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 1839.254105][T14821] hid-steam 0003:28DE:1102.0034: Steam Controller 'XXXXXXXXXX' connected [ 1839.266561][T14821] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.0034/input/input38 [ 1839.573820][T14821] hid-steam 0003:28DE:1102.0035: unknown main item tag 0x0 [ 1839.581589][T14821] hid-steam 0003:28DE:1102.0035: unknown main item tag 0x0 [ 1839.684851][T14821] hid-steam 0003:28DE:1102.0035: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 1839.881722][T14821] usb 9-1: USB disconnect, device number 92 [ 1840.118580][T14821] hid-steam 0003:28DE:1102.0034: Steam Controller 'XXXXXXXXXX' disconnected [ 1843.029530][T14821] usb 9-1: new low-speed USB device number 93 using dummy_hcd [ 1843.288121][T14821] usb 9-1: Invalid ep0 maxpacket: 9 [ 1843.476760][T14821] usb 9-1: new low-speed USB device number 94 using dummy_hcd [ 1843.737575][T14821] usb 9-1: Invalid ep0 maxpacket: 9 [ 1843.770666][T14821] usb usb9-port1: attempt power cycle [ 1844.004740][ T5855] kworker/1:3 (5855) used greatest stack depth: 4008 bytes left [ 1844.150848][T14821] usb 9-1: new low-speed USB device number 95 using dummy_hcd [ 1844.257990][T14821] usb 9-1: Invalid ep0 maxpacket: 9 [ 1844.430297][T14821] usb 9-1: new low-speed USB device number 96 using dummy_hcd [ 1844.538602][T14821] usb 9-1: Invalid ep0 maxpacket: 9 [ 1844.564845][T14821] usb usb9-port1: unable to enumerate USB device [ 1849.033333][T15901] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 1849.081735][T15901] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 1849.090696][T15901] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 1849.196312][T15901] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 1849.221786][T15901] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3 [ 1849.231286][T15901] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 1850.064707][T13552] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 1850.119345][T13552] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 1850.172729][T13552] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 1850.197784][T13552] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 1850.207898][T13552] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3 [ 1850.217914][T13552] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 1851.646730][T13552] Bluetooth: hci27: command tx timeout [ 1852.070137][T15901] Bluetooth: hci16: command 0x0406 tx timeout [ 1852.076399][T15901] Bluetooth: hci17: command 0x0406 tx timeout [ 1852.136301][T16140] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1 [ 1852.188904][T16140] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9 [ 1852.197810][T16140] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9 [ 1852.210647][T16140] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4 [ 1852.274784][T16140] Bluetooth: hci29: unexpected cc 0x0c25 length: 249 > 3 [ 1852.283418][T16140] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2 [ 1852.654642][T13552] Bluetooth: hci28: command tx timeout [ 1853.336754][T16299] chnl_net:caif_netlink_parms(): no params data found [ 1853.938363][T16140] Bluetooth: hci27: command tx timeout [ 1854.516837][T16140] Bluetooth: hci29: command tx timeout [ 1854.625613][T16305] chnl_net:caif_netlink_parms(): no params data found [ 1854.944186][T16140] Bluetooth: hci28: command tx timeout [ 1855.622573][T16311] chnl_net:caif_netlink_parms(): no params data found [ 1856.120458][T15901] Bluetooth: hci27: command tx timeout [ 1856.730995][T15901] Bluetooth: hci29: command tx timeout [ 1857.162923][T15901] Bluetooth: hci28: command tx timeout [ 1857.351412][T13552] Bluetooth: hci21: command 0x0406 tx timeout [ 1858.393849][T13552] Bluetooth: hci27: command tx timeout [ 1858.983775][T13552] Bluetooth: hci29: command tx timeout [ 1859.414344][T13552] Bluetooth: hci28: command tx timeout [ 1860.647064][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.653762][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.234859][T13552] Bluetooth: hci29: command tx timeout [ 1884.489199][T15901] Bluetooth: hci30: unexpected cc 0x0c03 length: 249 > 1 [ 1884.507983][T15901] Bluetooth: hci30: unexpected cc 0x1003 length: 249 > 9 [ 1884.516952][T15901] Bluetooth: hci30: unexpected cc 0x1001 length: 249 > 9 [ 1884.532031][T15901] Bluetooth: hci30: unexpected cc 0x0c23 length: 249 > 4 [ 1884.573188][T15901] Bluetooth: hci30: unexpected cc 0x0c25 length: 249 > 3 [ 1884.581955][T15901] Bluetooth: hci30: unexpected cc 0x0c38 length: 249 > 2 [ 1887.113777][T16299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.122941][T16299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.131383][T16299] bridge_slave_0: entered allmulticast mode [ 1887.140874][T16299] bridge_slave_0: entered promiscuous mode [ 1887.482606][T16299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.491042][T16299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.501196][T16299] bridge_slave_1: entered allmulticast mode [ 1887.510645][T16299] bridge_slave_1: entered promiscuous mode [ 1888.290342][T16140] Bluetooth: hci30: command tx timeout [ 1888.413483][T16305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.450874][T16305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.459127][T16305] bridge_slave_0: entered allmulticast mode [ 1888.468538][T16305] bridge_slave_0: entered promiscuous mode [ 1888.583435][T16299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.744534][T16299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.027932][T16305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.035591][T16305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.043626][T16305] bridge_slave_1: entered allmulticast mode [ 1889.052902][T16305] bridge_slave_1: entered promiscuous mode [ 1889.563513][T16299] team0: Port device team_slave_0 added [ 1889.699811][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.707436][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.715431][T16311] bridge_slave_0: entered allmulticast mode [ 1889.724805][T16311] bridge_slave_0: entered promiscuous mode [ 1889.799974][T16299] team0: Port device team_slave_1 added [ 1889.948835][T16330] chnl_net:caif_netlink_parms(): no params data found [ 1890.148641][T16305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1890.178129][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.187439][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.220752][T16311] bridge_slave_1: entered allmulticast