last executing test programs: 15m38.164480436s ago: executing program 32 (id=62): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x470, 0xffffffff, 0xffffffff, 0x470, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x3a, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x7}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'virt_wifi0\x00', {0x3ff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 15m10.918367377s ago: executing program 33 (id=188): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}}}, 0x0) 14m28.303615945s ago: executing program 34 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 13m44.253958184s ago: executing program 35 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) truncate(&(0x7f00000000c0)='./file1\x00', 0x8005) 12m0.505030762s ago: executing program 36 (id=516): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) 11m5.471286442s ago: executing program 37 (id=630): r0 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x9}, 0x2c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 10m58.8661376s ago: executing program 38 (id=673): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000200)=@ll={0x11, 0xfa, r3, 0x1, 0x7, 0x6, @multicast}, 0x80, 0x0}, 0x810) sendmsg$nl_route(r0, &(0x7f0000019340)={&(0x7f0000019280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019300)={&(0x7f00000192c0)=@getnexthop={0x20, 0x6a, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4000c084) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 8m47.623975363s ago: executing program 39 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6m36.495851205s ago: executing program 8 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x700, 0x0, 0x8, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0xe, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x2, [{@broadcast, 0x10001}]}, @noop, @ssrr={0x89, 0x7, 0x96, [@multicast1]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r1, 0x25, 0x0, @val=@iter={&(0x7f0000000480)=@map_fd=r2, 0x10}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a4693989c36ffffffffffffd0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1530f8d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c11090000000000000000b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117fcb8ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17911540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc240000000000127535a468702cac97b6b82a6e65d4cf1200"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 6m35.167974645s ago: executing program 8 (id=1155): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000180)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,rodir,iocharset=utf8,utf8=0,iocharset=mabcyrillic,shortname=win95,codepage=936,uni_xlate=0,shortname=lower,utf8=0,utf8=0,discard,iocharset=maccroatian,rodir,uni_xlate=1,\x00'], 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) connect$caif(r3, &(0x7f0000000040)=@dbg={0x25, 0x81, 0xff}, 0x18) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x9f, &(0x7f0000001040), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000440)=""/252, 0x26, 0xfc, 0x1, 0x72b7, 0x10000, @value}, 0x28) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, 0xffffffffffffffff) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xc7, &(0x7f00000002c0), &(0x7f0000000080)=0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x78ee, 0xae0f, 0x20000130, 0x20000160, 0x0, 0xfffffffffffffffc], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r8]}, 0x8f) 6m30.793869549s ago: executing program 8 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r4 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000015c0), 0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) sendmsg$inet(r5, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 6m29.733402245s ago: executing program 8 (id=1165): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 6m28.067187419s ago: executing program 8 (id=1169): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x40, 0x0, 0x46, {0x46, 0x23, "f20c734094415107f002a496207189cde820f00ff946bc9ec098e5380d8e28774f08a6386b56c372271183dd536e0830f1a1663f3963c331718d15dfdec1516382c50ef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 6m25.640229105s ago: executing program 8 (id=1176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x40, 0x0, 0x46, {0x46, 0x23, "f20c734094415107f002a496207189cde820f00ff946bc9ec098e5380d8e28774f08a6386b56c372271183dd536e0830f1a1663f3963c331718d15dfdec1516382c50ef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 6m10.516608917s ago: executing program 40 (id=1176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x40, 0x0, 0x46, {0x46, 0x23, "f20c734094415107f002a496207189cde820f00ff946bc9ec098e5380d8e28774f08a6386b56c372271183dd536e0830f1a1663f3963c331718d15dfdec1516382c50ef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3m57.806049389s ago: executing program 3 (id=1412): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x8c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r3, 0x800) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r6]) syz_open_procfs(0x0, 0x0) 3m55.070205412s ago: executing program 3 (id=1416): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r6, r7+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r5, 0x0, 0x10) sendmmsg$inet(r4, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 3m45.722965858s ago: executing program 3 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r6, &(0x7f00000015c0), 0x0) pidfd_getfd(r5, r3, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) sendmsg$inet(r7, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 3m43.526150162s ago: executing program 3 (id=1437): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x23000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = dup3(r1, r7, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3m42.080009615s ago: executing program 3 (id=1440): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 3m38.261835704s ago: executing program 3 (id=1448): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 3m37.099152173s ago: executing program 5 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x0, @val=@iter={&(0x7f0000000480)=@map_fd=r1, 0x10}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fbac141416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3m35.251829592s ago: executing program 5 (id=1454): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x3) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117200000000008510000002000000850000000900000095000004000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x7fffffb}, 0x10) 3m32.721862201s ago: executing program 5 (id=1459): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 3m31.070446447s ago: executing program 5 (id=1463): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x23000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = dup3(r1, r7, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3m29.219830096s ago: executing program 5 (id=1465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x0, @val=@iter={&(0x7f0000000480)=@map_fd=r1, 0x10}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3m28.151666253s ago: executing program 5 (id=1467): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 3m22.423523242s ago: executing program 41 (id=1448): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 3m12.99490257s ago: executing program 42 (id=1467): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 2m23.284622537s ago: executing program 2 (id=1566): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, 0x0) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 2m19.159469153s ago: executing program 2 (id=1571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r6, &(0x7f00000015c0), 0x0) pidfd_getfd(r5, r3, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) sendmsg$inet(r7, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) 2m17.34488327s ago: executing program 2 (id=1575): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x23000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = dup3(r1, r7, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2m15.668258537s ago: executing program 2 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r6, &(0x7f00000015c0), 0x0) pidfd_getfd(r5, r3, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) sendmsg$inet(r7, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) 2m12.940280309s ago: executing program 2 (id=1580): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, 0x0}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 2m11.695692459s ago: executing program 2 (id=1584): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m56.628037565s ago: executing program 43 (id=1584): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m44.739421941s ago: executing program 4 (id=1623): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m42.818803691s ago: executing program 4 (id=1627): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m37.481275564s ago: executing program 4 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x700, 0x0, 0x8, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0xe, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x2, [{@broadcast, 0x10001}]}, @noop, @ssrr={0x89, 0x7, 0x96, [@multicast1]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000002c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1m35.8203863s ago: executing program 4 (id=1633): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240), 0x0, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m31.772645544s ago: executing program 4 (id=1636): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}], 0x2, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m28.017360332s ago: executing program 4 (id=1640): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x2, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1m12.339020638s ago: executing program 44 (id=1640): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x2, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 24.966981989s ago: executing program 6 (id=1711): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {0x0}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{0x0}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 20.900867593s ago: executing program 7 (id=1716): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 19.78551772s ago: executing program 6 (id=1717): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x5, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 19.78117925s ago: executing program 1 (id=1718): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}}) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) 17.504529776s ago: executing program 1 (id=1720): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980), 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 16.329989194s ago: executing program 9 (id=1721): syz_open_dev$vim2m(&(0x7f0000001f40), 0x4, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x2}}, 0x14) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x1400}, {r6, 0x600}], 0x2, 0x0, &(0x7f0000000300)={[0x3f16]}, 0x8) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0xa6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) unshare(0x20600) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20183, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1263, 