last executing test programs: 24m9.228837562s ago: executing program 32 (id=1213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000940)}, 0xc811) getegid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)="86", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4f26, 0xfffffffd, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff000101"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=ANY=[@ANYBLOB="05000000110077fd05000000fddbdf25ac14142f000000000000000000000000000004d20200ff00"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023893) recvmmsg(r4, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000003780)=""/4078, 0xfee}, 0x4}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7d00fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r8 = syz_usb_connect(0x3, 0x48, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRES8=r5, @ANYRES8, @ANYRES64=0x0, @ANYBLOB], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) 22m15.671927953s ago: executing program 33 (id=1504): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000031637f00"/16], 0x48) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 21m48.790099631s ago: executing program 34 (id=1632): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="ac6c101a", 0x4}], 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000006c0)={0x100, 0x3136564e, 0x2, @stepwise={0x1000, 0x6, 0x0, 0x7, 0x0, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) 20m55.225319127s ago: executing program 35 (id=1735): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 20m19.228420428s ago: executing program 36 (id=1822): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 18m44.184637163s ago: executing program 37 (id=2139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000010101020000000000000000070000de0800154000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc044) 18m41.942700883s ago: executing program 38 (id=2154): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="00218500000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 18m39.306693057s ago: executing program 39 (id=2167): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000340)={[{@uid}, {@mode={'mode', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0xffff}}, {@noadinicb}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000009100)="$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") ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x301}, {0xffffffffffffffff, 0x20}], 0x4, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x8) 18m32.381298054s ago: executing program 40 (id=2181): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="003104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x20, 0x12, 0x4, "b4f49dbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a80)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m50.89573772s ago: executing program 41 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'}) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r6 = fanotify_init(0x10, 0x181000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, &(0x7f0000000b40)=""/31}, 0x20) 17m49.378636687s ago: executing program 42 (id=2314): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) truncate(&(0x7f0000000000)='./file0/file1\x00', 0x1) 17m45.170664452s ago: executing program 6 (id=2364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 17m37.902841526s ago: executing program 6 (id=2376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 17m36.888260549s ago: executing program 6 (id=2379): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) 17m33.907913632s ago: executing program 43 (id=2353): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000380)=0x2000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xa}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 17m21.159748072s ago: executing program 44 (id=2379): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) 17m4.364734305s ago: executing program 45 (id=2401): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abdc2e2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000200)={0x20, 0x7, 0x4, "af115bb3"}, 0x0, 0x0, 0x0, 0x0}) 16m7.662535913s ago: executing program 46 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=r4]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 15m51.486092917s ago: executing program 47 (id=2499): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 15m37.906831762s ago: executing program 48 (id=2521): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021240000140012800b000100625069646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80001}, 0x20000800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x16408b, &(0x7f0000000300)={[], [{@audit}]}, 0x1, 0x7b2, &(0x7f0000000640)="$eJzs3c9rG1ceAPDvyL9iJ7v2wkI2ezIs7BpC5HXWm+xCDyk9lEIDgfbcxMiKSS1bwZJDbAxJKIVeCm3podBSyLk/0luv/XFt/4seSkLaOqEpPRSV0Q9HjiXHTizJ1J8PjOe9eTN+76t5M/OkGaQADqzx9E8m4lhEvJVEjNaXJxExUE31R5yprfdgfS2XTklUKi/9mFTXub++loumbVKH65m/RcRXr0ccz2ytt7SyOj9TKOSX6vnJ8sLlydLK6olLCzNz+bn84qmp6emTp/97+tTexfrzt6tH7rz9/L8+PfPra0dvvfl1EmfiSL2sOY69Mh7j9ddkIH0JN3luryvrsaTXDeCJpIdmX+0oj2MxGn3VVBvD3WwZANAp1yKiAgAcMInrPwAcMI3PAe6vr+UaU28/keiuu89GxKFa/I37m7WS/vo9u0PV+6Aj95NNd0aSiBjbg/rHI+KDz1/5OJ2iQ/chAVq5fiMiLoyNbz3/J1ueWditf29XWBmqzsYfWez8B93zRTr++V+r8V9mY/wTLcY/Qy2O3Sfx+OM/c3sPqmkrHf890/Rs24Om+OvG+uq5P1XHfAPJxUuFfHpu+3NETMTAUJqfqq7a+imoiXu/3WtXf/P476d3Xv0orT+d10o/HGy1zexMeebpon7o7o2Iv/e3ij/Z2P9Jm/HvuR3W8cL/33i/XVkafxpvY9ocf+dVbkb8s7H/RzfH35Bs+3ziZLU7TDY6RQuffffeSLv6H+7/oeo8rb/xXqAb0v0/0rL/b8Q/ljQ/r1nafR3f3Bz9sl1Zc/9vHX/mdv/Q5m3S/j+YvFxNNw6QqzPl8tJUxGDy4tblJx9u28g31k/jn/hH6+O/Xf/P1J+NvbCR217/nR8+qf+rlvHH0XQg1i7+zkrjn93V/t8mUalv80jRrQfzfe3q39n+n66mJupLdnL+e0xLn6I3AwAAAAAAAAAAAAAAAAAAAAAAAMDuZSLiSCSZ7EY6k8lma7/h/dcYyRSKpfLxi8Xlxdmo/lb2WAxkGl91Odr0fahT9e/Db+RPPpL/T0T8JSLeHRqu5rO5YmG218EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3hzb//fy2dZbO1su+Het06AKBjDvW6AQBA17n+A8DBs7vr/3DH2gEAdM+u3/9Xks40BADomh1f/y90th0AQPe4/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTt7Np0qv6yv5dL87JWV5fnilROz+dJ8dmE5l80Vly5n54rFuUI+mysutP1H12uzQrF4eToWl69OlvOl8mRpZfX8QnF5sXz+0sLMXP58fqBrkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzpVWVudnCoX8ksS2ieH90Yx9k+iPfdGMP3xisGe1N58lhnt3ggIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY534PAAD//wjUJCQ=") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f00000c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0xfffff000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x160) r3 = fanotify_init(0x81, 0x0) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x3f, 0x0, 0x4) read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x2020) mbind(&(0x7f00008f6000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x5, 0x4b3, {0x3, 0x7}, {0x5, 0x9c8}, @rumble={0x5c, 0x80}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macvlan1\x00'}) rename(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xc, 0x0, 0xffffffffffffffff, r5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 13m26.438753254s ago: executing program 7 (id=2735): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000009}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 13m25.299489679s ago: executing program 7 (id=2739): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 13m23.79204446s ago: executing program 7 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000001180)={0x80000000}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m22.190504251s ago: executing program 7 (id=2744): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) 13m20.594786577s ago: executing program 7 (id=2748): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 13m19.586960957s ago: executing program 7 (id=2751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 13m3.951780059s ago: executing program 49 (id=2751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 10m12.031174172s ago: executing program 5 (id=3044): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 10m10.451094426s ago: executing program 5 (id=3049): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 10m8.403545405s ago: executing program 5 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r10, 0x851, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 10m3.902336556s ago: executing program 8 (id=3059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_write\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, 0x0) 10m2.757998158s ago: executing program 5 (id=3061): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 10m1.058730105s ago: executing program 5 (id=3064): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 10m0.396586379s ago: executing program 8 (id=3065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20004804) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) 9m59.838713376s ago: executing program 5 (id=3066): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, 0xffffffffffffffff, 0x0) 9m56.686007841s ago: executing program 8 (id=3069): pipe(0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0x0) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 9m56.122744371s ago: executing program 8 (id=3070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r10, 0x851, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9m52.596128792s ago: executing program 8 (id=3076): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 9m51.57902526s ago: executing program 8 (id=3078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20004804) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) 9m45.215465936s ago: executing program 6 (id=2543): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000009}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) select(0x40, &(0x7f00000000c0)={0x6, 0x81, 0x800000000000000, 0x8, 0x6, 0x8b0, 0xb9}, 0x0, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9m44.029550389s ago: executing program 50 (id=3066): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, 0xffffffffffffffff, 0x0) 9m43.997406675s ago: executing program 6 (id=3087): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 9m42.925749034s ago: executing program 6 (id=3089): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9m35.713416452s ago: executing program 51 (id=3078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20004804) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) 9m27.356287425s ago: executing program 52 (id=3089): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7m29.402382894s ago: executing program 9 (id=3299): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7m25.648429368s ago: executing program 9 (id=3307): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 7m19.516180157s ago: executing program 9 (id=3315): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 7m15.927404574s ago: executing program 9 (id=3322): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r5 = fanotify_init(0x10, 0x181000) fanotify_mark(r5, 0x1, 0x40001019, r4, 0x0) preadv(r4, &(0x7f0000001600), 0x0, 0x7, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r6}, 0x38) 7m13.8209165s ago: executing program 9 (id=3323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 7m10.159988956s ago: executing program 9 (id=3327): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 6m53.882170157s ago: executing program 53 (id=3327): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 6m41.221866122s ago: executing program 3 (id=3366): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r7, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 6m38.743221539s ago: executing program 3 (id=3370): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r7, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 6m34.037510715s ago: executing program 3 (id=3374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {}]}, 0x1e7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) fspick(r0, 0x0, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 6m29.8222445s ago: executing program 3 (id=3378): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) close_range(r3, 0xffffffffffffffff, 0x0) 6m28.047841612s ago: executing program 3 (id=3382): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$bt_hci(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) close_range(r3, 0xffffffffffffffff, 0x0) 6m24.844504073s ago: executing program 3 (id=3387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r10, 0x851, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6m9.198235411s ago: executing program 54 (id=3387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r10, 0x851, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 19.990631551s ago: executing program 4 (id=3875): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 18.447822547s ago: executing program 4 (id=3877): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 15.936566372s ago: executing program 4 (id=3879): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 13.214789983s ago: executing program 0 (id=3882): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 11.122959896s ago: executing program 2 (id=3886): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 10.864044558s ago: executing program 0 (id=3887): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'}) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r6 = fanotify_init(0x10, 0x181000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20) 9.956750526s ago: executing program 1 (id=3888): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.652082826s ago: executing program 0 (id=3889): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021240000140012800b000100625069646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80001}, 0x20000800) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x16408b, &(0x7f0000000300)={[], [{@audit}]}, 0x1, 0x7b2, &(0x7f0000000640)="$eJzs3c9rG1ceAPDvyL9iJ7v2wkI2ezIs7BpC5HXWm+xCDyk9lEIDgfbcxMiKSS1bwZJDbAxJKIVeCm3podBSyLk/0luv/XFt/4seSkLaOqEpPRSV0Q9HjiXHTizJ1J8PjOe9eTN+76t5M/OkGaQADqzx9E8m4lhEvJVEjNaXJxExUE31R5yprfdgfS2XTklUKi/9mFTXub++loumbVKH65m/RcRXr0ccz2ytt7SyOj9TKOSX6vnJ8sLlydLK6olLCzNz+bn84qmp6emTp/97+tTexfrzt6tH7rz9/L8+PfPra0dvvfl1EmfiSL2sOY69Mh7j9ddkIH0JN3luryvrsaTXDeCJpIdmX+0oj2MxGn3VVBvD3WwZANAp1yKiAgAcMInrPwAcMI3PAe6vr+UaU28/keiuu89GxKFa/I37m7WS/vo9u0PV+6Aj95NNd0aSiBjbg/rHI+KDz1/5OJ2iQ/chAVq5fiMiLoyNbz3/J1ueWditf29XWBmqzsYfWez8B93zRTr++V+r8V9mY/wTLcY/Qy2O3Sfx+OM/c3sPqmkrHf890/Rs24Om+OvG+uq5P1XHfAPJxUuFfHpu+3NETMTAUJqfqq7a+imoiXu/3WtXf/P476d3Xv0orT+d10o/HGy1zexMeebpon7o7o2Iv/e3ij/Z2P9Jm/HvuR3W8cL/33i/XVkafxpvY9ocf+dVbkb8s7H/RzfH35Bs+3ziZLU7TDY6RQuffffeSLv6H+7/oeo8rb/xXqAb0v0/0rL/b8Q/ljQ/r1nafR3f3Bz9sl1Zc/9vHX/mdv/Q5m3S/j+YvFxNNw6QqzPl8tJUxGDy4tblJx9u28g31k/jn/hH6+O/Xf/P1J+NvbCR217/nR8+qf+rlvHH0XQg1i7+zkrjn93V/t8mUalv80jRrQfzfe3q39n+n66mJupLdnL+e0xLn6I3AwAAAAAAAAAAAAAAAAAAAAAAAMDuZSLiSCSZ7EY6k8lma7/h/dcYyRSKpfLxi8Xlxdmo/lb2WAxkGl91Odr0fahT9e/Db+RPPpL/T0T8JSLeHRqu5rO5YmG218EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3hzb//fy2dZbO1su+Het06AKBjDvW6AQBA17n+A8DBs7vr/3DH2gEAdM+u3/9Xks40BADomh1f/y90th0AQPe4/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTt7Np0qv6yv5dL87JWV5fnilROz+dJ8dmE5l80Vly5n54rFuUI+mysutP1H12uzQrF4eToWl69OlvOl8mRpZfX8QnF5sXz+0sLMXP58fqBrkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzpVWVudnCoX8ksS2ieH90Yx9k+iPfdGMP3xisGe1N58lhnt3ggIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY534PAAD//wjUJCQ=") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f00000c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xfffff000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x160) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x3f, 0x0, 0x4) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) mbind(&(0x7f00008f6000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x5, 0x4b3, {0x3, 0x7}, {0x5, 0x9c8}, @rumble={0x5c, 0x80}}) rename(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 8.151251531s ago: executing program 2 (id=3890): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) 8.13794073s ago: executing program 4 (id=3891): socket$kcm(0x29, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 8.107179388s ago: executing program 1 (id=3892): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'}) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r6 = fanotify_init(0x10, 0x181000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r7}, 0x38) 6.6445551s ago: executing program 2 (id=3893): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 6.23552069s ago: executing program 0 (id=3894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r3, 0x0, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=r5]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) 4.987271187s ago: executing program 0 (id=3895): socket$kcm(0x29, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 4.514030476s ago: executing