mode [ 1890.230355][T16311] bridge_slave_1: entered promiscuous mode [ 1890.415759][T16305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1890.480316][T16299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1890.487772][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1890.514107][T16299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1890.585357][T13552] Bluetooth: hci30: command tx timeout [ 1890.682350][T13552] Bluetooth: hci22: command 0x0406 tx timeout [ 1891.255691][T16299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1891.262790][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.289294][T16299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1891.485034][T16305] team0: Port device team_slave_0 added [ 1891.576717][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.614824][T16305] team0: Port device team_slave_1 added [ 1891.922163][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.276173][T16305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.283272][T16305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.329844][T16305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.706399][T16305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.713739][T16305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.740253][T16305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.806689][T16299] hsr_slave_0: entered promiscuous mode [ 1892.833542][T16140] Bluetooth: hci30: command tx timeout [ 1892.912040][T16299] hsr_slave_1: entered promiscuous mode [ 1892.951422][T16299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1892.959360][T16299] Cannot create hsr debugfs directory [ 1892.997863][T16311] team0: Port device team_slave_0 added [ 1893.110210][T16311] team0: Port device team_slave_1 added [ 1893.444646][T16330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.452101][T16330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.460713][T16330] bridge_slave_0: entered allmulticast mode [ 1893.470121][T16330] bridge_slave_0: entered promiscuous mode [ 1893.710280][T16330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.718024][T16330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.726317][T16330] bridge_slave_1: entered allmulticast mode [ 1893.735230][T16330] bridge_slave_1: entered promiscuous mode [ 1893.776595][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.784185][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.810559][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1894.297019][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1894.323615][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1894.357152][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1894.386357][T16305] hsr_slave_0: entered promiscuous mode [ 1894.466520][T16305] hsr_slave_1: entered promiscuous mode [ 1894.484793][T16305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1894.492485][T16305] Cannot create hsr debugfs directory [ 1894.694954][T16330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.923397][T16330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1895.038841][T16140] Bluetooth: hci30: command tx timeout [ 1895.597666][T16311] hsr_slave_0: entered promiscuous mode [ 1895.677110][T16311] hsr_slave_1: entered promiscuous mode [ 1895.698154][T16311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1895.705855][T16311] Cannot create hsr debugfs directory [ 1895.768729][T16330] team0: Port device team_slave_0 added [ 1895.950995][T16330] team0: Port device team_slave_1 added [ 1896.380260][T16330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1896.387354][T16330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1896.432955][T16330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.774681][T16330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.781981][T16330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1896.808405][T16330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1897.492707][T16330] hsr_slave_0: entered promiscuous mode [ 1897.577185][T16330] hsr_slave_1: entered promiscuous mode [ 1897.594412][T16330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1897.602115][T16330] Cannot create hsr debugfs directory [ 1913.637270][T13552] Bluetooth: hci31: unexpected cc 0x0c03 length: 249 > 1 [ 1913.659941][T13552] Bluetooth: hci31: unexpected cc 0x1003 length: 249 > 9 [ 1913.668857][T13552] Bluetooth: hci31: unexpected cc 0x1001 length: 249 > 9 [ 1913.688501][T13552] Bluetooth: hci31: unexpected cc 0x0c23 length: 249 > 4 [ 1913.774753][T13552] Bluetooth: hci31: unexpected cc 0x0c25 length: 249 > 3 [ 1913.802105][T13552] Bluetooth: hci31: unexpected cc 0x0c38 length: 249 > 2 [ 1915.643508][T16140] Bluetooth: hci32: unexpected cc 0x0c03 length: 249 > 1 [ 1915.652146][T16140] Bluetooth: hci32: unexpected cc 0x1003 length: 249 > 9 [ 1915.660862][T16140] Bluetooth: hci32: unexpected cc 0x1001 length: 249 > 9 [ 1915.676769][T16140] Bluetooth: hci32: unexpected cc 0x0c23 length: 249 > 4 [ 1915.687016][T16140] Bluetooth: hci32: unexpected cc 0x0c25 length: 249 > 3 [ 1915.696518][T16140] Bluetooth: hci32: unexpected cc 0x0c38 length: 249 > 2 [ 1916.153526][T16140] Bluetooth: hci31: command tx timeout [ 1916.560605][T16349] chnl_net:caif_netlink_parms(): no params data found [ 1916.695320][T16360] Bluetooth: hci33: unexpected cc 0x0c03 length: 249 > 1 [ 1916.737987][T16360] Bluetooth: hci33: unexpected cc 0x1003 length: 249 > 9 [ 1916.746543][T16360] Bluetooth: hci33: unexpected cc 0x1001 length: 249 > 9 [ 1916.758768][T16360] Bluetooth: hci33: unexpected cc 0x0c23 length: 249 > 4 [ 1916.768753][T16360] Bluetooth: hci33: unexpected cc 0x0c25 length: 249 > 3 [ 1916.777400][T16360] Bluetooth: hci33: unexpected cc 0x0c38 length: 249 > 2 [ 1918.027546][T16360] Bluetooth: hci32: command tx timeout [ 1918.463536][T13552] Bluetooth: hci23: command 0x0406 tx timeout [ 1918.469802][T13552] Bluetooth: hci24: command 0x0406 tx timeout [ 1918.507437][T13552] Bluetooth: hci25: command 0x0406 tx timeout [ 1918.513745][T13552] Bluetooth: hci31: command tx timeout [ 1919.074036][T16140] Bluetooth: hci33: command tx timeout [ 1919.080739][T16355] chnl_net:caif_netlink_parms(): no params data found [ 1919.453125][T16359] chnl_net:caif_netlink_parms(): no params data found [ 1919.482165][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.515872][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.524239][T16349] bridge_slave_0: entered allmulticast mode [ 1919.533693][T16349] bridge_slave_0: entered