0x0) write$binfmt_script(r2, 0x0, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000340)="61f87cabd269f19866ad255b5d8de87867eb3cff71", 0x15}], 0x1, 0x4) 15.170999282s ago: executing program 7 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock '], 0x9) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0x2000, 0xedfa}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, {0x600, 0x0, 0x28, 0x0, @gue={{0x1, 0x1, 0x0, 0xbc, 0x100, @void}, "dc4af54d683031622a519e0f7ec781c37954a9950463128538142832"}}}}}}}, 0x52) 15.139261583s ago: executing program 6 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) 14.182665928s ago: executing program 6 (id=1726): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e}, 0x80) 13.518393578s ago: executing program 9 (id=1727): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x40, 0x0, 0x46, {0x46, 0x23, "f20c734094415107f002a496207189cde820f00ff946bc9ec098e5380d8e28774f08a6386b56c372271183dd536e0830f1a1663f3963c331718d15dfdec1516382c50ef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 9.56185167s ago: executing program 1 (id=1728): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x80) 9.341106174s ago: executing program 0 (id=1729): r0 = syz_open_dev$vim2m(&(0x7f0000001f40), 0x4, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) write$P9_RSYMLINK(r2, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x2}}, 0x14) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x1400}, {r6, 0x600}], 0x2, 0x0, &(0x7f0000000300)={[0x3f16]}, 0x8) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0xa6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) unshare(0x20600) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20183, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1263, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340)="61f87cabd269f19866ad255b5d8de87867eb3cff71", 0x15}], 0x1, 0x4) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 9.302518904s ago: executing program 6 (id=1730): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x3000882, &(0x7f0000000000)={[{@dax_inode}, {@usrjquota, 0x22}, {@lazytime}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}]}, 0xfb, 0x462, &(0x7f00000004c0)="$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") write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x7ab8) 8.355305099s ago: executing program 7 (id=1731): syz_open_dev$vim2m(&(0x7f0000001f40), 0x4, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x2}}, 0x14) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") 7.933180835s ago: executing program 9 (id=1732): socket(0x400000000010, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffe93, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000380)=@v={0x93, 0x7, 0x0, 0x15, @MIDI_NOTEON=@special, 0x9a, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8) listen(r5, 0x3) accept(r5, &(0x7f0000000040)=@qipcrtr, 0x0) 6.835106113s ago: executing program 1 (id=1733): socket(0x400000000010, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffe93, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000380)=@v={0x93, 0x7, 0x0, 0x15, @MIDI_NOTEON=@special, 0x9a, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8) listen(r5, 0x3) accept(r5, &(0x7f0000000040)=@qipcrtr, 0x0) 6.830471423s ago: executing program 0 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.780912163s ago: executing program 9 (id=1735): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 4.070072726s ago: executing program 0 (id=1736): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980), 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 4.065718736s ago: executing program 9 (id=1737): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.041344537s ago: executing program 1 (id=1738): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba80000012", 0x2d}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 4.009948467s ago: executing program 7 (id=1739): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000680600fe8000000000000000000000000000bbfe8000000000000100000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780000130cdc790adb79b648fa01e8050e0000000700000007000000011e250562c2f463ba57ef1d4b08ed97f7769056dc08777d9b19e8a2a44a86a5a4377d11bf391312c17f606abad57de40134d3d735eb1d8d000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) recvmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2}, 0x2}], 0x2, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x2a000400) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) close(r7) socket$inet_udplite(0x2, 0x2, 0x88) 3.883283159s ago: executing program 6 (id=1740): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x5, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 2.752593297s ago: executing program 0 (id=1741): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1.480006747s ago: executing program 0 (id=1742): r0 = syz_open_dev$vim2m(&(0x7f0000001f40), 0x4, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x2}}, 0x14) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x1400}, {r6, 0x600}], 0x2, 0x0, &(0x7f0000000300)={[0x3f16]}, 0x8) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0xa6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) unshare(0x20600) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20183, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1263, 0x0) write$binfmt_script(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 1.069820833s ago: executing program 7 (id=1743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 222.248846ms ago: executing program 0 (id=1744): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x40, 0x0, 0x46, {0x46, 