program 1 (id=3896): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021240000140012800b000100625069646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80001}, 0x20000800) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x16408b, &(0x7f0000000300)={[], [{@audit}]}, 0x1, 0x7b2, &(0x7f0000000640)="$eJzs3c9rG1ceAPDvyL9iJ7v2wkI2ezIs7BpC5HXWm+xCDyk9lEIDgfbcxMiKSS1bwZJDbAxJKIVeCm3podBSyLk/0luv/XFt/4seSkLaOqEpPRSV0Q9HjiXHTizJ1J8PjOe9eTN+76t5M/OkGaQADqzx9E8m4lhEvJVEjNaXJxExUE31R5yprfdgfS2XTklUKi/9mFTXub++loumbVKH65m/RcRXr0ccz2ytt7SyOj9TKOSX6vnJ8sLlydLK6olLCzNz+bn84qmp6emTp/97+tTexfrzt6tH7rz9/L8+PfPra0dvvfl1EmfiSL2sOY69Mh7j9ddkIH0JN3luryvrsaTXDeCJpIdmX+0oj2MxGn3VVBvD3WwZANAp1yKiAgAcMInrPwAcMI3PAe6vr+UaU28/keiuu89GxKFa/I37m7WS/vo9u0PV+6Aj95NNd0aSiBjbg/rHI+KDz1/5OJ2iQ/chAVq5fiMiLoyNbz3/J1ueWditf29XWBmqzsYfWez8B93zRTr++V+r8V9mY/wTLcY/Qy2O3Sfx+OM/c3sPqmkrHf890/Rs24Om+OvG+uq5P1XHfAPJxUuFfHpu+3NETMTAUJqfqq7a+imoiXu/3WtXf/P476d3Xv0orT+d10o/HGy1zexMeebpon7o7o2Iv/e3ij/Z2P9Jm/HvuR3W8cL/33i/XVkafxpvY9ocf+dVbkb8s7H/RzfH35Bs+3ziZLU7TDY6RQuffffeSLv6H+7/oeo8rb/xXqAb0v0/0rL/b8Q/ljQ/r1nafR3f3Bz9sl1Zc/9vHX/mdv/Q5m3S/j+YvFxNNw6QqzPl8tJUxGDy4tblJx9u28g31k/jn/hH6+O/Xf/P1J+NvbCR217/nR8+qf+rlvHH0XQg1i7+zkrjn93V/t8mUalv80jRrQfzfe3q39n+n66mJupLdnL+e0xLn6I3AwAAAAAAAAAAAAAAAAAAAAAAAMDuZSLiSCSZ7EY6k8lma7/h/dcYyRSKpfLxi8Xlxdmo/lb2WAxkGl91Odr0fahT9e/Db+RPPpL/T0T8JSLeHRqu5rO5YmG218EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3hzb//fy2dZbO1su+Het06AKBjDvW6AQBA17n+A8DBs7vr/3DH2gEAdM+u3/9Xks40BADomh1f/y90th0AQPe4/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTt7Np0qv6yv5dL87JWV5fnilROz+dJ8dmE5l80Vly5n54rFuUI+mysutP1H12uzQrF4eToWl69OlvOl8mRpZfX8QnF5sXz+0sLMXP58fqBrkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzpVWVudnCoX8ksS2ieH90Yx9k+iPfdGMP3xisGe1N58lhnt3ggIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY534PAAD//wjUJCQ=") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f00000c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xfffff000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x160) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x3f, 0x0, 0x4) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) mbind(&(0x7f00008f6000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x5, 0x4b3, {0x3, 0x7}, {0x5, 0x9c8}, @rumble={0x5c, 0x80}}) rename(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 4.513227819s ago: executing program 2 (id=3897): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021240000140012800b000100625069646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80001}, 0x20000800) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x16408b, &(0x7f0000000300)={[], [{@audit}]}, 0x1, 0x7b2, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f00000c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xfffff000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x160) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x3f, 0x0, 0x4) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) mbind(&(0x7f00008f6000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) rename(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 3.814661538s ago: executing program 1 (id=3898): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r7, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 3.805959796s ago: executing program 2 (id=3899): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'}) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r6 = fanotify_init(0x10, 0x181000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20) 1.421655237s ago: executing program 1 (id=3900): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r7, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 1.408426934s ago: executing program 2 (id=3901): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r7, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 1.407412969s ago: executing program 4 (id=3902): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021240000140012800b000100625069646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80001}, 0x20000800) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x16408b, &(0x7f0000000300)={[], [{@audit}]}, 0x1, 0x7b2, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f00000c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xfffff000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x160) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x3f, 0x0, 0x4) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) mbind(&(0x7f00008f6000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) rename(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 159.83413ms ago: executing program 1 (id=3903): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r7, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"]) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 62.646866ms ago: executing program 0 (id=3904): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 0s ago: executing program 4 (id=3905): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): e_slave_0) entered disabled state [ 1359.833470][ T5160] Bluetooth: hci0: command tx timeout [ 1360.284726][T11549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.296439][T11549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.307918][T11549] bond0 (unregistering): Released all slaves [ 1361.912973][ T5160] Bluetooth: hci0: command tx timeout [ 1362.152643][T11549] hsr_slave_0: left promiscuous mode [ 1362.168261][T11549] hsr_slave_1: left promiscuous mode [ 1362.174754][T11549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.184260][T11549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.001771][T11549] team0 (unregistering): Port device team_slave_1 removed [ 1363.121735][T11549] team0 (unregistering): Port device team_slave_0 removed [ 1363.992524][ T5160] Bluetooth: hci0: command tx timeout [ 1364.841174][T18534] can0: slcan on ttyS3. [ 1366.118879][ T5160] Bluetooth: hci0: command tx timeout [ 1366.541460][T18534] can0 (unregistered): slcan off ttyS3. [ 1366.890064][T18475] chnl_net:caif_netlink_parms(): no params data found [ 1368.996849][T18558] can0: slcan on ttyS3. [ 1369.042128][T18475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.050372][T18475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.062025][T18475] bridge_slave_0: entered allmulticast mode [ 1369.070252][T18475] bridge_slave_0: entered promiscuous mode [ 1369.076624][T18558] can0 (unregistered): slcan off ttyS3. [ 1369.080187][T18475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.090200][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.097514][T18475] bridge_slave_1: entered allmulticast mode [ 1369.105673][T18475] bridge_slave_1: entered promiscuous mode [ 1369.126958][T18561] can0: slcan on ttyS3. [ 1369.254677][T18475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.291028][T18475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.469612][T18475] team0: Port device team_slave_0 added [ 1369.521208][T18475] team0: Port device team_slave_1 added [ 1369.643484][T18475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.657428][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.711854][T18475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.731945][T18475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.739382][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.772280][T18475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.876931][T18475] hsr_slave_0: entered promiscuous mode [ 1369.890012][T18475] hsr_slave_1: entered promiscuous mode [ 1369.899295][T18475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1369.911913][T18475] Cannot create hsr debugfs directory [ 1370.216594][T18556] can0 (unregistered): slcan off ttyS3. [ 1370.507661][T18222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1370.520284][T18222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1370.821863][T18222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1370.848374][T18222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1371.199316][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.206603][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.518150][T18216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1371.600236][T18216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1371.844394][T18216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1373.005137][T18216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1373.051659][ T6073] bridge_slave_1: left allmulticast mode [ 1373.067257][ T6073] bridge_slave_1: left promiscuous mode [ 1373.227110][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.256202][ T6073] bridge_slave_0: left allmulticast mode [ 1373.261859][ T6073] bridge_slave_0: left promiscuous mode [ 1373.292642][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.483920][T18604] random: crng reseeded on system resumption [ 1376.966801][T18614] slcan: can't register candev [ 1376.971883][T18614] Falling back ldisc for ttyS3. [ 1377.391676][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.437620][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.483299][ T6073] bond0 (unregistering): Released all slaves [ 1377.658970][ T6073] hsr_slave_0: left promiscuous mode [ 1377.670027][ T6073] hsr_slave_1: left promiscuous mode [ 1377.684910][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.705068][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.064895][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1378.106184][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1378.884565][T18650] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.3049'. [ 1378.929757][T18222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.100450][T18222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.164538][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.171800][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.646849][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.654096][T11549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.772948][T18655] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.3050'. [ 1379.846512][T18216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.770605][T18216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.990886][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.998103][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.111302][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.118564][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.154841][T18475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1381.255902][T18475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1381.645938][T18475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1382.497848][T18475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1382.537796][T18672] slcan: can't register candev [ 1382.542948][T18672] Falling back ldisc for ttyS3. [ 1383.898720][T18475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.004680][T18475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.244452][T18222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.972695][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.979891][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.055549][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.062769][T14657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.281713][T18222] veth0_vlan: entered promiscuous mode [ 1385.341082][T18222] veth1_vlan: entered promiscuous mode [ 1385.739457][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.965059][T18222] veth0_macvtap: entered promiscuous mode [ 1386.009405][T18222] veth1_macvtap: entered promiscuous mode [ 1386.119135][T18222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.159428][T18222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.196368][T18222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.215898][T18222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.234950][T18222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.252778][T18222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.509198][T14657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.551338][T14657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.164263][T14563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.172160][T14563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.395406][T18724] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1387.609882][T18475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.704183][T18727] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3063'. [ 1388.406037][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1388.418182][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1388.431113][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1388.440592][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1388.451456][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1388.928879][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1388.940943][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1388.951459][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1388.965721][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1388.973686][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1390.773200][ T5160] Bluetooth: hci1: command tx timeout [ 1391.033419][ T5160] Bluetooth: hci3: command tx timeout [ 1391.065048][T18761] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3068'. [ 1391.474200][T14656] bridge_slave_1: left allmulticast mode [ 1391.491187][T14656] bridge_slave_1: left promiscuous mode [ 1391.613007][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.684648][T15281] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1391.712520][T15417] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1391.746658][T14656] bridge_slave_0: left allmulticast mode [ 1391.765376][T15281] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1391.777064][T14656] bridge_slave_0: left promiscuous mode [ 1391.787839][T15417] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1391.809405][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.849149][T15417] usb 6-1: USB disconnect, device number 51 [ 1391.950265][T15281] usb 9-1: USB disconnect, device number 23 [ 1392.823730][ T5160] Bluetooth: hci1: command tx timeout [ 1393.122723][ T5160] Bluetooth: hci3: command tx timeout [ 1393.616020][T14656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.651736][T14656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.731286][T14656] bond0 (unregistering): Released all slaves [ 1393.951605][T18734] chnl_net:caif_netlink_parms(): no params data found [ 1393.991848][T18475] veth0_vlan: entered promiscuous mode [ 1394.270520][T14656] hsr_slave_0: left promiscuous mode [ 1394.315677][T14656] hsr_slave_1: left promiscuous mode [ 1394.345762][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.368524][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.872554][ T5160] Bluetooth: hci1: command tx timeout [ 1395.452569][ T5160] Bluetooth: hci3: command tx timeout [ 1395.744620][T18807] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3073'. [ 1396.665070][T14656] team0 (unregistering): Port device team_slave_1 removed [ 1396.767574][T14656] team0 (unregistering): Port device team_slave_0 removed [ 1396.955190][ T5160] Bluetooth: hci1: command tx timeout [ 1397.156360][T18831] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3077'. [ 1397.513636][ T5160] Bluetooth: hci3: command tx timeout [ 1397.960088][T18475] veth1_vlan: entered promiscuous mode [ 1398.703285][T18734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.710505][T18734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.725744][T18734] bridge_slave_0: entered allmulticast mode [ 1398.734737][T18734] bridge_slave_0: entered promiscuous mode [ 1398.754388][T18734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.763875][T18734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.771096][T18734] bridge_slave_1: entered allmulticast mode [ 1398.780332][T18734] bridge_slave_1: entered promiscuous mode [ 1399.983232][T18739] chnl_net:caif_netlink_parms(): no params data found [ 1400.078197][T18734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.106432][T18475] veth0_macvtap: entered promiscuous mode [ 1400.131155][T18475] veth1_macvtap: entered promiscuous mode [ 1400.180882][T18734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.318382][T18734] team0: Port device team_slave_0 added [ 1401.356104][T18734] team0: Port device team_slave_1 added [ 