promiscuous mode [ 1919.996992][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.004783][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.013082][T16349] bridge_slave_1: entered allmulticast mode [ 1920.022454][T16349] bridge_slave_1: entered promiscuous mode [ 1920.300441][T16140] Bluetooth: hci32: command tx timeout [ 1920.697958][T15901] Bluetooth: hci31: command tx timeout [ 1920.753964][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1920.980337][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.308483][T15901] Bluetooth: hci33: command tx timeout [ 1921.670179][T16349] team0: Port device team_slave_0 added [ 1921.786052][T16349] team0: Port device team_slave_1 added [ 1922.513588][T15901] Bluetooth: hci32: command tx timeout [ 1922.669668][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.677444][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.692735][T16359] bridge_slave_0: entered allmulticast mode [ 1922.730146][T16359] bridge_slave_0: entered promiscuous mode [ 1922.754040][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.761175][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.787872][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.837528][T16355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.844990][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.853424][T16355] bridge_slave_0: entered allmulticast mode [ 1922.864615][T16355] bridge_slave_0: entered promiscuous mode [ 1922.972009][T15901] Bluetooth: hci31: command tx timeout [ 1923.009675][T16355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.017631][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.026098][T16355] bridge_slave_1: entered allmulticast mode [ 1923.062485][T16355] bridge_slave_1: entered promiscuous mode [ 1923.124129][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.131864][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.140126][T16359] bridge_slave_1: entered allmulticast mode [ 1923.176832][T16359] bridge_slave_1: entered promiscuous mode [ 1923.246129][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1923.253450][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1923.299951][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.574613][T15901] Bluetooth: hci33: command tx timeout [ 1924.775940][T15901] Bluetooth: hci32: command tx timeout [ 1925.835863][T15901] Bluetooth: hci33: command tx timeout [ 1927.243793][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1927.264508][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1951.197350][T16140] Bluetooth: hci34: unexpected cc 0x0c03 length: 249 > 1 [ 1951.206782][T16140] Bluetooth: hci34: unexpected cc 0x1003 length: 249 > 9 [ 1951.238385][T16140] Bluetooth: hci34: unexpected cc 0x1001 length: 249 > 9 [ 1951.249491][T16140] Bluetooth: hci34: unexpected cc 0x0c23 length: 249 > 4 [ 1951.274035][T16140] Bluetooth: hci34: unexpected cc 0x0c25 length: 249 > 3 [ 1951.311138][T16140] Bluetooth: hci34: unexpected cc 0x0c38 length: 249 > 2 [ 1951.492721][T16355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.594320][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.760462][T16355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1951.819530][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1952.299210][T16355] team0: Port device team_slave_0 added [ 1952.320537][T16349] hsr_slave_0: entered promiscuous mode [ 1952.433136][T16349] hsr_slave_1: entered promiscuous mode [ 1952.535760][T16349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1952.543481][T16349] Cannot create hsr debugfs directory [ 1952.582914][T16355] team0: Port device team_slave_1 added [ 1952.865165][T16359] team0: Port device team_slave_0 added [ 1953.207397][T16359] team0: Port device team_slave_1 added [ 1953.255987][T16355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1953.263340][T16355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1953.292447][T16355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1953.597316][T15901] Bluetooth: hci34: command tx timeout [ 1953.942639][T16355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1953.949748][T16355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1953.976368][T16355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1954.059216][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1954.066567][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.092839][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1954.948202][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1954.955596][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.982090][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1955.046631][T16377] chnl_net:caif_netlink_parms(): no params data found [ 1955.576240][T16355] hsr_slave_0: entered promiscuous mode [ 1955.702454][T16355] hsr_slave_1: entered promiscuous mode [ 1955.737238][T16355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1955.745185][T16355] Cannot create hsr debugfs directory [ 1955.822512][T16140] Bluetooth: hci34: command tx timeout [ 1956.536260][T16359] hsr_slave_0: entered promiscuous mode [ 1956.720380][T16359] hsr_slave_1: entered promiscuous mode [ 1956.816358][T16359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1956.824248][T16359] Cannot create hsr debugfs directory [ 1957.186522][T16140] Bluetooth: hci26: command 0x0406 tx timeout [ 1958.019458][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.028422][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.036714][T16377] bridge_slave_0: entered allmulticast mode [ 1958.046399][T16377] bridge_slave_0: entered promiscuous mode [ 1958.073190][T15901] Bluetooth: hci34: command tx timeout [ 1958.393073][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.400934][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.409482][T16377] bridge_slave_1: entered allmulticast mode [ 1958.419330][T16377] bridge_slave_1: entered promiscuous mode [ 1959.160829][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.298892][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.689696][T16377] team0: Port device team_slave_0 added [ 1959.802594][T16377] team0: Port device team_slave_1 added [ 1960.187383][T16377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1960.194820][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1960.240911][T16377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1960.346031][T15901] Bluetooth: hci34: command tx timeout [ 