0x23, "f20c734094415107f002a496207189cde820f00ff946bc9ec098e5380d8e28774f08a6386b56c372271183dd536e0830f1a1663f3963c331718d15dfdec1516382c50ef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 171.247347ms ago: executing program 7 (id=1745): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xffffff00}) write$sndseq(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000a40)=""/89, 0x59}, {0x0}, {0x0}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/76, 0x4c}, 0x1a2b}, {{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/164, 0xa4}, 0x7ff}], 0x3, 0x10023, &(0x7f0000001400)={r7, r8+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sequencer(r6, 0x0, 0x10) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x80) 142.590187ms ago: executing program 1 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_pidfd_open(r4, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030312c6572726f72733d636f6e74696e75652c696f636861727365743d63703837342c696e746567726974792c696f636861727365743d63703836322c6e6f646973636172642c696f636861727365743d637038363600646973636172643d3078303030303030303030303030383030302c7559e75a52f06d61736b3d3078376666666666666666666666666666662c756d61736b3d3078303030303030303030303030303030352c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d31332c6e6f696e746567726974792c64697363"], 0x1, 0x618a, &(0x7f0000007600)="$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") llistxattr(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) 0s ago: executing program 9 (id=1747): socket(0x400000000010, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffe93, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000380)=@v={0x93, 0x7, 0x0, 0x15, @MIDI_NOTEON=@special, 0x9a, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) kernel console output (not intermixed with test programs): ate [ 705.053606][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.091442][T10515] device bridge_slave_1 entered promiscuous mode [ 705.930605][T10582] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 705.989014][T10582] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1299'. [ 706.063133][T10515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.067972][T10515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.193928][T10515] team0: Port device team_slave_0 added [ 706.210049][T10515] team0: Port device team_slave_1 added [ 706.323617][T10515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.325482][T10515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.367878][T10515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.037477][T10515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.039578][T10515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.046756][T10515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.050461][ T3607] Bluetooth: hci0: command 0x040f tx timeout [ 708.185809][T10598] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 708.188068][T10598] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1302'. [ 708.244781][T10515] device hsr_slave_0 entered promiscuous mode [ 708.279535][T10515] device hsr_slave_1 entered promiscuous mode [ 708.319126][T10515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.321752][T10515] Cannot create hsr debugfs directory [ 708.713248][T10607] binder: 10603:10607 ioctl c0306201 0 returned -14 [ 708.717866][T10607] binder: BINDER_SET_CONTEXT_MGR already set [ 708.719774][T10607] binder: 10603:10607 ioctl 4018620d 20000040 returned -16 [ 708.722410][T10607] binder: 10603:10607 context manager tried to acquire desc 0 [ 708.724397][T10607] binder: 10603:10607 ioctl c0306201 200003c0 returned -22 [ 708.727132][T10607] binder: 10603:10607 got transaction to invalid handle, 1 [ 708.729224][T10607] binder: 10603:10607 transaction failed 29201/-22, size 0-24 line 2917 [ 709.153606][ T3607] Bluetooth: hci0: command 0x0419 tx timeout [ 709.170303][T10515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.226719][T10515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.299151][ T4072] binder: undelivered TRANSACTION_ERROR: 29201 [ 709.403141][T10614] loop2: detected capacity change from 0 to 256 [ 709.471553][T10515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.550130][T10621] netlink: 'syz.5.1306': attribute type 1 has an invalid length. [ 709.552298][T10621] netlink: 'syz.5.1306': attribute type 4 has an invalid length. [ 709.554259][T10621] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1306'. [ 709.679388][T10614] FAT-fs (loop2): Directory bread(block 64) failed [ 709.681334][T10614] FAT-fs (loop2): Directory bread(block 65) failed [ 709.683305][T10614] FAT-fs (loop2): Directory bread(block 66) failed [ 709.685150][T10614] FAT-fs (loop2): Directory bread(block 67) failed [ 709.686932][T10614] FAT-fs (loop2): Directory bread(block 68) failed [ 709.688662][T10614] FAT-fs (loop2): Directory bread(block 69) failed [ 709.727272][T10614] FAT-fs (loop2): Directory bread(block 70) failed [ 710.301155][T10614] FAT-fs (loop2): Directory bread(block 71) failed [ 710.387414][T10614] FAT-fs (loop2): Directory bread(block 72) failed [ 710.422054][T10515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.439127][T10614] FAT-fs (loop2): Directory bread(block 73) failed [ 710.748196][T10515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 714.258084][T10645] udc-core: couldn't find an available UDC or it's busy [ 714.270769][T10639] netlink: 'syz.5.1310': attribute type 10 has an invalid length. [ 714.272992][T10639] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1310'. [ 714.276421][T10515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 714.294571][T10515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 714.317302][T10645] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 