1401.409031][T18734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.416105][T18734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.450944][T18734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.528516][T18475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.538822][T18734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.546914][T18734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.580194][T18734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.600538][T18739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.614777][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.622103][T18739] bridge_slave_0: entered allmulticast mode [ 1401.632524][T18739] bridge_slave_0: entered promiscuous mode [ 1401.646216][T18475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.661172][T18475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.673359][T18475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.682183][T18475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.704406][T18475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.775032][T18739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.788976][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.796402][T18739] bridge_slave_1: entered allmulticast mode [ 1401.817052][T18739] bridge_slave_1: entered promiscuous mode [ 1401.985926][T14656] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.067556][T18739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.100887][T18739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.128234][T18734] hsr_slave_0: entered promiscuous mode [ 1402.135433][T18734] hsr_slave_1: entered promiscuous mode [ 1402.143098][T18734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1402.151959][T18734] Cannot create hsr debugfs directory [ 1402.188830][T14656] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.318666][T14656] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.412064][T18739] team0: Port device team_slave_0 added [ 1402.431319][T18739] team0: Port device team_slave_1 added [ 1402.624037][T14656] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.666153][T18739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.682074][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.710348][T18739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.759923][T18739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.780916][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.811112][T18739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.996354][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.022423][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.443728][T18739] hsr_slave_0: entered promiscuous mode [ 1403.450625][T18739] hsr_slave_1: entered promiscuous mode [ 1403.463341][T18739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.480644][T18739] Cannot create hsr debugfs directory [ 1403.685315][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.729658][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.964139][T14656] bridge_slave_1: left allmulticast mode [ 1403.983119][T14656] bridge_slave_1: left promiscuous mode [ 1403.988921][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.038414][T14656] bridge_slave_0: left allmulticast mode [ 1404.052531][T14656] bridge_slave_0: left promiscuous mode [ 1404.063078][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.039881][T14656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.071762][T14656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.099098][T14656] bond0 (unregistering): Released all slaves [ 1406.329265][T18941] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3088'. [ 1406.358985][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1406.373496][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1406.382041][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1406.391115][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1406.407382][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1407.989017][T14656] hsr_slave_0: left promiscuous mode [ 1407.999319][T14656] hsr_slave_1: left promiscuous mode [ 1408.009377][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1408.021256][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.036128][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.053173][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.101318][T14656] veth1_macvtap: left promiscuous mode [ 1408.116443][T14656] veth0_macvtap: left promiscuous mode [ 1408.122179][T14656] veth1_vlan: left promiscuous mode [ 1408.132147][T14656] veth0_vlan: left promiscuous mode [ 1408.483754][ T5160] Bluetooth: hci2: command tx timeout [ 1409.522043][T14656] team0 (unregistering): Port device team_slave_1 removed [ 1409.571206][T14656] team0 (unregistering): Port device team_slave_0 removed [ 1410.563332][ T5160] Bluetooth: hci2: command tx timeout [ 1410.678624][T18734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1410.726486][T18734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1410.745586][T18734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1410.774101][T18734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1410.892013][T18942] chnl_net:caif_netlink_parms(): no params data found [ 1411.057526][T14656] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.244262][T14656] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.421830][T14656] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.460166][T18942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.467684][T18942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.476155][T18942] bridge_slave_0: entered allmulticast mode [ 1411.485179][T18942] bridge_slave_0: entered promiscuous mode [ 1411.542033][T14656] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.574880][T18942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.582072][T18942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.599702][T18942] bridge_slave_1: entered allmulticast mode [ 1411.608113][T18942] bridge_slave_1: entered promiscuous mode [ 1411.712012][T18942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.737692][T18942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.926542][T18942] team0: Port device team_slave_0 added [ 1411.980129][T18942] team0: Port device team_slave_1 added [ 1412.109893][T18739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1412.147561][T18739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1412.186019][T18734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.300883][T18942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.324408][T18942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.410426][T18942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.444151][T18942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.451115][T18942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.538236][T18942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.559728][T18739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1412.589958][T14656] team0: left allmulticast mode [ 1412.603828][T14656] team_slave_0: left allmulticast mode [ 1412.637786][ T5160] Bluetooth: hci2: command tx timeout [ 1412.646446][T14656] team_slave_1: left allmulticast mode [ 1412.662870][T14656] team0: left promiscuous mode [ 1412.672695][T14656] team_slave_0: left promiscuous mode [ 1412.692725][T14656] team_slave_1: left promiscuous mode [ 1412.700347][T14656] bridge0: port 3(team0) entered disabled state [ 1412.787768][T14656] bridge_slave_1: left allmulticast mode [ 1412.810723][T14656] bridge_slave_1: left promiscuous mode [ 1412.834144][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.870849][T14656] bridge_slave_0: left allmulticast mode [ 1412.895506][T14656] bridge_slave_0: left promiscuous mode [ 1412.905167][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.782401][ T5160] Bluetooth: hci2: command tx timeout [ 1415.091589][ T5867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1415.102290][ T5867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1415.112032][ T5867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1415.120796][ T5867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1415.128909][ T5867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1415.255268][T19013] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1415.378943][T14656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.392266][T14656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.404132][T14656] bond0 (unregistering): Released all slaves [ 1415.630023][T18942] hsr_slave_0: entered promiscuous mode [ 1415.643703][T18942] hsr_slave_1: entered promiscuous mode [ 1415.650267][T18942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1415.666739][T18942] Cannot create hsr debugfs directory [ 1415.674927][T18734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.687886][T18739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1416.778259][T14563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.785497][T14563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.002411][T14656] hsr_slave_0: left promiscuous mode [ 1417.013847][T14656] hsr_slave_1: left promiscuous mode [ 1417.019754][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.031894][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.044180][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.051599][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.081210][T14656] veth1_macvtap: left promiscuous mode [ 1417.091035][T14656] veth0_macvtap: left promiscuous mode [ 1417.097123][T14656] veth1_vlan: left promiscuous mode [ 1417.102596][T14656] veth0_vlan: left promiscuous mode [ 1417.192652][ T5867] Bluetooth: hci6: command tx timeout [ 1417.669047][T14656] team0 (unregistering): Port device team_slave_1 removed [ 1417.708308][T14656] team0 (unregistering): Port device team_slave_0 removed [ 1418.033839][T19047] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3105'. [ 1418.437532][T14563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.444744][T14563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.328366][ T5867] Bluetooth: hci6: command tx timeout [ 1420.388727][T14656] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.451168][T19010] chnl_net:caif_netlink_parms(): no params data found [ 1420.504038][T18739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.808792][T14656] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.913605][T14656] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.028874][T14656] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.171236][T18739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.196138][T18734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.216217][T19010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.237865][T19010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.250253][T19010] bridge_slave_0: entered allmulticast mode [ 1421.260634][T19010] bridge_slave_0: entered promiscuous mode [ 1421.302273][T19010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.311627][T19010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.326022][T19010] bridge_slave_1: entered allmulticast mode [ 1421.335422][T19010] bridge_slave_1: entered promiscuous mode [ 1421.352582][ T5867] Bluetooth: hci6: command tx timeout [ 1421.474852][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.482021][ T6427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.556634][T19010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.699322][T19010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.870921][T19105] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3109'. [ 1421.925708][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.932921][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.088378][T18942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1422.131381][T18942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1422.394380][T19010] team0: Port device team_slave_0 added [ 1422.558128][T18942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1422.644446][T18942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1422.713385][T19010] team0: Port device team_slave_1 added [ 1423.443031][ T5867] Bluetooth: hci6: command tx timeout [ 1423.695765][T18942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.723039][T18942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.735467][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1423.745284][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1423.754183][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1423.762992][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1423.771555][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1423.991179][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.998354][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.019674][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.026900][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.095716][T19010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.109894][T19010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.147851][T19010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.172182][T14656] bridge_slave_1: left allmulticast mode [ 1424.179342][T14656] bridge_slave_1: left promiscuous mode [ 1424.192367][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.209990][T14656] bridge_slave_0: left allmulticast mode [ 1424.215864][T14656] bridge_slave_0: left promiscuous mode [ 1424.221635][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.816713][T14656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.838192][T14656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.882623][T14656] bond0 (unregistering): Released all slaves [ 1424.914821][T19010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.021553][T19010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.053483][T19010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.844102][ T5867] Bluetooth: hci0: command tx timeout [ 1425.945778][T19148] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3114'. [ 1426.343911][T19010] hsr_slave_0: entered promiscuous mode [ 1426.375414][T19010] hsr_slave_1: entered promiscuous mode [ 1426.966396][T14656] hsr_slave_0: left promiscuous mode [ 1427.004498][T14656] hsr_slave_1: left promiscuous mode [ 1427.015780][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.037068][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.050144][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.058178][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.091759][T14656] veth1_macvtap: left promiscuous mode [ 1427.097841][T14656] veth0_macvtap: left promiscuous mode [ 1427.104466][T14656] veth1_vlan: left promiscuous mode [ 1427.109796][T14656] veth0_vlan: left promiscuous mode [ 1427.735944][T14656] team0 (unregistering): Port device team_slave_1 removed [ 1427.805687][T14656] team0 (unregistering): Port device team_slave_0 removed [ 1427.922824][ T5867] Bluetooth: hci0: command tx timeout [ 1428.877612][T18734] veth0_vlan: entered promiscuous mode [ 1429.018821][T18734] veth1_vlan: entered promiscuous mode [ 1429.067650][T18942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.088736][T18739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.004160][ T5867] Bluetooth: hci0: command tx timeout [ 1430.328950][T19125] chnl_net:caif_netlink_parms(): no params data found [ 1430.545043][T18734] veth0_macvtap: entered promiscuous mode [ 1430.634015][T18739] veth0_vlan: entered promiscuous mode [ 1430.725938][T18734] veth1_macvtap: entered promiscuous mode [ 1430.964204][T18739] veth1_vlan: entered promiscuous mode [ 1431.117087][T19212] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3119'. [ 1431.261174][T14656] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.370161][T18734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.399174][T18734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.430692][T19125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.462487][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.480109][T19125] bridge_slave_0: entered allmulticast mode [ 1431.494502][T19125] bridge_slave_0: entered promiscuous mode [ 1431.517121][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.542658][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.552762][T19125] bridge_slave_1: entered allmulticast mode [ 1431.571311][T19125] bridge_slave_1: entered promiscuous mode [ 1431.666955][T14656] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.685866][T18734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.702129][T18734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.712116][T18734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.721462][T18734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.794823][T19125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.856003][T14656] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.921497][T19125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.938370][T18942] veth0_vlan: entered