1960.507146][T16377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1960.514485][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1960.560508][T16377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1961.219954][T16377] hsr_slave_0: entered promiscuous mode [ 1961.346305][T16377] hsr_slave_1: entered promiscuous mode [ 1961.418856][T16377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1961.446794][T16377] Cannot create hsr debugfs directory [ 1961.749446][T15699] unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 [ 1961.777877][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1961.777877][T15699] dst_init+0xff/0x370 [ 1961.777877][T15699] dst_alloc+0x1e6/0x240 [ 1961.777877][T15699] ip_route_output_key_hash_rcu+0x2106/0x3810 [ 1961.777877][T15699] ip_route_output_flow+0xca/0x2b0 [ 1961.777877][T15699] geneve_link_config+0x1e0/0x6d0 [ 1961.777877][T15699] geneve_newlink+0x175/0x1b0 [ 1961.777877][T15699] rtnl_newlink+0x2e8f/0x4200 [ 1961.777877][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1961.777877][T15699] netlink_rcv_skb+0x375/0x650 [ 1961.777877][T15699] rtnetlink_rcv+0x34/0x40 [ 1961.777877][T15699] netlink_unicast+0xf52/0x1260 [ 1961.777877][T15699] netlink_sendmsg+0x10da/0x11e0 [ 1961.777877][T15699] __sock_sendmsg+0x30f/0x380 [ 1961.777877][T15699] __sys_sendto+0x594/0x750 [ 1961.777877][T15699] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1961.777877][T15699] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1961.777877][T15699] [ 1961.869777][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1961.869777][T15699] netdev_get_by_index+0xf9/0x190 [ 1961.869777][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1961.869777][T15699] ip6_route_info_create+0x1441/0x2090 [ 1961.869777][T15699] ip6_route_add+0x48/0x370 [ 1961.869777][T15699] addrconf_add_linklocal+0x7f0/0xa20 [ 1961.869777][T15699] addrconf_addr_gen+0x9dd/0xba0 [ 1961.869777][T15699] addrconf_init_auto_addrs+0xcb3/0x10a0 [ 1961.869777][T15699] addrconf_notify+0x15ba/0x1c40 [ 1961.869777][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1961.869777][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1961.869777][T15699] __dev_notify_flags+0x217/0x3b0 [ 1961.869777][T15699] dev_change_flags+0x168/0x1d0 [ 1961.869777][T15699] do_setlink+0x170b/0x7120 [ 1961.869777][T15699] rtnl_newlink+0x329e/0x4200 [ 1961.869777][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1961.869777][T15699] netlink_rcv_skb+0x375/0x650 [ 1961.869777][T15699] [ 1961.963774][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1961.963774][T15699] netdev_get_by_index+0xf9/0x190 [ 1961.963774][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1961.963774][T15699] ip6_route_info_create+0x1441/0x2090 [ 1961.963774][T15699] addrconf_f6i_alloc+0x33a/0x5f0 [ 1961.963774][T15699] ipv6_add_addr+0x873/0x1450 [ 1961.963774][T15699] addrconf_add_linklocal+0x315/0xa20 [ 1961.963774][T15699] addrconf_addr_gen+0x9dd/0xba0 [ 1961.963774][T15699] addrconf_init_auto_addrs+0xcb3/0x10a0 [ 1961.963774][T15699] addrconf_notify+0x15ba/0x1c40 [ 1961.963774][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1961.963774][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1961.963774][T15699] __dev_notify_flags+0x217/0x3b0 [ 1961.963774][T15699] dev_change_flags+0x168/0x1d0 [ 1961.963774][T15699] do_setlink+0x170b/0x7120 [ 1961.963774][T15699] rtnl_newlink+0x329e/0x4200 [ 1961.963774][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1961.963774][T15699] [ 1962.058245][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1962.058245][T15699] netdev_get_by_index+0xf9/0x190 [ 1962.058245][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1962.058245][T15699] ip6_route_info_create+0x1441/0x2090 [ 1962.058245][T15699] ip6_route_add+0x48/0x370 [ 1962.058245][T15699] addrconf_add_dev+0x549/0x5f0 [ 1962.058245][T15699] addrconf_init_auto_addrs+0x867/0x10a0 [ 1962.058245][T15699] addrconf_notify+0x15ba/0x1c40 [ 1962.058245][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1962.058245][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1962.058245][T15699] __dev_notify_flags+0x217/0x3b0 [ 1962.058245][T15699] dev_change_flags+0x168/0x1d0 [ 1962.058245][T15699] do_setlink+0x170b/0x7120 [ 1962.058245][T15699] rtnl_newlink+0x329e/0x4200 [ 1962.058245][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1962.058245][T15699] netlink_rcv_skb+0x375/0x650 [ 1962.058245][T15699] rtnetlink_rcv+0x34/0x40 [ 1962.058245][T15699] [ 1962.151251][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1962.151251][T15699] netdev_get_by_index+0xf9/0x190 [ 1962.151251][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1962.151251][T15699] ip6_route_info_create+0x1441/0x2090 [ 1962.151251][T15699] ip6_route_add+0x48/0x370 [ 1962.151251][T15699] addrconf_permanent_addr+0xdef/0x11d0 [ 1962.151251][T15699] addrconf_notify+0xa97/0x1c40 [ 1962.151251][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1962.151251][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1962.151251][T15699] __dev_notify_flags+0x217/0x3b0 [ 1962.151251][T15699] dev_change_flags+0x168/0x1d0 [ 1962.151251][T15699] do_setlink+0x170b/0x7120 [ 1962.151251][T15699] rtnl_newlink+0x329e/0x4200 [ 1962.151251][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1962.151251][T15699] netlink_rcv_skb+0x375/0x650 [ 1962.151251][T15699] rtnetlink_rcv+0x34/0x40 [ 1962.151251][T15699] netlink_unicast+0xf52/0x1260 [ 1962.151251][T15699] [ 1962.244033][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1962.244033][T15699] netdev_get_by_index+0xf9/0x190 [ 1962.244033][T15699] fib6_nh_init+0x1bc/0x2fd0 [ 1962.244033][T15699] ip6_route_info_create+0x1441/0x2090 [ 1962.244033][T15699] addrconf_f6i_alloc+0x33a/0x5f0 [ 1962.244033][T15699] addrconf_permanent_addr+0x2ca/0x11d0 [ 1962.244033][T15699] addrconf_notify+0xa97/0x1c40 [ 1962.244033][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1962.244033][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1962.244033][T15699] __dev_notify_flags+0x217/0x3b0 [ 1962.244033][T15699] dev_change_flags+0x168/0x1d0 [ 1962.244033][T15699] do_setlink+0x170b/0x7120 [ 1962.244033][T15699] rtnl_newlink+0x329e/0x4200 [ 1962.244033][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1962.244033][T15699] netlink_rcv_skb+0x375/0x650 [ 1962.244033][T15699] rtnetlink_rcv+0x34/0x40 [ 1962.244033][T15699] netlink_unicast+0xf52/0x1260 [ 1962.244033][T15699] [ 1962.337335][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1962.337335][T15699] fib_check_nh+0xcc2/0x1b40 [ 