715.909789][T10658] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 715.912023][T10658] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1312'. [ 716.020951][T10515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 716.070372][T10664] udc-core: couldn't find an available UDC or it's busy [ 716.072388][T10664] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 717.634598][T10515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.645359][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 717.648147][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.764816][T10515] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.800590][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 717.803730][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.806652][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.808539][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.857744][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 718.900269][T10682] netlink: 'syz.5.1318': attribute type 10 has an invalid length. [ 718.902508][T10682] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1318'. [ 718.907359][T10685] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 718.909845][T10685] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1319'. [ 718.916330][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 718.923197][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.925950][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.928716][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.950546][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 718.958249][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 718.982539][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 718.988853][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 718.996354][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 719.000537][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 719.003525][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 719.006592][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 719.035488][T10515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.043161][T10515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 719.052782][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 719.055495][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 719.060647][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 721.277197][T10712] udc-core: couldn't find an available UDC or it's busy [ 721.282649][T10712] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 721.513953][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 721.516147][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.544841][T10515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.608294][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 723.181933][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.184969][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.268120][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 723.273054][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 723.286436][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 723.293623][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 723.311343][T10515] device veth0_vlan entered promiscuous mode [ 723.312347][T10729] loop5: detected capacity change from 0 to 512 [ 723.352245][T10729] EXT4-fs (loop5): Ignoring removed oldalloc option [ 723.358663][T10729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 723.395683][T10729] EXT4-fs (loop5): 1 truncate cleaned up [ 723.397584][T10729] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 723.408371][T10515] device veth1_vlan entered promiscuous mode [ 723.528868][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 723.532265][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 723.535097][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 723.548630][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 723.746312][T10515] device veth0_macvtap entered promiscuous mode [ 723.759754][T10515] device veth1_macvtap entered promiscuous mode [ 723.792484][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.795500][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.798235][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.809173][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.811783][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.814590][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.817207][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.837824][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.845980][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.856678][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.868568][T10515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.876846][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 723.879701][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 723.882382][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 723.891440][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 723.913465][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.916414][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.919677][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.925863][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.932889][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.939890][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.945971][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.952208][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.958324][T10515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.966848][T10515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.974676][T10515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.992096][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 