promiscuous mode [ 1432.072913][ T5867] Bluetooth: hci0: command tx timeout [ 1432.084671][T14656] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.174648][T19125] team0: Port device team_slave_0 added [ 1432.254235][T19125] team0: Port device team_slave_1 added [ 1432.366013][T19010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1432.402537][T19010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1432.419786][T18942] veth1_vlan: entered promiscuous mode [ 1432.439501][T18739] veth0_macvtap: entered promiscuous mode [ 1432.521318][T19010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1432.555939][T19125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.570004][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.609477][T19125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.641106][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.647806][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.665794][T19010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1432.695796][T18739] veth1_macvtap: entered promiscuous mode [ 1432.708909][T19125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.719874][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.752687][T19125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.960980][T19125] hsr_slave_0: entered promiscuous mode [ 1432.970839][T19125] hsr_slave_1: entered promiscuous mode [ 1432.978451][T19125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.992674][T19125] Cannot create hsr debugfs directory [ 1433.037800][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.118962][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.231170][T19251] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1433.533802][T18739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.653651][T14656] bridge_slave_1: left allmulticast mode [ 1433.659348][T14656] bridge_slave_1: left promiscuous mode [ 1433.680897][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.707219][T14656] bridge_slave_0: left allmulticast mode [ 1433.713036][T14656] bridge_slave_0: left promiscuous mode [ 1433.729791][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.102808][T14656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.119764][T14656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.130025][T14656] bond0 (unregistering): Released all slaves [ 1434.151017][T18739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.173756][T14560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.181591][T14560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.235057][T18739] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.244028][T18739] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.252889][T18739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.261932][T18739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.437238][T18942] veth0_macvtap: entered promiscuous mode [ 1435.638935][T18942] veth1_macvtap: entered promiscuous mode [ 1436.467823][T14656] hsr_slave_0: left promiscuous mode [ 1436.482657][T14656] hsr_slave_1: left promiscuous mode [ 1436.491863][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.506196][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.518600][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.531063][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.567421][T14656] veth1_macvtap: left promiscuous mode [ 1436.573200][T14656] veth0_macvtap: left promiscuous mode [ 1436.578972][T14656] veth1_vlan: left promiscuous mode [ 1436.588134][T14656] veth0_vlan: left promiscuous mode [ 1438.715590][T14656] team0 (unregistering): Port device team_slave_1 removed [ 1438.791257][T19315] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3130'. [ 1438.971799][T14656] team0 (unregistering): Port device team_slave_0 removed [ 1443.941084][T18942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.035776][T18942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.129719][T18942] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.138914][T18942] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.148148][T18942] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.178673][T18942] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.281191][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.315434][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.417133][T14657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.440377][T14657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.586803][T19010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.328138][T19010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.350885][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.373938][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.479338][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.486591][T14560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.556311][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.567278][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.599390][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.606647][T14657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.649741][T19125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1447.722885][T19125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1447.745203][T19125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1447.806325][T19125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1447.870847][T19382] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3143'. [ 1448.190737][T19387] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.3086'. [ 1451.361602][T19125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.018317][T19125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.120043][T14656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.127250][T14656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.202957][T14656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.210171][T14656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.234308][T19412] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1452.522539][T19020] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1452.735250][T19020] usb 5-1: Using ep0 maxpacket: 16 [ 1452.754981][T19010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.822545][T19020] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1453.426901][T19020] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1453.437154][T19020] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1453.452413][T19020] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1453.461681][T19020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.490372][T19020] usb 5-1: Product: syz [ 1453.521958][T19020] usb 5-1: Manufacturer: syz [ 1453.587206][T19020] usb 5-1: SerialNumber: syz [ 1453.629135][T19010] veth0_vlan: entered promiscuous mode [ 1453.647799][T19125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1453.859001][T19010] veth1_vlan: entered promiscuous mode [ 1454.021562][T19428] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1454.306671][T19010] veth0_macvtap: entered promiscuous mode [ 1454.387049][T19010] veth1_macvtap: entered promiscuous mode [ 1454.415758][T19020] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1454.427189][T19020] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1455.045652][T19010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.326088][T19020] usb 5-1: USB disconnect, device number 35 [ 1455.358765][T19010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.424207][T19010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.492674][T19010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.556366][T19439] udevd[19439]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.563119][T19010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.617127][T19010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.737169][T19442] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3155'. [ 1456.442690][T19125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.181920][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.223438][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.356366][T19456] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.3158'. [ 1457.417448][T14657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.448636][T19125] veth0_vlan: entered promiscuous mode [ 1457.463120][T14657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.508584][T19125] veth1_vlan: entered promiscuous mode [ 1457.621587][T19458] loop3: detected capacity change from 0 to 2048 [ 1457.815809][T19125] veth0_macvtap: entered promiscuous mode [ 1458.354182][T19125] veth1_macvtap: entered promiscuous mode [ 1458.527037][T19125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.613837][T19125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.668666][T19125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.742474][T19125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.751377][T19125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.786963][T19125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.788409][T19465] loop2: detected capacity change from 0 to 2048 [ 1460.554372][T11549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.592366][T11549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.681704][T14563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.692673][T14563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.181179][T19477] random: crng reseeded on system resumption [ 1461.576892][T19486] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3164'. [ 1461.697149][T19488] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.3166'. [ 1467.029192][T19514] loop4: detected capacity change from 0 to 2048 [ 1468.355529][T19542] random: crng reseeded on system resumption [ 1478.620488][T19609] random: crng reseeded on system resumption [ 1480.238085][T19612] loop0: detected capacity change from 0 to 2048 [ 1481.567390][T19643] can0: slcan on ttyS3. [ 1481.692580][T18991] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1482.358020][T18991] usb 3-1: Using ep0 maxpacket: 16 [ 1482.413108][T18991] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1482.498976][T18991] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1482.579326][T19643] can0 (unregistered): slcan off ttyS3. [ 1482.595267][T18991] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1482.741046][T18991] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1482.790475][T18991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.828076][T18991] usb 3-1: Product: syz [ 1482.858295][T18991] usb 3-1: Manufacturer: syz [ 1482.886423][T18991] usb 3-1: SerialNumber: syz [ 1484.755268][T19665] can0: slcan on ttyS3. [ 1484.822107][T18991] usb 3-1: can't set config #1, error -71 [ 1484.831326][T18991] usb 3-1: USB disconnect, device number 40 [ 1484.894649][T19664] can0 (unregistered): slcan off ttyS3. [ 1486.818149][T19687] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3210'. [ 1486.952485][T19689] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.3209'. [ 1488.471369][T19705] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1494.048203][T19752] random: crng reseeded on system resumption [ 1494.078713][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.085357][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.541878][T19782] random: crng reseeded on system resumption [ 1500.036578][T19813] random: crng reseeded on system resumption [ 1501.165717][T19812] can0: slcan on ttyS3. [ 1501.652996][T19812] can0 (unregistered): slcan off ttyS3. [ 1502.212477][ T970] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1502.422682][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 1502.489033][ T970] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1503.023022][ T970] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1503.429876][ T970] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1503.488256][ T970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1503.681577][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.566470][ T970] usb 3-1: Product: syz [ 1504.570700][ T970] usb 3-1: Manufacturer: syz [ 1504.575840][ T970] usb 3-1: SerialNumber: syz [ 1505.496786][ T970] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1505.562459][ T970] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1505.707938][ T970] usb 3-1: USB disconnect, device number 41 [ 1505.824722][T19852] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1506.919089][T19536] udevd[19536]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1509.089484][T19887] random: crng reseeded on system resumption [ 1509.469820][T19890] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1511.522475][T17638] Bluetooth: hci1: command 0x0406 tx timeout [ 1511.528890][T17638] Bluetooth: hci3: command 0x0406 tx timeout [ 1512.302458][T19020] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1513.282418][T19020] usb 1-1: Using ep0 maxpacket: 16 [ 1513.289974][T19020] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1513.303743][T19020] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1513.313912][T19020] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1513.343884][T19020] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1513.386446][T19020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.415592][T19020] usb 1-1: Product: syz [ 1513.440581][T19020] usb 1-1: Manufacturer: syz [ 1513.674296][T19020] usb 1-1: SerialNumber: syz [ 1514.155161][T19020] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1515.309062][T19020] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1515.392796][T19020] usb 1-1: USB disconnect, device number 41 [ 1515.613444][T19536] udevd[19536]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.310052][T19942] loop4: detected capacity change from 0 to 2048 [ 1518.500713][T19951] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1518.989471][T19959] random: crng reseeded on system resumption [ 1520.854774][T19966] random: crng reseeded on system resumption [ 1521.756958][T19969] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1522.109476][T19975] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1524.245916][T11727] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1524.792899][T11727] usb 4-1: Using ep0 maxpacket: 16 [ 1524.832169][T11727] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1524.848462][T11727] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1524.872089][T11727] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1525.035013][T11727] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1525.057416][T11727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.945450][T11727] usb 4-1: Product: syz [ 1526.080074][T11727] usb 4-1: Manufacturer: syz [ 1526.110093][T11727] usb 4-1: SerialNumber: syz [ 1528.010200][T11727] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1528.043989][T11727] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1528.073766][T20013] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.3280'. [ 1529.045501][T11727] usb 4-1: USB disconnect, device number 25 [ 1530.469492][T19509] udevd[19509]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1531.029340][T20036] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1532.205924][ T5160] Bluetooth: hci2: command 0x0406 tx timeout [ 1532.963531][T20046] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1538.418001][T20084] random: crng reseeded on system resumption [ 1540.084925][T20096] random: crng reseeded on system resumption [ 1541.260641][T20103] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1541.367866][T20105] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3304'. [ 1543.313386][ T5160] Bluetooth: hci6: command 0x0406 tx timeout [ 1547.362456][ T5160] Bluetooth: hci0: command 0x0406 tx timeout [ 1547.408872][T20136] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1547.796637][T20144] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1548.880228][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1550.632781][T20172] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3317'. [ 1552.042614][T10724] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1553.136222][T10724] usb 1-1: Using ep0 maxpacket: 16 [ 1553.164816][T10724] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1553.233583][T10724] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1553.459351][T10724] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1553.503264][T10724] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1553.522587][T10724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.542454][T10724] usb 1-1: Product: syz [ 1553.546719][T10724] usb 1-1: Manufacturer: syz [ 1553.551735][T10724] usb 1-1: SerialNumber: syz [ 