1962.337335][T15699] fib_create_info+0x26b5/0x3fd0 [ 1962.337335][T15699] fib_table_insert+0x264/0x3650 [ 1962.337335][T15699] fib_magic+0x424/0x590 [ 1962.337335][T15699] fib_add_ifaddr+0x7a1/0xa10 [ 1962.337335][T15699] fib_netdev_event+0x82e/0xc50 [ 1962.337335][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1962.337335][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1962.337335][T15699] __dev_notify_flags+0x217/0x3b0 [ 1962.337335][T15699] dev_change_flags+0x168/0x1d0 [ 1962.337335][T15699] do_setlink+0x170b/0x7120 [ 1962.337335][T15699] rtnl_newlink+0x329e/0x4200 [ 1962.337335][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1962.337335][T15699] netlink_rcv_skb+0x375/0x650 [ 1962.337335][T15699] rtnetlink_rcv+0x34/0x40 [ 1962.337335][T15699] netlink_unicast+0xf52/0x1260 [ 1962.337335][T15699] [ 1962.428386][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1962.428386][T15699] fib_check_nh+0xcc2/0x1b40 [ 1962.428386][T15699] fib_create_info+0x26b5/0x3fd0 [ 1962.428386][T15699] fib_table_insert+0x264/0x3650 [ 1962.428386][T15699] fib_magic+0x424/0x590 [ 1962.428386][T15699] fib_add_ifaddr+0x6de/0xa10 [ 1962.428386][T15699] fib_netdev_event+0x82e/0xc50 [ 1962.428386][T15699] raw_notifier_call_chain+0xe8/0x440 [ 1962.428386][T15699] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1962.428386][T15699] __dev_notify_flags+0x217/0x3b0 [ 1962.428386][T15699] dev_change_flags+0x168/0x1d0 [ 1962.428386][T15699] do_setlink+0x170b/0x7120 [ 1962.428386][T15699] rtnl_newlink+0x329e/0x4200 [ 1962.428386][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1962.428386][T15699] netlink_rcv_skb+0x375/0x650 [ 1962.428386][T15699] rtnetlink_rcv+0x34/0x40 [ 1962.428386][T15699] netlink_unicast+0xf52/0x1260 [ 1962.428386][T15699] [ 1962.519403][T15699] ref_tracker: syz_tun@ffff888166a14568 has 1/9 users at [ 1962.519403][T15699] netdev_tracker_alloc+0x89/0xb0 [ 1962.519403][T15699] fib_create_info+0x2c63/0x3fd0 [ 1962.519403][T15699] fib_table_insert+0x264/0x3650 [ 1962.519403][T15699] fib_magic+0x424/0x590 [ 1962.519403][T15699] fib_add_ifaddr+0x1bb/0xa10 [ 1962.519403][T15699] fib_inetaddr_event+0x16e/0x5f0 [ 1962.519403][T15699] blocking_notifier_call_chain+0x123/0x4b0 [ 1962.519403][T15699] __inet_insert_ifa+0xdb8/0x1010 [ 1962.519403][T15699] inet_rtm_newaddr+0x1c8a/0x2600 [ 1962.519403][T15699] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1962.519403][T15699] netlink_rcv_skb+0x375/0x650 [ 1962.519403][T15699] rtnetlink_rcv+0x34/0x40 [ 1962.519403][T15699] netlink_unicast+0xf52/0x1260 [ 1962.519403][T15699] netlink_sendmsg+0x10da/0x11e0 [ 1962.519403][T15699] __sock_sendmsg+0x30f/0x380 [ 1962.519403][T15699] __sys_sendto+0x594/0x750 [ 1962.519403][T15699] [ 1979.934731][T16140] Bluetooth: hci35: unexpected cc 0x0c03 length: 249 > 1 [ 1979.943266][T16140] Bluetooth: hci35: unexpected cc 0x1003 length: 249 > 9 [ 1979.988679][T16140] Bluetooth: hci35: unexpected cc 0x1001 length: 249 > 9 [ 1980.031784][T16140] Bluetooth: hci35: unexpected cc 0x0c23 length: 249 > 4 [ 1980.041711][T16140] Bluetooth: hci35: unexpected cc 0x0c25 length: 249 > 3 [ 1980.051158][T16140] Bluetooth: hci35: unexpected cc 0x0c38 length: 249 > 2 [ 1982.149231][T15901] Bluetooth: hci36: unexpected cc 0x0c03 length: 249 > 1 [ 1982.158333][T15901] Bluetooth: hci36: unexpected cc 0x1003 length: 249 > 9 [ 1982.201359][T15901] Bluetooth: hci36: unexpected cc 0x1001 length: 249 > 9 [ 1982.213105][T15901] Bluetooth: hci36: unexpected cc 0x0c23 length: 249 > 4 [ 1982.223215][T15901] Bluetooth: hci36: unexpected cc 0x0c25 length: 249 > 3 [ 1982.231969][T15901] Bluetooth: hci36: unexpected cc 0x0c38 length: 249 > 2 [ 1982.494348][T15901] Bluetooth: hci35: command tx timeout [ 1982.813433][T16390] chnl_net:caif_netlink_parms(): no params data found [ 1983.440716][T16360] Bluetooth: hci37: unexpected cc 0x0c03 length: 249 > 1 [ 1983.452395][T16360] Bluetooth: hci37: unexpected cc 0x1003 length: 249 > 9 [ 1983.462941][T16360] Bluetooth: hci37: unexpected cc 0x1001 length: 249 > 9 [ 1983.568883][T16360] Bluetooth: hci37: unexpected cc 0x0c23 length: 249 > 4 [ 1983.579086][T16360] Bluetooth: hci37: unexpected cc 0x0c25 length: 249 > 3 [ 1983.591515][T16360] Bluetooth: hci37: unexpected cc 0x0c38 length: 249 > 2 [ 1984.484412][ T8707] Bluetooth: hci36: command tx timeout [ 1984.744980][ T8707] Bluetooth: hci35: command tx timeout [ 1984.924062][T16360] Bluetooth: hci27: command 0x0406 tx timeout [ 1984.930579][T16360] Bluetooth: hci28: command 0x0406 tx timeout [ 1984.936792][T16360] Bluetooth: hci29: command 0x0406 tx timeout [ 1985.873631][T16360] Bluetooth: hci37: command tx timeout [ 1986.220316][T10922] bridge_slave_1: left allmulticast mode [ 1986.226122][T10922] bridge_slave_1: left promiscuous mode [ 1986.233244][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.350727][T10922] bridge_slave_0: left allmulticast mode [ 1986.356574][T10922] bridge_slave_0: left promiscuous mode [ 1986.363216][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.790040][T16360] Bluetooth: hci36: command tx timeout [ 1987.027196][T16360] Bluetooth: hci35: command tx timeout [ 1987.594843][T10922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.742035][T10922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.809539][T10922] bond0 (unregistering): Released all slaves [ 1988.198350][T16360] Bluetooth: hci37: command tx timeout [ 1988.308987][T15888] unregister_netdevice: waiting for netdevsim3 to become free. Usage count = 2 [ 1988.318873][T15888] ref_tracker: eth%d@ffff88804fd26568 has 1/1 users at [ 1988.318873][T15888] netdev_get_by_index+0xf9/0x190 [ 1988.318873][T15888] fib6_nh_init+0x1bc/0x2fd0 [ 1988.318873][T15888] ip6_route_info_create+0x1441/0x2090 [ 1988.318873][T15888] addrconf_f6i_alloc+0x33a/0x5f0 [ 1988.318873][T15888] ipv6_add_addr+0x873/0x1450 [ 1988.318873][T15888] addrconf_add_linklocal+0x315/0xa20 [ 1988.318873][T15888] addrconf_addr_gen+0x9dd/0xba0 [ 1988.318873][T15888] addrconf_init_auto_addrs+0xcb3/0x10a0 [ 1988.318873][T15888] addrconf_notify+0x15ba/0x1c40 [ 1988.318873][T15888] raw_notifier_call_chain+0xe8/0x440 [ 1988.318873][T15888] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1988.318873][T15888] __dev_notify_flags+0x217/0x3b0 [ 1988.318873][T15888] dev_change_flags+0x168/0x1d0 [ 1988.318873][T15888] do_setlink+0x170b/0x7120 [ 1988.318873][T15888] rtnl_newlink+0x329e/0x4200 [ 1988.318873][T15888] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1988.318873][T15888] [ 1989.076924][T16360] Bluetooth: hci36: command tx timeout [ 1989.262667][T16360] Bluetooth: hci35: command tx timeout [ 1989.996298][T10922] hsr_slave_0: left promiscuous mode [ 1990.024421][T10922] hsr_slave_1: left promiscuous mode [ 1990.088740][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1990.097402][T10922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1990.192273][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1990.200467][T10922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1990.405950][T16360] Bluetooth: hci37: command tx timeout [ 1990.417735][T10922] veth0_macvtap: left promiscuous mode [ 1990.423719][T10922] veth1_vlan: left promiscuous mode [ 1990.429125][T10922] veth0_vlan: left allmulticast mode [ 1990.434656][T10922] veth0_vlan: left promiscuous mode [ 1991.342424][T16360] Bluetooth: hci36: command tx timeout [ 1992.330208][T10922] team0 (unregistering): Port device team_slave_1 removed [ 1992.439042][T10922] team0 (unregistering): Port device team_slave_0 removed [ 1992.870303][T16360] Bluetooth: hci37: command tx timeout [ 1993.020551][T16403] chnl_net:caif_netlink_parms(): no params data found [ 1993.079475][T16390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.087118][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.095364][T16390] bridge_slave_0: entered allmulticast mode [ 1993.104819][T16390] bridge_slave_0: entered promiscuous mode [ 1993.691583][T16390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.699404][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.731536][T16390] bridge_slave_1: entered allmulticast mode [ 1993.740996][T16390] bridge_slave_1: entered promiscuous mode [ 1993.794859][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1993.801998][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1993.883373][ T5860] kworker/0:5 (5860) used greatest stack depth: 3592 bytes left [ 1994.017448][T16400] chnl_net:caif_netlink_parms(): no params data found [ 1994.627908][T16390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.870451][T16390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1995.546975][T16390] team0: Port device team_slave_0 added [ 1995.771930][T16390] team0: Port device team_slave_1 added [ 1996.082806][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.090532][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.100684][T16403] bridge_slave_0: entered allmulticast mode [ 1996.110460][T16403] bridge_slave_0: entered promiscuous mode [ 1996.317517][T16390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.324613][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.351134][T16390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.447824][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.455326][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1996.465553][T16403] bridge_slave_1: entered allmulticast mode [ 1996.475247][T16403] bridge_slave_1: entered promiscuous mode [ 1996.906776][T16390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.914201][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.958754][T16390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1997.231760][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.239430][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.248114][T16400] bridge_slave_0: entered allmulticast mode [ 1997.283459][T16400] bridge_slave_0: entered promiscuous mode [ 1997.329606][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1997.633753][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1997.655326][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.666136][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.674663][T16400] bridge_slave_1: entered allmulticast mode [ 1997.684160][T16400] bridge_slave_1: entered promiscuous mode [ 1997.991209][T16390] hsr_slave_0: entered promiscuous mode [ 1998.105739][T16390] hsr_slave_1: entered promiscuous mode [ 1998.160742][T16390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1998.168625][T16390] Cannot create hsr debugfs directory [ 1998.578421][T16403] team0: Port device team_slave_0 added [ 1998.759494][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1998.777913][T16403] team0: Port device team_slave_1 added [ 1999.209482][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1999.540023][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1999.547567][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1999.574167][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1999.793977][T16400] team0: Port device team_slave_0 added [ 1999.861560][T16400] team0: Port device team_slave_1 added [ 1999.960281][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1999.967650][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1999.993976][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2000.421648][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2000.428734][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2000.455502][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2000.886721][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2000.894085][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2000.938238][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.018013][T16403] hsr_slave_0: entered promiscuous mode [ 2001.163443][T16403] hsr_slave_1: entered promiscuous mode [ 2001.234096][T16403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2001.241811][T16403] Cannot create hsr debugfs directory [ 2002.017256][T16400] hsr_slave_0: entered promiscuous mode [ 2002.161455][T16400] hsr_slave_1: entered promiscuous mode [ 2002.204361][T16400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2002.212233][T16400] Cannot create hsr debugfs directory [ 2023.764616][T16360] Bluetooth: hci30: command 0x0406 tx timeout [ 2025.624693][T16140] Bluetooth: hci38: unexpected cc 0x0c03 length: 249 > 1 [ 2025.634813][T16140] Bluetooth: hci38: unexpected cc 0x1003 length: 249 > 9 [ 2025.652367][T16140] Bluetooth: hci38: unexpected cc 0x1001 length: 249 > 9 [ 2025.688731][T16140] Bluetooth: hci38: unexpected cc 0x0c23 length: 249 > 4 [ 2025.698702][T16140] Bluetooth: hci38: unexpected cc 0x0c25 length: 249 > 3 [ 2025.708747][T16140] Bluetooth: hci38: unexpected cc 0x0c38 length: 249 > 2 [ 2028.012891][T16140] Bluetooth: hci38: command tx timeout [ 2028.240413][T16421] chnl_net:caif_netlink_parms(): no params data found [ 2030.264125][T16140] Bluetooth: hci38: command tx timeout [ 2030.342568][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 