723.995300][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.005421][T10515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.007980][T10515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.014001][T10515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.022877][T10515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.224907][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.228132][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.236039][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 724.364394][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.366769][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.401479][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 725.735342][T10751] netlink: 'syz.5.1328': attribute type 10 has an invalid length. [ 725.737645][T10751] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1328'. [ 725.862747][T10764] loop6: detected capacity change from 0 to 128 [ 726.116742][T10764] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 728.065417][T10783] udc-core: couldn't find an available UDC or it's busy [ 728.067357][T10783] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 731.331222][T10804] binder: 10791:10804 ioctl c0306201 0 returned -14 [ 731.348280][T10804] binder: BINDER_SET_CONTEXT_MGR already set [ 731.350018][T10804] binder: 10791:10804 ioctl 4018620d 20000040 returned -16 [ 731.354506][T10804] binder: 10791:10804 context manager tried to acquire desc 0 [ 731.356604][T10804] binder: 10791:10804 ioctl c0306201 200003c0 returned -22 [ 731.360006][T10804] binder: 10791:10804 got transaction to invalid handle, 1 [ 731.362112][T10804] binder: 10791:10804 transaction failed 29201/-22, size 0-24 line 2917 [ 731.770969][ T4072] binder: undelivered TRANSACTION_ERROR: 29201 [ 731.790024][T10803] udc-core: couldn't find an available UDC or it's busy [ 731.791991][T10803] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 731.809642][T10805] udc-core: couldn't find an available UDC or it's busy [ 731.811673][T10805] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 732.908472][T10820] udc-core: couldn't find an available UDC or it's busy [ 733.020348][T10820] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 734.504498][T10825] loop3: detected capacity change from 0 to 128 [ 734.713712][ T4801] device hsr_slave_0 left promiscuous mode [ 734.792530][ T4801] device hsr_slave_1 left promiscuous mode [ 734.795195][T10838] loop2: detected capacity change from 0 to 512 [ 735.730858][T10838] EXT4-fs (loop2): Ignoring removed oldalloc option [ 735.732747][T10838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 735.750146][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.752142][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.756000][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.758752][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.765441][ T4801] device bridge_slave_1 left promiscuous mode [ 735.768844][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.873467][ T4801] device bridge_slave_0 left promiscuous mode [ 735.875458][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.939856][T10838] EXT4-fs (loop2): 1 truncate cleaned up [ 735.941496][T10838] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 735.970040][T10825] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 735.999255][ T4801] device veth1_macvtap left promiscuous mode [ 736.000973][ T4801] device veth0_macvtap left promiscuous mode [ 736.490649][ T4801] device veth1_vlan left promiscuous mode [ 736.509252][ T4801] device veth0_vlan left promiscuous mode [ 736.948569][T10849] devpts: called with bogus options [ 736.989568][T10852] udc-core: couldn't find an available UDC or it's busy [ 737.013230][T10852] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 738.069420][T10863] loop2: detected capacity change from 0 to 128 [ 738.104608][T10863] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 738.342542][ T4801] team0 (unregistering): Port device team_slave_1 removed [ 738.352051][ T4801] team0 (unregistering): Port device team_slave_0 removed [ 738.361548][ T4801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.470968][T10866] devpts: called with bogus options [ 739.123678][ T4801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.306263][ T4801] bond0 (unregistering): Released all slaves [ 739.466169][T10856] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1349'. [ 740.548796][T10881] udc-core: couldn't find an available UDC or it's busy [ 740.551630][T10881] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 740.673680][T10884] Cannot find add_set index 0 as target [ 744.615979][T10910] udc-core: couldn't find an available UDC or it's busy [ 744.617975][T10910] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 744.642192][T10912] loop6: detected capacity change from 0 to 128 [ 745.451086][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.453177][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.458650][T10912] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.751939][T10929] loop5: detected capacity change from 0 to 128 [ 746.112336][T10935] devpts: called with bogus options [ 746.988024][T10929] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 748.602952][T10959] netlink: 'syz.6.1366': attribute type 10 has an invalid length. [ 748.605354][T10959] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1366'. [ 748.634806][ T7599] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 749.322130][T10972] loop5: detected capacity change from 0 to 128 [ 750.179298][ T7599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.182118][ T7599] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 750.184559][ T7599] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 750.186959][ T7599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.270282][T10972] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 750.285542][ T7599] usb 1-1: config 0 descriptor?? [ 750.563971][T10985] binder: 10975:10985 ioctl c0306201 0 returned -14 [ 750.709895][T10986] devpts: called with bogus options [ 751.085143][T10987] loop6: detected capacity change from 0 to 256 [ 751.094548][T10990] loop3: detected capacity change from 0 to 128 [ 751.113503][ T4110] usb 1-1: USB disconnect, device number 4 [ 751.142096][T10987] FAT-fs (loop6): Directory bread(block 64) failed [ 751.143944][T10987] FAT-fs (loop6): Directory bread(block 65) failed [ 751.169528][T10987] FAT-fs (loop6): Directory bread(block 66) failed [ 751.187266][T10987] FAT-fs (loop6): Directory bread(block 67) failed [ 751.317043][T10987] FAT-fs (loop6): Directory bread(block 68) failed [ 751.318933][T10987] FAT-fs (loop6): Directory bread(block 69) failed [ 752.226503][T10987] FAT-fs (loop6): Directory bread(block 70) failed [ 752.228442][T10987] FAT-fs (loop6): Directory bread(block 71) failed [ 752.302840][T10990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 752.337608][T10987] FAT-fs (loop6): Directory bread(block 72) failed [ 752.363440][T10987] FAT-fs (loop6): Directory bread(block 73) failed [ 752.374940][T11006] netlink: 'syz.5.1376': attribute type 10 has an invalid length. [ 752.377160][T11006] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1376'. [ 752.722372][T11011] devpts: called with bogus options [ 752.809598][ T7599] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 753.249491][ T7599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.252219][ T7599] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 753.254570][ T7599] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 753.257000][ T7599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.291175][ T7599] usb 1-1: config 0 descriptor?? [ 753.441303][T11016] loop3: detected capacity change from 0 to 128 [ 753.523453][T11016] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 753.851818][T11022] devpts: called with bogus options [ 754.601239][T11027] loop3: detected capacity change from 0 to 128 [ 754.657927][T11027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 755.043951][ T7599] usb 1-1: USB disconnect, device number 5 [ 755.821265][T11049] Cannot find add_set index 0 as target [ 757.493032][T11074] loop6: detected capacity change from 0 to 128 [ 757.625877][T11074] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 757.877044][T11080] Cannot find add_set index 0 as target [ 758.813072][T11085] binder: 11054:11085 ioctl c0306201 0 returned -14 [ 758.825262][T11085] binder: BINDER_SET_CONTEXT_MGR already set [ 758.826914][T11085] binder: 11054:11085 ioctl 4018620d 20000040 returned -16 [ 758.830194][T11085] binder: 11054:11085 context manager tried to acquire desc 0 [ 758.832346][T11085] binder: 11054:11085 ioctl c0306201 200003c0 returned -22 [ 758.834870][T11085] binder: 11054:11085 got transaction to invalid handle, 1 [ 758.836821][T11085] binder: 11054:11085 transaction failed 29201/-22, size 0-24 line 2917 [ 758.877517][T11092] loop5: detected capacity change from 0 to 128 [ 758.880353][T11091] loop3: detected capacity change from 0 to 128 [ 758.924074][T11091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 758.979033][T10186] binder: undelivered TRANSACTION_ERROR: 29201 [ 758.983918][T11092] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 760.688139][T11113] Cannot find add_set index 0 as target [ 760.695618][T11117] udc-core: couldn't find an available UDC or it's busy [ 760.702908][T11117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 761.030583][T11121] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 761.032704][T11121] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1391'. [ 761.035092][T11121] device team0 entered promiscuous mode [ 761.036621][T11121] device team_slave_0 entered promiscuous mode [ 761.038326][T11121] device team_slave_1 entered promiscuous mode [ 761.040278][T11121] bridge0: port 3(team0) entered blocking state [ 761.041971][T11121] bridge0: port 3(team0) entered disabled state [ 761.045165][T11121] bridge0: port 3(team0) entered blocking state [ 761.046925][T11121] bridge0: port 3(team0) entered forwarding state [ 762.310448][T11146] binder: 11136:11146 ioctl c0306201 0 returned -14 [ 762.326767][T11146] binder: BINDER_SET_CONTEXT_MGR already set [ 762.328455][T11146] binder: 11136:11146 ioctl 4018620d 20000040 returned -16 [ 762.332822][T11146] binder: 11136:11146 context manager tried to acquire desc 0 [ 762.334923][T11146] binder: 11136:11146 ioctl c0306201 200003c0 returned -22 [ 762.338841][T11146] binder: 11136:11146 got transaction to invalid handle, 1 [ 762.340913][T11146] binder: 11136:11146 transaction failed 29201/-22, size 0-24 line 2917 [ 762.858741][ T4110] binder: undelivered TRANSACTION_ERROR: 29201 [ 763.695882][T11154] binder: 11148:11154 ioctl c0306201 0 returned -14 [ 763.705781][T11154] binder: 11148:11154 context manager tried to acquire desc 0 [ 763.708292][T11154] binder: 11148:11154 ioctl c0306201 200003c0 returned -22 [ 763.714838][T11154] binder: 11148:11154 got transaction to invalid handle, 1 [ 763.716800][T11154] binder: 11148:11154 transaction failed 29201/-22, size 0-24 line 2917 [ 764.480407][ T5542] binder: undelivered TRANSACTION_ERROR: 29201 [ 765.270070][T11159] loop5: detected capacity change from 0 to 128 [ 