1555.560491][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.702524][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.903112][T10724] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1557.988074][T10724] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1559.058371][T10724] usb 1-1: USB disconnect, device number 42 [ 1560.396185][T19509] udevd[19509]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.470556][T20222] can0: slcan on ttyS3. [ 1561.548263][T20218] loop0: detected capacity change from 0 to 2048 [ 1561.666196][T20226] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3329'. [ 1561.832760][T20227] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3330'. [ 1562.086267][T20225] can0 (unregistered): slcan off ttyS3. [ 1562.188348][T20235] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3331'. [ 1563.163482][T20222] can0: slcan on ttyS3. [ 1563.570792][T20241] random: crng reseeded on system resumption [ 1564.569617][T20213] can0 (unregistered): slcan off ttyS3. [ 1566.542629][T18694] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1566.630183][T20260] can0: slcan on ttyS3. [ 1566.656736][T20265] binder: 20254:20265 ioctl c0306201 0 returned -14 [ 1566.722418][T18694] usb 4-1: Using ep0 maxpacket: 16 [ 1566.730839][T18694] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1566.875173][T18694] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1566.906442][T20263] can0 (unregistered): slcan off ttyS3. [ 1566.917940][T20260] can0: slcan on ttyS3. [ 1567.000415][T18694] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1567.057648][T18694] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1567.072430][T18694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.093773][T20259] can0 (unregistered): slcan off ttyS3. [ 1567.102358][T18694] usb 4-1: Product: syz [ 1567.107768][T18694] usb 4-1: Manufacturer: syz [ 1567.134450][T18694] usb 4-1: SerialNumber: syz [ 1568.408149][T20274] random: crng reseeded on system resumption [ 1568.569722][T18694] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1568.875511][T18694] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1570.184962][T18694] usb 4-1: USB disconnect, device number 26 [ 1571.468905][T19509] udevd[19509]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.598677][T20297] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3345'. [ 1573.489466][T20300] random: crng reseeded on system resumption [ 1574.301518][T20309] random: crng reseeded on system resumption [ 1576.109977][T20323] can0: slcan on ttyS3. [ 1576.818014][T20321] loop0: detected capacity change from 0 to 2048 [ 1577.439368][T20323] can0 (unregistered): slcan off ttyS3. [ 1578.534473][T20330] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3353'. [ 1579.043959][T20342] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1582.338814][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1582.352861][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1582.366052][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1582.390889][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1582.409721][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1582.516073][T20369] random: crng reseeded on system resumption [ 1584.475599][ T5160] Bluetooth: hci5: command tx timeout [ 1584.582108][T20382] random: crng reseeded on system resumption [ 1586.281003][T20391] random: crng reseeded on system resumption [ 1586.598191][ T5160] Bluetooth: hci5: command tx timeout [ 1587.148444][T20395] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1588.650788][ T5160] Bluetooth: hci5: command tx timeout [ 1588.729870][T20407] random: crng reseeded on system resumption [ 1588.866182][ T6073] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.019507][ T6073] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.212380][ T5160] Bluetooth: hci5: command tx timeout [ 1591.255252][T20419] can0: slcan on ttyS3. [ 1593.192478][T20419] can0 (unregistered): slcan off ttyS3. [ 1594.134153][T20432] random: crng reseeded on system resumption [ 1594.826560][ T6073] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.144401][T20360] chnl_net:caif_netlink_parms(): no params data found [ 1597.492869][T20453] random: crng reseeded on system resumption [ 1598.254580][ T6073] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.640837][T20458] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1599.608379][T20471] random: crng reseeded on system resumption [ 1600.502016][T20475] random: crng reseeded on system resumption [ 1601.132566][T20360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.139785][T20360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.023102][T20360] bridge_slave_0: entered allmulticast mode [ 1602.036916][T20360] bridge_slave_0: entered promiscuous mode [ 1602.050481][T20477] can0: slcan on ttyS3. [ 1602.050607][T20360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.123930][T20360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.141937][T20360] bridge_slave_1: entered allmulticast mode [ 1602.409119][T20487] random: crng reseeded on system resumption [ 1603.367974][T20360] bridge_slave_1: entered promiscuous mode [ 1604.358589][T20499] random: crng reseeded on system resumption [ 1604.593069][T20478] can0 (unregistered): slcan off ttyS3. [ 1606.497231][T20360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.546885][T20511] random: crng reseeded on system resumption [ 1607.255872][T20360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.355873][T20518] random: crng reseeded on system resumption [ 1608.371777][T20523] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1609.332604][ T6073] bridge_slave_1: left allmulticast mode [ 1609.338322][ T6073] bridge_slave_1: left promiscuous mode [ 1609.354939][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.431401][ T6073] bridge_slave_0: left allmulticast mode [ 1609.702840][ T6073] bridge_slave_0: left promiscuous mode [ 1609.851054][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.139586][T20556] random: crng reseeded on system resumption [ 1616.959133][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.965572][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1621.136287][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.178865][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.200862][ T6073] bond0 (unregistering): Released all slaves [ 1621.496605][T20360] team0: Port device team_slave_0 added [ 1621.541219][T20360] team0: Port device team_slave_1 added [ 1621.797545][T20611] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1622.635878][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1622.694130][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1622.755810][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1623.892560][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1623.914542][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1626.152816][ T5867] Bluetooth: hci2: command tx timeout [ 1626.522638][T20360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.529655][T20360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.872661][T20360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.904946][T20360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.872130][T20360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.915022][T20360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.342448][ T5867] Bluetooth: hci2: command tx timeout [ 1630.651176][T20649] slcan: can't register candev [ 1630.657121][T20649] Falling back ldisc for ttyS3. [ 1630.952702][ T5867] Bluetooth: hci2: command tx timeout [ 1631.062851][T20662] random: crng reseeded on system resumption [ 1632.753203][T20666] slcan: can't register candev [ 1632.758354][T20666] Falling back ldisc for ttyS3. [ 1633.036528][ T5867] Bluetooth: hci2: command tx timeout [ 1634.461081][T20671] can0: slcan on ttyS3. [ 1635.154986][T20676] can0 (unregistered): slcan off ttyS3. [ 1636.142137][ T6073] hsr_slave_0: left promiscuous mode [ 1636.214727][ T6073] hsr_slave_1: left promiscuous mode [ 1636.258252][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.277246][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.317952][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.338397][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.359558][ T6073] veth1_macvtap: left promiscuous mode [ 1637.525634][ T6073] veth0_macvtap: left promiscuous mode [ 1637.542575][ T6073] veth1_vlan: left promiscuous mode [ 1637.568070][ T6073] veth0_vlan: left promiscuous mode [ 1637.758806][T20719] random: crng reseeded on system resumption [ 1640.153214][T20727] slcan: can't register candev [ 1640.158362][T20727] Falling back ldisc for ttyS3. [ 1641.742568][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1641.764364][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1641.781998][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1641.802025][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1641.822559][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1643.922822][ T5160] Bluetooth: hci3: command tx timeout [ 1644.070691][T20757] slcan: can't register candev [ 1644.079917][T20757] Falling back ldisc for ttyS3. [ 1645.550003][T20774] random: crng reseeded on system resumption [ 1645.992564][ T5160] Bluetooth: hci3: command tx timeout [ 1646.003012][T20780] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1646.976833][T20787] random: crng reseeded on system resumption [ 1648.356883][ T5160] Bluetooth: hci3: command tx timeout [ 1650.725100][ T5160] Bluetooth: hci3: command tx timeout [ 1651.886757][T20815] random: crng reseeded on system resumption [ 1654.650809][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1655.885748][T20832] random: crng reseeded on system resumption [ 1656.338633][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1659.503374][T20850] slcan: can't register candev [ 1659.508513][T20850] Falling back ldisc for ttyS3. [ 1659.792450][ T3087] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1659.992854][ T3087] usb 5-1: Using ep0 maxpacket: 16 [ 1660.011557][T20870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1660.050127][ T3087] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1660.094254][ T3087] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1660.162140][ T3087] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1661.066824][ T3087] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1661.101730][ T3087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.128692][ T3087] usb 5-1: Product: syz [ 1661.155092][ T3087] usb 5-1: Manufacturer: syz [ 1661.161014][ T3087] usb 5-1: SerialNumber: syz [ 1662.355977][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1662.364160][ T3087] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1662.375291][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1662.383017][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1662.390931][ T3087] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1662.765272][ T3087] usb 5-1: USB disconnect, device number 36 [ 1665.996533][T20909] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3465'. [ 1667.646181][T20612] chnl_net:caif_netlink_parms(): no params data found [ 1667.789624][T20921] random: crng reseeded on system resumption [ 1670.203440][T20938] slcan: can't register candev [ 1670.210308][T20938] Falling back ldisc for ttyS3. [ 1670.894555][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.912063][T20612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.929121][T20612] bridge_slave_0: entered allmulticast mode [ 1670.938063][T20612] bridge_slave_0: entered promiscuous mode [ 1670.962681][T20740] chnl_net:caif_netlink_parms(): no params data found [ 1672.015474][T20612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.032901][T20956] slcan: can't register candev [ 1672.037936][T20956] Falling back ldisc for ttyS3. [ 1672.172495][T20612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.179740][T20612] bridge_slave_1: entered allmulticast mode [ 1672.206695][T20612] bridge_slave_1: entered promiscuous mode [ 1672.272764][T20961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3474'. [ 1672.902569][T10724] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1673.576340][T20612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.593672][T20612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.662874][T10724] usb 1-1: Using ep0 maxpacket: 16 [ 1673.712787][T10724] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1673.739190][T10724] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1673.750683][T10724] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1673.764579][T10724] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1673.774512][T10724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.782915][T10724] usb 1-1: Product: syz [ 1673.787231][T10724] usb 1-1: Manufacturer: syz [ 1673.791860][T10724] usb 1-1: SerialNumber: syz [ 1673.976166][T20982] random: crng reseeded on system resumption [ 1674.760475][T20612] team0: Port device team_slave_0 added [ 1675.142798][T10724] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1675.506830][ T6073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.905919][T20612] team0: Port device team_slave_1 added [ 1676.209945][T10724] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 1676.761194][T10724] usb 1-1: USB disconnect, device number 43 [ 1676.820044][T20740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.790578][T20740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.812739][T20740] bridge_slave_0: entered allmulticast mode [ 1677.939333][T20997] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1678.006088][T20740] bridge_slave_0: entered promiscuous mode [ 1678.009003][T21000] udevd[21000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1678.105389][T20740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.231045][T20740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.238506][T20740] bridge_slave_1: entered allmulticast mode [ 1678.277691][T20740] bridge_slave_1: entered promiscuous mode [ 1678.403052][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.409432][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.631041][ T6073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.652013][T21009] slcan: can't register candev [ 1679.658633][T21009] Falling back ldisc for ttyS3. [ 1679.822046][T20612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.842413][T20612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.886011][T20612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.936004][T20612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.949824][T20612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.984942][T20612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.834740][ T6073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.083806][T20740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.986358][T20740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.001233][T21027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3488'. [ 1682.726495][ T6073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.685341][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1683.707559][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1683.719998][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1683.763474][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1683.805694][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1684.533691][T20740] team0: Port device team_slave_0 added [ 1685.383069][T20740] team0: Port device team_slave_1 added [ 1686.312840][ T5160] Bluetooth: hci5: command tx timeout [ 1688.752524][ T5160] Bluetooth: hci5: command tx timeout [ 1689.522465][T10724] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1690.016889][T10724] usb 5-1: Using ep0 maxpacket: 16 [ 1690.057812][T21074] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3499'. [ 1690.174489][T10724] usb 5-1: device descriptor read/all, error -71 [ 1690.802955][ T5160] Bluetooth: hci5: command tx timeout [ 1691.653461][T21077] slcan: can't register candev [ 1691.658538][T21077] Falling back ldisc for ttyS3. [ 1691.833353][T20740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.846916][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.922400][T20740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.062126][T20740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.092599][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.171684][T21092] random: crng reseeded on system resumption [ 1692.882633][ T5160] Bluetooth: hci5: command tx timeout [ 1693.022709][T20740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.444621][T20740] hsr_slave_0: entered promiscuous