2030.350272][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.358785][T16421] bridge_slave_0: entered allmulticast mode [ 2030.368555][T16421] bridge_slave_0: entered promiscuous mode [ 2030.643811][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2030.675941][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.684728][T16421] bridge_slave_1: entered allmulticast mode [ 2030.694430][T16421] bridge_slave_1: entered promiscuous mode [ 2031.478067][T16421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.628569][T16421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2032.179871][T16421] team0: Port device team_slave_0 added [ 2032.304339][T16421] team0: Port device team_slave_1 added [ 2032.504566][T16140] Bluetooth: hci38: command tx timeout [ 2032.839109][T16421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.846210][T16421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.890981][T16421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2033.267145][T16421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2033.274519][T16421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2033.302305][T16421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2034.066389][T16421] hsr_slave_0: entered promiscuous mode [ 2034.183143][T16421] hsr_slave_1: entered promiscuous mode [ 2034.271815][T16421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2034.279815][T16421] Cannot create hsr debugfs directory [ 2034.783282][T16140] Bluetooth: hci38: command tx timeout [ 2051.533668][T16140] Bluetooth: hci31: command 0x0406 tx timeout [ 2051.541936][T16360] Bluetooth: hci32: command 0x0406 tx timeout [ 2051.572062][T16140] Bluetooth: hci33: command 0x0406 tx timeout [ 2060.449164][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2060.455882][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2084.784059][T13552] Bluetooth: hci34: command 0x0406 tx timeout [ 2107.238964][ T5784] ===================================================== [ 2107.246241][ T5784] BUG: KMSAN: uninit-value in sw842_decompress+0x7d4/0x24c0 [ 2107.253924][ T5784] sw842_decompress+0x7d4/0x24c0 [ 2107.259164][ T5784] crypto842_sdecompress+0x45/0x60 [ 2107.264428][ T5784] scomp_acomp_comp_decomp+0x7c6/0xb90 [ 2107.270208][ T5784] scomp_acomp_decompress+0x2f/0x40 [ 2107.275514][ T5784] zswap_decompress+0x5ff/0xa30 [ 2107.280601][ T5784] zswap_load+0x2b7/0x5c0 [ 2107.285015][ T5784] swap_read_folio+0x6c6/0x2ac0 [ 2107.290099][ T5784] swap_cluster_readahead+0xb48/0xbd0 [ 2107.295775][ T5784] swapin_readahead+0x205/0x1690 [ 2107.301009][ T5784] do_swap_page+0xade/0x9b20 [ 2107.305748][ T5784] handle_mm_fault+0x3f29/0xdca0 [ 2107.331566][ T5784] exc_page_fault+0x29f/0x700 [ 2107.342049][ T5784] asm_exc_page_fault+0x2b/0x30 [ 2107.348364][ T5784] compat_put_bitmap+0x133/0x390 [ 2107.353444][ T5784] compat_core_sys_select+0x98b/0xe20 [ 2107.359184][ T5784] do_compat_pselect+0x50e/0x5c0 [ 2107.364224][ T5784] __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 2107.370828][ T5784] ia32_sys_call+0x1b34/0x4180 [ 2107.375733][ T5784] __do_fast_syscall_32+0xb0/0x110 [ 2107.381087][ T5784] do_fast_syscall_32+0x38/0x80 [ 2107.386022][ T5784] do_SYSENTER_32+0x1f/0x30 [ 2107.390823][ T5784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2107.397281][ T5784] [ 2107.399798][ T5784] Uninit was stored to memory at: [ 2107.404936][ T5784] next_bits+0xd7a/0xe20 [ 2107.409432][ T5784] sw842_decompress+0x1c3/0x24c0 [ 2107.414482][ T5784] crypto842_sdecompress+0x45/0x60 [ 2107.419713][ T5784] scomp_acomp_comp_decomp+0x7c6/0xb90 [ 2107.446168][ T5784] scomp_acomp_decompress+0x2f/0x40 [ 2107.457047][ T5784] zswap_decompress+0x5ff/0xa30 [ 2107.462001][ T5784] zswap_load+0x2b7/0x5c0 [ 2107.466685][ T5784] swap_read_folio+0x6c6/0x2ac0 [ 2107.471624][ T5784] swap_cluster_readahead+0xb48/0xbd0 [ 2107.485616][ T5784] swapin_readahead+0x205/0x1690 [ 2107.490658][ T5784] do_swap_page+0xade/0x9b20 [ 2107.496988][ T5784] handle_mm_fault+0x3f29/0xdca0 [ 2107.502045][ T5784] exc_page_fault+0x29f/0x700 [ 2107.507098][ T5784] asm_exc_page_fault+0x2b/0x30 [ 2107.512055][ T5784] [ 2107.514426][ T5784] Uninit was created at: [ 2107.518957][ T5784] __alloc_pages_noprof+0x9a7/0xe00 [ 2107.524269][ T5784] alloc_pages_mpol_noprof+0x299/0x990 [ 2107.530000][ T5784] alloc_pages_noprof+0x1bf/0x1e0 [ 2107.556657][ T5784] z3fold_zpool_malloc+0x78f/0x1990 [ 2107.567579][ T5784] zpool_malloc+0x85/0xb0 [ 2107.572188][ T5784] zswap_store+0x1f20/0x3650 [ 2107.576900][ T5784] swap_writepage+0xa67/0x17f0 [ 2107.581762][ T5784] shrink_folio_list+0x5e7f/0x7dd0 [ 2107.587206][ T5784] evict_folios+0x9813/0xbaf0 [ 2107.591980][ T5784] try_to_shrink_lruvec+0x13a3/0x1750 [ 2107.597722][ T5784] shrink_one+0x646/0xd20 [ 2107.602179][ T5784] shrink_node+0x451b/0x5170 [ 2107.607092][ T5784] do_try_to_free_pages+0x820/0x2550 [ 2107.612477][ T5784] try_to_free_pages+0xbed/0x17c0 [ 2107.617774][ T5784] __alloc_pages_direct_reclaim+0x107/0x330 [ 2107.623765][ T5784] __alloc_pages_slowpath+0x995/0x16e0 [ 2107.629542][ T5784] __alloc_pages_noprof+0xa4c/0xe00 [ 2107.634851][ T5784] alloc_pages_mpol_noprof+0x299/0x990 [ 2107.640584][ T5784] alloc_pages_noprof+0x1bf/0x1e0 [ 2107.667058][ T5784] __vmalloc_node_range_noprof+0x1030/0x2740 [ 2107.680443][ T5784] vmalloc_user_noprof+0x90/0xb0 [ 2107.685518][ T5784] kcov_ioctl+0x5a/0x660 [ 2107.690296][ T5784] __se_compat_sys_ioctl+0x80f/0x1020 [ 2107.695920][ T5784] __ia32_compat_sys_ioctl+0x93/0xe0 [ 2107.701354][ T5784] ia32_sys_call+0x2226/0x4180 [ 2107.706360][ T5784] __do_fast_syscall_32+0xb0/0x110 [ 2107.711592][ T5784] do_fast_syscall_32+0x38/0x80 [ 2107.716721][ T5784] do_SYSENTER_32+0x1f/0x30 [ 2107.721311][ T5784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2107.727950][ T5784] [ 2107.730342][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz-executor Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 2107.741122][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2107.751416][ T5784] ===================================================== [ 2107.778945][ T5784] Disabling lock debugging due to kernel taint [ 2107.785176][ T5784] Kernel panic - not syncing: kmsan.panic set ... [ 2107.791667][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz-executor Tainted: G B 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 2107.803760][ T5784] Tainted: [B]=BAD_PAGE [ 2107.807959][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2107.818093][ T5784] Call Trace: [ 2107.821437][ T5784] [ 2107.824423][ T5784] dump_stack_lvl+0x216/0x2d0 [ 2107.829196][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2107.835146][ T5784] dump_stack+0x1e/0x30 [ 2107.839395][ T5784] panic+0x4e2/0xcf0 [ 2107.843492][ T5784] ? kmsan_get_metadata+0xc1/0x1c0 [ 2107.848725][ T5784] kmsan_report+0x2c7/0x2d0 [ 2107.853344][ T5784] ? zswap_load+0x2b7/0x5c0 [ 2107.857940][ T5784] ? asm_exc_page_fault+0x2b/0x30 [ 2107.863075][ T5784] ? do_compat_pselect+0x4e0/0x5c0 [ 2107.868326][ T5784] ? __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 2107.874978][ T5784] ? ia32_sys_call+0x1b34/0x4180 [ 2107.880072][ T5784] ? __do_fast_syscall_32+0xb0/0x110 [ 2107.885458][ T5784] ? do_fast_syscall_32+0x38/0x80 [ 2107.890576][ T5784] ? do_SYSENTER_32+0x1f/0x30 [ 2107.895340][ T5784] ? __msan_warning+0x95/0x120 [ 2107.900221][ T5784] ? sw842_decompress+0x7d4/0x24c0 [ 2107.905448][ T5784] ? crypto842_sdecompress+0x45/0x60 [ 2107.910850][ T5784] ? scomp_acomp_comp_decomp+0x7c6/0xb90 [ 2107.916597][ T5784] ? scomp_acomp_decompress+0x2f/0x40 [ 2107.922083][ T5784] ? zswap_decompress+0x5ff/0xa30 [ 2107.927194][ T5784] ? zswap_load+0x2b7/0x5c0 [ 2107.931779][ T5784] ? swap_read_folio+0x6c6/0x2ac0 [ 2107.936893][ T5784] ? swap_cluster_readahead+0xb48/0xbd0 [ 2107.942562][ T5784] ? swapin_readahead+0x205/0x1690 [ 2107.947773][ T5784] ? do_swap_page+0xade/0x9b20 [ 2107.952656][ T5784] ? handle_mm_fault+0x3f29/0xdca0 [ 2107.957889][ T5784] ? exc_page_fault+0x29f/0x700 [ 2107.962878][ T5784] ? asm_exc_page_fault+0x2b/0x30 [ 2107.968014][ T5784] ? compat_put_bitmap+0x133/0x390 [ 2107.973236][ T5784] ? compat_core_sys_select+0x98b/0xe20 [ 2107.978918][ T5784] ? do_compat_pselect+0x50e/0x5c0 [ 2107.984137][ T5784] ? __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 2107.990748][ T5784] ? ia32_sys_call+0x1b34/0x4180 [ 2107.995805][ T5784] ? __do_fast_syscall_32+0xb0/0x110 [ 2108.001191][ T5784] ? do_fast_syscall_32+0x38/0x80 [ 2108.006314][ T5784] ? do_SYSENTER_32+0x1f/0x30 [ 2108.011090][ T5784] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2108.017725][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.023639][ T5784] ? sw842_decompress+0x1189/0x24c0 [ 2108.028958][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.034260][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.040182][ T5784] ? next_bits+0xd26/0xe20 [ 2108.044712][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.050014][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.055929][ T5784] __msan_warning+0x95/0x120 [ 2108.060608][ T5784] sw842_decompress+0x7d4/0x24c0 [ 2108.065684][ T5784] crypto842_sdecompress+0x45/0x60 [ 2108.070908][ T5784] ? __pfx_crypto842_sdecompress+0x10/0x10 [ 2108.076830][ T5784] scomp_acomp_comp_decomp+0x7c6/0xb90 [ 2108.082464][ T5784] scomp_acomp_decompress+0x2f/0x40 [ 2108.087854][ T5784] ? __pfx_scomp_acomp_decompress+0x10/0x10 [ 2108.093932][ T5784] zswap_decompress+0x5ff/0xa30 [ 2108.098889][ T5784] zswap_load+0x2b7/0x5c0 [ 2108.103308][ T5784] swap_read_folio+0x6c6/0x2ac0 [ 2108.108259][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.113572][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.119490][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.124791][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.130730][ T5784] swap_cluster_readahead+0xb48/0xbd0 [ 2108.136229][ T5784] swapin_readahead+0x205/0x1690 [ 2108.141273][ T5784] ? __filemap_get_folio+0x123a/0x1550 [ 2108.146881][ T5784] ? do_swap_page+0x6f/0x9b20 [ 2108.151693][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.156998][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.162918][ T5784] do_swap_page+0xade/0x9b20 [ 2108.167632][ T5784] ? __pfx_default_wake_function+0x10/0x10 [ 2108.173551][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.178851][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.184768][ T5784] ? filter_irq_stacks+0x60/0x1a0 [ 2108.189916][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 2108.195223][ T5784] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2108.201669][ T5784] handle_mm_fault+0x3f29/0xdca0 [ 2108.206739][ T5784] ? mt_find+0x1663/0x1910 [ 2108.211364][ T5784] exc_page_fault+0x29f/0x700 [ 2108.216170][ T5784] asm_exc_page_fault+0x2b/0x30 [ 2108.221138][ T5784] RIP: 0010:compat_put_bitmap+0x133/0x390 [ 2108.226979][ T5784] Code: 89 df e8 30 62 aa 00 44 89 20 45 85 e4 0f 85 d2 00 00 00 44 89 6d c4 45 85 e4 0f 85 d7 00 00 00 b0 01 84 c0 0f 84 da 00 00 00 <45> 89 2e b0 01 84 c0 0f 84 d9 00 00 00 ba 04 00 00 00 4c 89 f7 48 [ 2108.246703][ T5784] RSP: 0018:ffff88811a60faa0 EFLAGS: 00050202 [ 2108.252863][ T5784] RAX: ffff888119e0fa01 RBX: ffff88811a60fab4 RCX: 000000011a20fab4 [ 2108.260917][ T5784] RDX: ffff88811a20fab4 RSI: ffff88813fffacf0 RDI: ffff88811a60fab4 [ 2108.268972][ T5784] RBP: ffff88811a60faf0 R08: ffffea000000000f R09: 0000000000000004 [ 2108.277030][ T5784] R10: ffff888119e0fab4 R11: 0000000000000004 R12: 0000000000000000 [ 2108.285076][ T5784] R13: 0000000000000000 R14: 00000000ffd03614 R15: ffff88811a60fbe8 [ 2108.293147][ T5784] compat_core_sys_select+0x98b/0xe20 [ 2108.298659][ T5784] ? set_compat_user_sigmask+0x3d/0x320 [ 2108.304356][ T5784] ? do_compat_pselect+0x48a/0x5c0 [ 2108.309603][ T5784] ? set_compat_user_sigmask+0xcc/0x320 [ 2108.315359][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2108.321285][ T5784] do_compat_pselect+0x50e/0x5c0 [ 2108.326383][ T5784] __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 2108.332842][ T5784] ia32_sys_call+0x1b34/0x4180 [ 2108.337732][ T5784] __do_fast_syscall_32+0xb0/0x110 [ 2108.342971][ T5784] ? irqentry_exit+0x16/0x60 [ 2108.347689][ T5784] do_fast_syscall_32+0x38/0x80 [ 2108.352633][ T5784] do_SYSENTER_32+0x1f/0x30 [ 2108.357226][ T5784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2108.363696][ T5784] RIP: 0023:0xf746d579 [ 2108.367850][ T5784] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2108.387570][ T5784] RSP: 002b:00000000ffd03400 EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 2108.396086][ T5784] RAX: ffffffffffffffda RBX: 0000000000000026 RCX: 00000000ffd03614 [ 2108.404133][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffd03430 [ 2108.412179][ T5784] RBP: 00000000ffd03444 R08: 0000000000000000 R09: 0000000000000000 [ 2108.420255][ T5784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2108.428366][ T5784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2108.436440][ T5784] [ 2108.439811][ T5784] Kernel Offset: disabled [ 2108.444228][ T5784] Rebooting in 86400 seconds..