mode [ 1694.252802][T20740] hsr_slave_1: entered promiscuous mode [ 1694.292693][T20740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1694.314295][T21099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1694.328859][T20740] Cannot create hsr debugfs directory [ 1697.237055][T21117] can0: slcan on ttyS3. [ 1697.576647][ T6073] bridge_slave_1: left allmulticast mode [ 1697.583698][T21118] can0 (unregistered): slcan off ttyS3. [ 1697.758256][ T6073] bridge_slave_1: left promiscuous mode [ 1698.032613][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.395954][T10724] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1699.132406][T10724] usb 5-1: Using ep0 maxpacket: 16 [ 1699.168967][T10724] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1699.295141][T10724] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1699.421135][T10724] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1699.653170][T10724] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.709447][T10724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.722728][T10724] usb 5-1: Product: syz [ 1699.726921][T10724] usb 5-1: Manufacturer: syz [ 1699.743231][T21137] slcan: can't register candev [ 1699.744154][ T6073] bridge_slave_0: left allmulticast mode [ 1699.748272][T21137] Falling back ldisc for ttyS3. [ 1699.772367][ T6073] bridge_slave_0: left promiscuous mode [ 1699.880496][T10724] usb 5-1: SerialNumber: syz [ 1699.962907][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.074551][ T6073] bridge_slave_1: left allmulticast mode [ 1700.112639][ T6073] bridge_slave_1: left promiscuous mode [ 1700.142612][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.179869][ T6073] bridge_slave_0: left allmulticast mode [ 1700.229315][ T6073] bridge_slave_0: left promiscuous mode [ 1700.273082][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.123583][T10724] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1701.409571][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1701.422795][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1701.430841][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1701.440617][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1701.448619][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1701.948665][T10724] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 1702.789508][T10724] usb 5-1: USB disconnect, device number 39 [ 1702.830191][T21155] slcan: can't register candev [ 1702.835356][T21155] Falling back ldisc for ttyS3. [ 1703.187457][T21000] udevd[21000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1703.235623][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.485311][T21171] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3516'. [ 1703.512542][ T5867] Bluetooth: hci2: command tx timeout [ 1706.200563][ T5867] Bluetooth: hci2: command tx timeout [ 1706.227786][T21174] slcan: can't register candev [ 1706.236153][T21174] Falling back ldisc for ttyS3. [ 1706.485687][T21180] random: crng reseeded on system resumption [ 1707.149116][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.382496][ T5867] Bluetooth: hci2: command tx timeout [ 1708.394131][ T6073] bond0 (unregistering): Released all slaves [ 1710.461886][ T5867] Bluetooth: hci2: command tx timeout [ 1710.489242][T21197] random: crng reseeded on system resumption [ 1712.400579][T21203] slcan: can't register candev [ 1712.405726][T21203] Falling back ldisc for ttyS3. [ 1713.893647][T21223] slcan: can't register candev [ 1713.899928][T21223] Falling back ldisc for ttyS3. [ 1715.008011][T21232] random: crng reseeded on system resumption [ 1716.660610][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1716.698976][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.714704][T21239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1716.758129][ T6073] bond0 (unregistering): Released all slaves [ 1719.473201][T21256] slcan: can't register candev [ 1719.479601][T21256] Falling back ldisc for ttyS3. [ 1722.021477][T21277] can0: slcan on ttyS3. [ 1722.105828][T21277] can0 (unregistered): slcan off ttyS3. [ 1722.296296][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1722.315988][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.357948][ T6073] hsr_slave_0: left promiscuous mode [ 1722.375151][ T6073] hsr_slave_1: left promiscuous mode [ 1722.523466][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1722.566232][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1722.628037][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1722.660990][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.775996][ T6073] veth1_macvtap: left promiscuous mode [ 1722.781817][ T6073] veth0_macvtap: left promiscuous mode [ 1722.810627][ T6073] veth1_vlan: left promiscuous mode [ 1722.822915][ T6073] veth0_vlan: left promiscuous mode [ 1723.234916][ T5925] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1723.482706][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 1723.669550][ T5925] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1724.033193][T21294] slcan: can't register candev [ 1724.038367][T21294] Falling back ldisc for ttyS3. [ 1724.156621][T21299] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1724.212447][ T5925] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1724.222260][ T5925] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1724.340930][ T5925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1724.390769][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.430053][ T5925] usb 5-1: Product: syz [ 1724.434926][ T5925] usb 5-1: Manufacturer: syz [ 1724.439560][ T5925] usb 5-1: SerialNumber: syz [ 1724.602268][T21302] random: crng reseeded on system resumption [ 1725.579985][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1725.704419][ T5925] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1726.070189][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1727.122866][T21310] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1727.219318][ T5925] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 1727.537186][ T5925] usb 5-1: USB disconnect, device number 40 [ 1727.757106][T21314] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1728.763346][T21320] random: crng reseeded on system resumption [ 1729.856131][T21323] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1731.125870][T21327] slcan: can't register candev [ 1731.130945][T21327] Falling back ldisc for ttyS3. [ 1732.057109][T21335] loop4: detected capacity change from 0 to 2048 [ 1732.468412][T21333] slcan: can't register candev [ 1732.473993][T21333] Falling back ldisc for ttyS3. [ 1734.439420][T21351] random: crng reseeded on system resumption [ 1739.408714][T21369] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1739.841700][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.848058][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.865913][T21375] slcan: can't register candev [ 1740.871033][T21375] Falling back ldisc for ttyS3. [ 1742.668178][T21396] random: crng reseeded on system resumption [ 1743.203018][T21385] slcan: can't register candev [ 1743.208118][T21385] Falling back ldisc for ttyS3. [ 1745.729558][T21406] slcan: can't register candev [ 1745.734986][T21406] Falling back ldisc for ttyS3. [ 1746.023655][T21411] random: crng reseeded on system resumption [ 1746.541144][T21417] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3574'. [ 1746.588498][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1746.644088][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1746.686461][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1746.745894][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1746.754259][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1748.743397][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1748.792438][ T5160] Bluetooth: hci3: command tx timeout [ 1749.306705][T21425] random: crng reseeded on system resumption [ 1749.441460][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1750.874399][ T5160] Bluetooth: hci3: command tx timeout [ 1751.467357][T21434] random: crng reseeded on system resumption [ 1752.970767][ T5160] Bluetooth: hci3: command tx timeout [ 1753.039725][T21439] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1753.249757][T21441] loop0: detected capacity change from 0 to 2048 [ 1754.918781][T21454] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1755.511602][ T5160] Bluetooth: hci3: command tx timeout [ 1760.628675][T21478] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1760.794176][T21479] slcan: can't register candev [ 1760.799230][T21479] Falling back ldisc for ttyS3. [ 1761.243134][T21486] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1761.654526][ T5867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1761.696552][ T5867] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1761.706761][ T5867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1761.736423][ T5867] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1761.772581][ T5867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1762.951646][T21499] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1763.938716][ T5867] Bluetooth: hci7: command tx timeout [ 1764.865183][T21504] loop0: detected capacity change from 0 to 2048 [ 1765.096640][T21511] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1766.285609][ T5867] Bluetooth: hci7: command tx timeout [ 1766.796557][T21044] chnl_net:caif_netlink_parms(): no params data found [ 1767.953323][T21522] slcan: can't register candev [ 1767.958459][T21522] Falling back ldisc for ttyS3. [ 1768.313685][ T5867] Bluetooth: hci7: command tx timeout [ 1770.402597][ T5867] Bluetooth: hci7: command tx timeout [ 1770.875672][T21529] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1771.017499][T21536] random: crng reseeded on system resumption [ 1774.067364][T21568] random: crng reseeded on system resumption [ 1777.763515][T21591] random: crng reseeded on system resumption [ 1778.389252][T21414] chnl_net:caif_netlink_parms(): no params data found [ 1779.616657][T21600] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1779.798952][T21489] chnl_net:caif_netlink_parms(): no params data found [ 1780.106871][T21606] loop4: detected capacity change from 0 to 2048 [ 1781.047396][T21609] slcan: can't register candev [ 1781.052865][T21609] Falling back ldisc for ttyS3. [ 1782.619335][T21414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.670166][T21414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.698670][T21414] bridge_slave_0: entered allmulticast mode [ 1782.914489][T21414] bridge_slave_0: entered promiscuous mode [ 1782.944112][T21414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.951290][T21414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.087074][T21414] bridge_slave_1: entered allmulticast mode [ 1783.770814][T21414] bridge_slave_1: entered promiscuous mode [ 1783.777523][T21629] slcan: can't register candev [ 1783.783437][T21629] Falling back ldisc for ttyS3. [ 1785.368715][T21644] slcan: can't register candev [ 1785.375119][T21644] Falling back ldisc for ttyS3. [ 1785.972880][T21659] random: crng reseeded on system resumption [ 1786.945698][T21662] random: crng reseeded on system resumption [ 1787.964880][T21414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.355110][T21414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.426563][T21670] random: crng reseeded on system resumption [ 1789.229929][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.263364][T21489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.271919][T21489] bridge_slave_0: entered allmulticast mode [ 1790.503123][T21489] bridge_slave_0: entered promiscuous mode [ 1790.521657][T21489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.540264][T21489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.555950][T21489] bridge_slave_1: entered allmulticast mode [ 1790.564498][T21489] bridge_slave_1: entered promiscuous mode [ 1790.610840][T21414] team0: Port device team_slave_0 added [ 1791.643771][T21414] team0: Port device team_slave_1 added [ 1791.937959][T21489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.036514][T21489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.947159][T21414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1792.954394][T21414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1792.981150][T21414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.026601][T21705] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1793.069217][T21414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.166827][T21414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.251152][T21414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.521559][T21489] team0: Port device team_slave_0 added [ 1794.155044][T21489] team0: Port device team_slave_1 added [ 1794.321124][T21414] hsr_slave_0: entered promiscuous mode [ 1794.363888][T21414] hsr_slave_1: entered promiscuous mode [ 1794.386504][T21414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1794.422583][T21414] Cannot create hsr debugfs directory [ 1794.524269][T21489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.560019][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.611306][T21489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.651493][ T6073] bridge_slave_1: left allmulticast mode [ 1794.673059][ T6073] bridge_slave_1: left promiscuous mode [ 1794.679003][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.752901][T21723] random: crng reseeded on system resumption [ 1796.777561][ T6073] bridge_slave_0: left allmulticast mode [ 1796.792424][ T6073] bridge_slave_0: left promiscuous mode [ 1796.798225][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.081921][T21733] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1797.156096][ T6073] bridge_slave_1: left allmulticast mode [ 1797.161870][ T6073] bridge_slave_1: left promiscuous mode [ 1797.202561][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.253218][ T6073] bridge_slave_0: left allmulticast mode [ 1797.258903][ T6073] bridge_slave_0: left promiscuous mode [ 1797.355944][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.176816][T21742] random: crng reseeded on system resumption [ 1799.535803][T21745] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1799.736910][ T6073] bond0 (unregistering): Released all slaves [ 1800.877097][T21749] slcan: can't register candev [ 1800.886408][T21749] Falling back ldisc for ttyS3. [ 1801.254191][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.326880][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.333484][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.380410][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.576016][T21761] random: crng reseeded on system resumption [ 1801.614200][ T6073] bond0 (unregistering): Released all slaves [ 1802.403129][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.487725][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1802.538780][ T6073] bond0 (unregistering): Released all slaves [ 1802.722831][T21489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.792691][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.982405][T21489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.747290][T21777] can0: slcan on ttyS3. [ 1804.005718][T21778] can0 (unregistered): slcan off ttyS3. [ 1804.284615][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1804.294837][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1804.307112][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1804.317210][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1804.352659][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1804.379689][ T6073] hsr_slave_0: left promiscuous mode [ 1804.415835][ T6073] hsr_slave_1: left promiscuous mode [ 1804.440418][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.695660][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.544409][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.626497][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.680052][T21782] slcan: can't register candev [ 1805.733971][T21782] Falling back ldisc for ttyS3. [ 1805.947867][T21799] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3654'. [ 1806.752806][ T5160] Bluetooth: hci2: command tx timeout [ 1808.792784][ T5160] Bluetooth: hci2: command tx timeout [ 1809.650487][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1809.953086][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1810.078872][T21830] random: crng reseeded on system resumption [ 1810.927116][ T5160] Bluetooth: hci2: command tx timeout [ 1812.208295][T21831] slcan: can't register candev [ 1812.240065][T21831] Falling back ldisc for ttyS3. [ 1812.953610][ T5160] Bluetooth: hci2: command tx timeout [ 1813.065621][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1813.110615][T21852] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3669'. [ 1814.516040][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1815.171060][T21861] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3671'. [ 1816.638234][T21489] hsr_slave_0: entered promiscuous mode [ 1816.644142][T21863] can0: slcan on ttyS3. [ 1816.695098][T21489] hsr_slave_1: entered promiscuous mode [ 1816.733531][T21489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1816.785276][T21489] Cannot create hsr debugfs directory [ 1817.158385][T21879] random: crng reseeded on system resumption [ 1817.532582][T21866] can0 (unregistered): slcan off ttyS3. [ 1819.152476][T21895] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1820.353750][T21904] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1821.734144][T21912] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1821.827860][T21787] chnl_net:caif_netlink_parms(): no params data found [ 1822.071760][T21920] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1822.837330][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1822.875824][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1822.886215][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1822.894393][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1822.902850][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1823.397844][T21932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3683'. [ 1823.407074][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'. [ 1825.047707][ T5867] Bluetooth: hci3: command tx timeout [ 1825.153216][T21787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.187239][T21787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.200658][T21787] bridge_slave_0: entered allmulticast mode [ 1825.285231][T21787] bridge_slave_0: entered promiscuous mode [ 1825.349157][ T6073] bridge_slave_1: left allmulticast mode [ 1825.612659][ T6073] bridge_slave_1: left promiscuous mode [ 1825.644159][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.703754][ T6073] bridge_slave_0: left allmulticast mode [ 1826.709470][ T6073] bridge_slave_0: left promiscuous mode [ 1826.855232][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.937464][ T6073] bridge_slave_1: left allmulticast mode [ 1827.082554][ T6073] bridge_slave_1: left promiscuous mode [ 1827.088335][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.988695][ T5867] Bluetooth: hci3: command tx timeout [ 1828.606137][ T6073] bridge_slave_0: left allmulticast mode [ 1828.697605][ T6073] bridge_slave_0: left promiscuous mode [ 1828.706546][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.848935][T21983] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1830.078945][ T5160] Bluetooth: hci3: command tx timeout [ 1830.283985][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1830.900297][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.965228][ T6073] bond0 (unregistering): Released all slaves [ 1832.262392][ T5867] Bluetooth: hci3: command tx timeout [ 1834.973839][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.003067][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.088918][T22016] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1835.140039][ T6073] bond0 (unregistering): Released all slaves [ 1836.089234][T21787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.122905][T21787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.130478][T21787] bridge_slave_1: entered allmulticast mode [ 1836.138885][T21787] bridge_slave_1: entered promiscuous mode [ 1836.321279][T22022] random: crng reseeded on system resumption [ 1837.707909][T22034] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1837.780672][ T6073] hsr_slave_0: left promiscuous mode [ 1838.277808][ T6073] hsr_slave_1: left promiscuous mode [ 1838.308603][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1838.345272][T22032] slcan: can't register candev [ 1838.350285][T22032] Falling back ldisc for ttyS3. [ 1838.478075][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.886573][ T6073] hsr_slave_0: left promiscuous mode [ 1840.951557][ T6073] hsr_slave_1: left promiscuous mode [ 1840.969365][T22042] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1840.985629][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1841.177957][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.475797][T22055] loop4: detected capacity change from 0 to 2048 [ 1844.577776][T22065] slcan: can't register candev [ 1844.582886][T22065] Falling back ldisc for ttyS3. [ 1844.952869][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1845.025686][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1845.108159][T22075] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1846.455578][T22083] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1847.494418][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1847.654428][T22087] slcan: can't register candev [ 1847.659439][T22087] Falling back ldisc for ttyS3. [ 1848.582267][T22095] random: crng reseeded on system resumption [ 1848.985811][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1851.465318][T22111] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3726'. [ 1852.314567][T22114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3727'. [ 1852.336586][T22119] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1852.402416][T22114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 1852.465841][T21787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.688364][T21787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1853.044551][T22127] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3730'. [ 1855.046865][T21787] team0: Port device team_slave_0 added [ 1855.482935][T21787] team0: Port device team_slave_1 added [ 1857.195513][T22155] slcan: can't register candev [ 1857.200617][T22155] Falling back ldisc for ttyS3. [ 1858.836441][T22174] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3738'. [ 1858.979715][T22177] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1859.237992][T21787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.293252][T21787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.734857][T21787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.754154][T21924] chnl_net:caif_netlink_parms(): no params data found [ 1860.200487][T21787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.235257][T21787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.033479][T21787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.576421][T22198] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1861.972302][T21787] hsr_slave_0: entered promiscuous mode [ 1862.024462][T21787] hsr_slave_1: entered promiscuous mode [ 1862.074173][T21787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1862.181001][T21787] Cannot create hsr debugfs directory [ 1862.204571][T21924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.290778][T21924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.325801][T21924] bridge_slave_0: entered allmulticast mode [ 1862.436268][T21924] bridge_slave_0: entered promiscuous mode [ 1862.473984][T21924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.545541][T21924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.659118][T21924] bridge_slave_1: entered allmulticast mode [ 1862.704579][T21924] bridge_slave_1: entered promiscuous mode [ 1862.731829][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.743115][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.110545][T21924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.410781][T21924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1865.489721][T22213] can0: slcan on ttyS3. [ 1865.723043][T22213] can0 (unregistered): slcan off ttyS3. [ 1866.797123][T21924] team0: Port device team_slave_0 added [ 1867.012676][T21924] team0: Port device team_slave_1 added [ 1867.764877][T21924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.788823][T21924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.599238][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1868.600970][T21924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1868.611972][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1868.625759][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1868.635069][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1868.727990][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1868.755517][T21924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1868.762545][T21924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.795020][T21924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.975797][T22238] slcan: can't register candev [ 1869.980850][T22238] Falling back ldisc for ttyS3. [ 1870.253964][T21924] hsr_slave_0: entered promiscuous mode [ 1870.260726][T21924] hsr_slave_1: entered promiscuous mode [ 1870.327007][T21924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1870.371342][T21924] Cannot create hsr debugfs directory [ 1870.516501][T22250] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1871.087825][ T5160] Bluetooth: hci5: command tx timeout [ 1871.820651][T20960] bridge_slave_1: left allmulticast mode [ 1871.840470][T20960] bridge_slave_1: left promiscuous mode [ 1871.870595][T20960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.908903][T20960] bridge_slave_0: left allmulticast mode [ 1871.928982][T20960] bridge_slave_0: left promiscuous mode [ 1871.952100][T20960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.112451][ T5160] Bluetooth: hci5: command tx timeout [ 1873.645948][T22266] slcan: can't register candev [ 1873.651046][T22266] Falling back ldisc for ttyS3. [ 1873.991381][T20960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1874.331674][T20960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.177653][T22273] slcan: can't register candev [ 1875.183539][T22273] Falling back ldisc for ttyS3. [ 1875.492455][ T5160] Bluetooth: hci5: command tx timeout [ 1875.586436][T20960] bond0 (unregistering): Released all slaves [ 1876.417447][T22283] slcan: can't register candev [ 1876.422734][T22283] Falling back ldisc for ttyS3. [ 1877.331694][T22289] can0: slcan on ttyS3. [ 1877.822711][ T5160] Bluetooth: hci5: command tx timeout [ 1878.209959][T20960] hsr_slave_0: left promiscuous mode [ 1878.213144][T22292] can0 (unregistered): slcan off ttyS3. [ 1878.424685][T20960] hsr_slave_1: left promiscuous mode [ 1878.431118][T20960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1878.491970][T20960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1879.112021][T22306] random: crng reseeded on system resumption [ 1880.293887][T20960] team0 (unregistering): Port device team_slave_1 removed [ 1880.413704][T20960] team0 (unregistering): Port device team_slave_0 removed [ 1886.219620][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1886.247435][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1886.260824][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1886.308204][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1886.324539][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1886.351002][T22230] chnl_net:caif_netlink_parms(): no params data found [ 1887.148896][T20960] bridge_slave_1: left allmulticast mode [ 1887.158029][T20960] bridge_slave_1: left promiscuous mode [ 1887.166922][T20960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.188507][T20960] bridge_slave_0: left allmulticast mode [ 1887.194794][T20960] bridge_slave_0: left promiscuous mode [ 1887.205394][T20960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.547002][ T5867] Bluetooth: hci2: command tx timeout [ 1889.741938][T20960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1890.223590][T20960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1890.282624][T20960] bond0 (unregistering): Released all slaves [ 1890.503579][T20960] hsr_slave_0: left promiscuous mode [ 1890.521786][T20960] hsr_slave_1: left promiscuous mode [ 1890.539760][T20960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1890.565127][T20960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1890.634842][ T5867] Bluetooth: hci2: command tx timeout [ 1892.782412][ T5867] Bluetooth: hci2: command tx timeout [ 1895.095808][ T5867] Bluetooth: hci2: command tx timeout [ 1895.683967][T22422] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1898.333211][T20960] team0 (unregistering): Port device team_slave_1 removed [ 1898.734666][T20960] team0 (unregistering): Port device team_slave_0 removed [ 1900.535670][T22436] slcan: can't register candev [ 1900.540839][T22436] Falling back ldisc for ttyS3. [ 1902.374598][T22451] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3792'. [ 1902.583291][T22230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.590612][T22230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.659589][T22230] bridge_slave_0: entered allmulticast mode [ 1902.711275][T22230] bridge_slave_0: entered promiscuous mode [ 1902.772020][T22230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.812148][T22230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.838636][T22230] bridge_slave_1: entered allmulticast mode [ 1902.853067][T22230] bridge_slave_1: entered promiscuous mode [ 1904.365485][T22230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1905.523358][T22463] slcan: can't register candev [ 1905.528450][T22463] Falling back ldisc for ttyS3. [ 1905.534021][T22230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.828273][T22230] team0: Port device team_slave_0 added [ 1907.908544][T22230] team0: Port device team_slave_1 added [ 1909.295060][T22230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.323059][T22230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1909.842467][T22230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.028047][T22230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.044186][T22230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.117645][T22230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.788711][T22230] hsr_slave_0: entered promiscuous mode [ 1910.894523][T22230] hsr_slave_1: entered promiscuous mode [ 1911.119755][T22230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1911.195419][T22230] Cannot create hsr debugfs directory [ 1911.349876][T22356] chnl_net:caif_netlink_parms(): no params data found [ 1912.137960][T22507] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1912.162305][T22509] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1912.714666][T22356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.736841][T22356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.801224][T22356] bridge_slave_0: entered allmulticast mode [ 1913.264633][T22356] bridge_slave_0: entered promiscuous mode [ 1913.649827][T22356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.661800][T22356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.669589][T22356] bridge_slave_1: entered allmulticast mode [ 1913.678446][T22356] bridge_slave_1: entered promiscuous mode [ 1916.334642][T22527] slcan: can't register candev [ 1916.339915][T22527] Falling back ldisc for ttyS3. [ 1916.589039][T22356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1916.641309][T22356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.243425][T22540] can0: slcan on ttyS3. [ 1918.752991][T22541] can0 (unregistered): slcan off ttyS3. [ 1919.435615][T22356] team0: Port device team_slave_0 added [ 1919.467539][T22356] team0: Port device team_slave_1 added [ 1920.646412][T22557] slcan: can't register candev [ 1920.651479][T22557] Falling back ldisc for ttyS3. [ 1920.791648][T22555] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1921.351866][T22356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1921.452747][T22356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.706914][T22356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1921.734795][T22356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1921.742238][T22356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.850638][T22356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1924.298730][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.305721][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1926.077425][T22576] slcan: can't register candev [ 1926.082765][T22576] Falling back ldisc for ttyS3. [ 1926.160810][T22356] hsr_slave_0: entered promiscuous mode [ 1926.181711][T22356] hsr_slave_1: entered promiscuous mode [ 1926.197920][T22356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1926.212402][T22356] Cannot create hsr debugfs directory [ 1926.689510][T22589] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1928.623886][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1928.635409][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1928.643655][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1928.667151][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1928.678387][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1930.992705][ T5160] Bluetooth: hci3: command tx timeout [ 1931.156576][T22618] slcan: can't register candev [ 1931.161703][T22618] Falling back ldisc for ttyS3. [ 1932.592968][T22626] slcan: can't register candev [ 1932.598175][T22626] Falling back ldisc for ttyS3. [ 1933.037227][ T5867] Bluetooth: hci3: command tx timeout [ 1935.023532][T22643] slcan: can't register candev [ 1935.030001][T22643] Falling back ldisc for ttyS3. [ 1935.162803][ T5867] Bluetooth: hci3: command tx timeout [ 1937.192529][ T5867] Bluetooth: hci3: command tx timeout [ 1938.051266][T22658] can0: slcan on ttyS3. [ 1938.105056][T22658] can0 (unregistered): slcan off ttyS3. [ 1938.118187][T22660] can0: slcan on ttyS3. [ 1939.004436][T22654] can0 (unregistered): slcan off ttyS3. [ 1939.237457][T22605] chnl_net:caif_netlink_parms(): no params data found [ 1940.787846][T22674] slcan: can't register candev [ 1940.793164][T22674] Falling back ldisc for ttyS3. [ 1941.497146][ T5965] bridge_slave_1: left allmulticast mode [ 1941.505294][ T5965] bridge_slave_1: left promiscuous mode [ 1941.511076][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.537402][ T5965] bridge_slave_0: left allmulticast mode [ 1941.554857][ T5965] bridge_slave_0: left promiscuous mode [ 1941.560629][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.900261][ T5965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1941.922121][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1941.939817][ T5965] bond0 (unregistering): Released all slaves [ 1946.814291][T22697] slcan: can't register candev [ 1946.819532][T22697] Falling back ldisc for ttyS3. [ 1948.286127][ T5965] hsr_slave_0: left promiscuous mode [ 1948.334085][ T5965] hsr_slave_1: left promiscuous mode [ 1948.364656][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1948.572925][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1950.913313][T22720] slcan: can't register candev [ 1950.918416][T22720] Falling back ldisc for ttyS3. [ 1951.508767][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1951.520556][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1951.534543][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1951.593783][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1951.609678][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1953.712878][ T5160] Bluetooth: hci2: command tx timeout [ 1954.101732][ T5965] team0 (unregistering): Port device team_slave_1 removed [ 1954.151465][T22750] loop4: detected capacity change from 0 to 2048 [ 1954.222021][ T5965] team0 (unregistering): Port device team_slave_0 removed [ 1954.505434][T22752] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1954.977633][T22741] slcan: can't register candev [ 1955.011659][T22741] Falling back ldisc for ttyS3. [ 1955.646231][T22605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.672800][T22605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.680090][T22605] bridge_slave_0: entered allmulticast mode [ 1955.698797][T22605] bridge_slave_0: entered promiscuous mode [ 1955.897264][ T5160] Bluetooth: hci2: command tx timeout [ 1955.940210][T22605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.782661][T22605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.789973][T22605] bridge_slave_1: entered allmulticast mode [ 1956.799539][T22605] bridge_slave_1: entered promiscuous mode [ 1956.819382][T22763] can0: slcan on ttyS3. [ 1957.042748][T22764] can0 (unregistered): slcan off ttyS3. [ 1958.052733][ T5160] Bluetooth: hci2: command tx timeout [ 1959.377483][T22605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.454018][T22605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1960.074310][ T5160] Bluetooth: hci2: command tx timeout [ 1961.176716][T22605] team0: Port device team_slave_0 added [ 1961.218304][T22783] can0: slcan on ttyS3. [ 1961.432155][T22605] team0: Port device team_slave_1 added [ 1961.797694][T22785] can0 (unregistered): slcan off ttyS3. [ 1962.014383][T22605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1962.066826][T22605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1962.212152][T22605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1962.250626][T22605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.298872][T22605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.303405][T22605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1963.489384][T22605] hsr_slave_0: entered promiscuous mode [ 1963.503859][T22605] hsr_slave_1: entered promiscuous mode [ 1963.513324][T22605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1963.525273][T22605] Cannot create hsr debugfs directory [ 1963.925764][T22805] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3867'. [ 1968.401089][T22730] chnl_net:caif_netlink_parms(): no params data found [ 1968.733810][T22827] loop4: detected capacity change from 0 to 2048 [ 1970.457329][T22837] slcan: can't register candev [ 1970.462962][T22837] Falling back ldisc for ttyS3. [ 1970.488487][T22730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.718946][T22730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.754570][T22730] bridge_slave_0: entered allmulticast mode [ 1970.815419][T22730] bridge_slave_0: entered promiscuous mode [ 1970.855226][T22730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.877348][T22730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.891238][T22730] bridge_slave_1: entered allmulticast mode [ 1970.903377][T22730] bridge_slave_1: entered promiscuous mode [ 1971.899989][T22849] slcan: can't register candev [ 1971.905213][T22849] Falling back ldisc for ttyS3. [ 1973.725507][T22730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1974.061628][T22730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1974.806610][ T5965] bridge_slave_1: left allmulticast mode [ 1974.829195][ T5965] bridge_slave_1: left promiscuous mode [ 1974.867921][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.147641][ T5965] bridge_slave_0: left allmulticast mode [ 1975.942274][ T5965] bridge_slave_0: left promiscuous mode [ 1975.949656][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.395373][T22872] loop2: detected capacity change from 0 to 2048 [ 1977.447149][T22862] slcan: can't register candev [ 1977.590184][T22862] Falling back ldisc for ttyS3. [ 1977.805254][ T5965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1977.839280][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1977.872783][ T5965] bond0 (unregistering): Released all slaves [ 1977.994783][T22730] team0: Port device team_slave_0 added [ 1978.017951][T22730] team0: Port device team_slave_1 added [ 1980.832500][ T5965] hsr_slave_0: left promiscuous mode [ 1980.934401][T22896] loop0: detected capacity change from 0 to 2048 [ 1980.941322][ T5965] hsr_slave_1: left promiscuous mode [ 1980.947638][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.043311][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.358573][T22906] slcan: can't register candev [ 1982.364571][T22906] Falling back ldisc for ttyS3. [ 1983.525294][T22913] slcan: can't register candev [ 1984.162136][T22913] Falling back ldisc for ttyS3. [ 1984.645289][ T5965] team0 (unregistering): Port device team_slave_1 removed [ 1984.857986][T22925] loop2: detected capacity change from 0 to 2048 [ 1984.944089][ T5965] team0 (unregistering): Port device team_slave_0 removed [ 1985.606883][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.613370][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1987.064089][T22730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.095403][T22730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.131570][T22730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1987.193379][T22730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1987.230669][T22730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.300965][T22730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1987.598302][T22730] hsr_slave_0: entered promiscuous mode [ 1987.620472][T22730] hsr_slave_1: entered promiscuous mode [ 1987.670166][T22730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1987.714218][T22730] Cannot create hsr debugfs directory [ 1988.150347][T22940] loop4: detected capacity change from 0 to 2048 [ 1989.480089][T22948] page: refcount:3 mapcount:0 mapping:ffff888024276ff8 index:0x2 pfn:0x340ea [ 1989.489069][T22948] memcg:ffff88814049b400 [ 1989.493375][T22948] aops:def_blk_aops ino:fa00000 [ 1989.498246][T22948] flags: 0xfff6800000003d(locked|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 1989.509233][T22948] raw: 00fff6800000003d ffffea0000d03ac8 ffff88801caeb460 ffff888024276ff8 [ 1989.517920][T22948] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88814049b400 [ 1989.526998][T22948] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 1989.535173][T22948] page_owner tracks the page as allocated [ 1989.540908][T22948] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 22948, tgid 22947 (syz.0.3904), ts 1989414134961, free_ts 1987697097432 [ 1989.561930][T22948] post_alloc_hook+0x1c0/0x230 [ 1989.566788][T22948] get_page_from_freelist+0x1321/0x3890 [ 1989.572606][T22948] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1989.578536][T22948] alloc_pages_mpol+0x1fb/0x550 [ 1989.583471][T22948] folio_alloc_noprof+0x20/0x2d0 [ 1989.588462][T22948] filemap_alloc_folio_noprof+0x3a1/0x470 [ 1989.594257][T22948] page_cache_ra_order+0x4c0/0xd00 [ 1989.599388][T22948] filemap_fault+0x1465/0x26c0 [ 1989.604192][T22948] __do_fault+0x10d/0x490 [ 1989.609187][T22948] __handle_mm_fault+0x3c2a/0x5490 [ 1989.614333][T22948] handle_mm_fault+0x589/0xd10 [ 1989.619108][T22948] do_user_addr_fault+0x7a6/0x1370 [ 1989.624327][T22948] exc_page_fault+0x5c/0xb0 [ 1989.628862][T22948] asm_exc_page_fault+0x26/0x30 [ 1989.633765][T22948] page last free pid 22702 tgid 22702 stack trace: [ 1989.640264][T22948] __free_frozen_pages+0x7fe/0x1180 [ 1989.645532][T22948] qlist_free_all+0x4d/0x120 [ 1989.650146][T22948] kasan_quarantine_reduce+0x195/0x1e0 [ 1989.655840][T22948] __kasan_slab_alloc+0x69/0x90 [ 1989.660709][T22948] __kmalloc_noprof+0x1d4/0x510 [ 1989.665618][T22948] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1989.671186][T22948] tomoyo_path_perm+0x274/0x460 [ 1989.676528][T22948] security_inode_getattr+0x116/0x290 [ 1989.681930][T22948] vfs_fstat+0x4b/0xe0 [ 1989.686073][T22948] __do_sys_newfstat+0x87/0x100 [ 1989.690968][T22948] do_syscall_64+0xcd/0x4c0 [ 1989.695550][T22948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.701741][T22948] ------------[ cut here ]------------ [ 1989.707248][T22948] kernel BUG at mm/filemap.c:3442! [ 1989.713100][T22948] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1989.719631][T22948] CPU: 0 UID: 0 PID: 22948 Comm: syz.0.3904 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1989.731709][T22948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1989.741775][T22948] RIP: 0010:filemap_fault+0x1847/0x26c0 [ 1989.747369][T22948] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00 [ 1989.766992][T22948] RSP: 0018:ffffc9000b0bf5b8 EFLAGS: 00010246 [ 1989.773071][T22948] RAX: 0000000000080000 RBX: ffffea0000d03a80 RCX: ffffc90018134000 [ 1989.781047][T22948] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff88802c365e44 [ 1989.789022][T22948] RBP: ffffc9000b0bf7e8 R08: 0000000000000001 R09: 0000000000000000 [ 1989.796995][T22948] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888024276ff8 [ 1989.804967][T22948] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1989.812950][T22948] FS: 00007f09cbc1d6c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 1989.822072][T22948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1989.828659][T22948] CR2: 0000200000001bc5 CR3: 000000005e847000 CR4: 0000000000350ef0 [ 1989.836640][T22948] Call Trace: [ 1989.839920][T22948] [ 1989.842857][T22948] ? __pfx_filemap_fault+0x10/0x10 [ 1989.847992][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1989.853644][T22948] __do_fault+0x10d/0x490 [ 1989.857987][T22948] __handle_mm_fault+0x3c2a/0x5490 [ 1989.863126][T22948] ? __pfx___handle_mm_fault+0x10/0x10 [ 1989.868592][T22948] ? __pfx_mt_find+0x10/0x10 [ 1989.873201][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1989.878845][T22948] ? find_vma+0xbf/0x140 [ 1989.883105][T22948] ? __pfx_find_vma+0x10/0x10 [ 1989.887800][T22948] handle_mm_fault+0x589/0xd10 [ 1989.892685][T22948] ? __pkru_allows_pkey+0x51/0xb0 [ 1989.897731][T22948] do_user_addr_fault+0x7a6/0x1370 [ 1989.902865][T22948] ? __lock_acquire+0xb8a/0x1c90 [ 1989.907826][T22948] ? rcu_is_watching+0x12/0xc0 [ 1989.912606][T22948] exc_page_fault+0x5c/0xb0 [ 1989.917130][T22948] asm_exc_page_fault+0x26/0x30 [ 1989.921986][T22948] RIP: 0010:_copy_from_user+0x93/0xd0 [ 1989.927381][T22948] Code: 02 e2 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 79 ee 47 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 95 fd [ 1989.947260][T22948] RSP: 0018:ffffc9000b0bfa80 EFLAGS: 00050246 [ 1989.953331][T22948] RAX: 0000000000000001 RBX: 0000200000001bc5 RCX: 0000000000000001 [ 1989.961307][T22948] RDX: ffffed1006102d21 RSI: 0000200000001bc5 RDI: ffff888030816905 [ 1989.969281][T22948] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed1006102d20 [ 1989.977254][T22948] R10: ffff888030816905 R11: 0000000000000001 R12: 0000000000000000 [ 1989.985245][T22948] R13: ffff888030816905 R14: dffffc0000000000 R15: 0000200000001bc5 [ 1989.993233][T22948] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1989.998890][T22948] snd_rawmidi_write+0x26e/0xc10 [ 1990.003847][T22948] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1990.009323][T22948] ? __pfx_default_wake_function+0x10/0x10 [ 1990.015150][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1990.020799][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1990.026445][T22948] ? security_file_permission+0x71/0x210 [ 1990.032111][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1990.037762][T22948] ? rw_verify_area+0xcf/0x680 [ 1990.042543][T22948] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1990.048028][T22948] vfs_writev+0x5df/0xde0 [ 1990.052383][T22948] ? __pfx_vfs_writev+0x10/0x10 [ 1990.057243][T22948] ? kmem_cache_free+0x2d1/0x4d0 [ 1990.062192][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1990.067847][T22948] ? __fget_files+0x20e/0x3c0 [ 1990.072549][T22948] ? do_writev+0x28c/0x340 [ 1990.077239][T22948] do_writev+0x28c/0x340 [ 1990.081507][T22948] ? __pfx_do_writev+0x10/0x10 [ 1990.086289][T22948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1990.091937][T22948] do_syscall_64+0xcd/0x4c0 [ 1990.096468][T22948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.102376][T22948] RIP: 0033:0x7f09cad8e929 [ 1990.106795][T22948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1990.126408][T22948] RSP: 002b:00007f09cbc1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1990.134833][T22948] RAX: ffffffffffffffda RBX: 00007f09cafb5fa0 RCX: 00007f09cad8e929 [ 1990.142804][T22948] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 1990.150774][T22948] RBP: 00007f09cae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1990.158746][T22948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1990.166717][T22948] R13: 0000000000000000 R14: 00007f09cafb5fa0 R15: 00007ffe00c2aad8 [ 1990.174702][T22948] [ 1990.177713][T22948] Modules linked in: [ 1990.182354][T22948] ---[ end trace 0000000000000000 ]--- [ 1990.187825][T22948] RIP: 0010:filemap_fault+0x1847/0x26c0 [ 1990.193417][T22948] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00 [ 1990.213089][T22948] RSP: 0018:ffffc9000b0bf5b8 EFLAGS: 00010246 [ 1990.219161][T22948] RAX: 0000000000080000 RBX: ffffea0000d03a80 RCX: ffffc90018134000 [ 1990.227538][T22948] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff88802c365e44 [ 1990.235620][T22948] RBP: ffffc9000b0bf7e8 R08: 0000000000000001 R09: 0000000000000000 [ 1990.243624][T22948] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888024276ff8 [ 1990.251624][T22948] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1990.259633][T22948] FS: 00007f09cbc1d6c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 1990.268606][T22948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1990.275216][T22948] CR2: 0000200000001bc5 CR3: 000000005e847000 CR4: 0000000000350ef0 [ 1990.283220][T22948] Kernel panic - not syncing: Fatal exception [ 1990.289720][T22948] Kernel Offset: disabled [ 1990.294045][T22948] Rebooting in 86400 seconds..