765.423147][T11159] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 765.780318][T11167] binder: 11156:11167 ioctl c0306201 0 returned -14 [ 765.796799][T11167] binder: BINDER_SET_CONTEXT_MGR already set [ 765.798537][T11167] binder: 11156:11167 ioctl 4018620d 20000040 returned -16 [ 765.803141][T11167] binder: 11156:11167 context manager tried to acquire desc 0 [ 765.805313][T11167] binder: 11156:11167 ioctl c0306201 200003c0 returned -22 [ 765.809413][T11167] binder: 11156:11167 got transaction to invalid handle, 1 [ 765.811387][T11167] binder: 11156:11167 transaction failed 29201/-22, size 0-24 line 2917 [ 766.829906][ T4110] binder: undelivered TRANSACTION_ERROR: 29201 [ 767.695588][T11185] loop3: detected capacity change from 0 to 128 [ 767.780170][T11185] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 768.195152][T11193] devpts: called with bogus options [ 769.668116][T11213] loop3: detected capacity change from 0 to 128 [ 769.883012][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 769.908337][T11213] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 770.000004][T11219] binder: 11207:11219 ioctl c0306201 0 returned -14 [ 770.015781][T11219] binder: BINDER_SET_CONTEXT_MGR already set [ 770.017600][T11219] binder: 11207:11219 ioctl 4018620d 20000040 returned -16 [ 770.022081][T11219] binder: 11207:11219 context manager tried to acquire desc 0 [ 770.024329][T11219] binder: 11207:11219 ioctl c0306201 200003c0 returned -22 [ 770.028383][T11219] binder: 11207:11219 got transaction to invalid handle, 1 [ 770.030714][T11219] binder: 11207:11219 transaction failed 29201/-22, size 0-24 line 2917 [ 770.520173][T10187] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.891820][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.895245][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.898365][ T13] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 770.957235][T11224] devpts: called with bogus options [ 771.631813][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.650905][ T13] usb 1-1: config 0 descriptor?? [ 771.670898][T11228] loop2: detected capacity change from 0 to 128 [ 771.920276][T11228] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 772.376787][T11244] devpts: called with bogus options [ 773.193694][T11247] netlink: 'syz.6.1418': attribute type 10 has an invalid length. [ 773.195957][T11247] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1418'. [ 773.571790][ T4077] usb 1-1: USB disconnect, device number 6 [ 773.687121][T11251] loop6: detected capacity change from 0 to 256 [ 773.696047][T11243] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 773.698172][T11243] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1416'. [ 773.718738][T11253] loop2: detected capacity change from 0 to 128 [ 773.880007][T11251] FAT-fs (loop6): Directory bread(block 64) failed [ 773.904867][T11251] FAT-fs (loop6): Directory bread(block 65) failed [ 773.906813][T11251] FAT-fs (loop6): Directory bread(block 66) failed [ 773.908590][T11251] FAT-fs (loop6): Directory bread(block 67) failed [ 773.929426][T11251] FAT-fs (loop6): Directory bread(block 68) failed [ 773.931303][T11251] FAT-fs (loop6): Directory bread(block 69) failed [ 773.933057][T11251] FAT-fs (loop6): Directory bread(block 70) failed [ 773.934770][T11251] FAT-fs (loop6): Directory bread(block 71) failed [ 773.936563][T11251] FAT-fs (loop6): Directory bread(block 72) failed [ 773.938298][T11251] FAT-fs (loop6): Directory bread(block 73) failed [ 774.819594][T11253] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 775.159027][ T4072] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 775.462907][T11286] Cannot find add_set index 0 as target [ 776.067682][ T4072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.070709][ T4072] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 776.073165][ T4072] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 776.075541][ T4072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.096215][ T4072] usb 1-1: config 0 descriptor?? [ 776.488613][T11295] Cannot find add_set index 0 as target [ 777.243024][T11281] binder: 11280:11281 ioctl c0306201 0 returned -14 [ 777.249266][T11281] binder: 11280:11281 context manager tried to acquire desc 0 [ 777.251435][T11281] binder: 11280:11281 ioctl c0306201 200003c0 returned -22 [ 777.255362][T11281] binder: 11280:11281 got transaction to invalid handle, 1 [ 777.257392][T11281] binder: 11280:11281 transaction failed 29201/-22, size 0-24 line 2917 [ 777.399169][ T4072] binder: undelivered TRANSACTION_ERROR: 29201 [ 777.895178][ T4072] usb 1-1: USB disconnect, device number 7 [ 779.041298][T11304] netlink: 'syz.6.1427': attribute type 10 has an invalid length. [ 779.043526][T11304] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1427'. [ 779.055500][T11319] netlink: 'syz.5.1426': attribute type 10 has an invalid length. [ 779.057693][T11319] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1426'. [ 780.984124][T11327] netlink: 'syz.5.1431': attribute type 10 has an invalid length. [ 780.986327][T11327] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1431'. [ 783.175566][T11350] netlink: 'syz.0.1432': attribute type 10 has an invalid length. [ 783.177816][T11350] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1432'. [ 783.212312][T11353] loop5: detected capacity change from 0 to 128 [ 783.473086][T11353] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 783.948572][T11365] binder: 11354:11365 ioctl c0306201 0 returned -14 [ 784.743647][T11373] loop3: detected capacity change from 0 to 128 [ 784.883353][T11373] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 785.086502][T11380] netlink: 'syz.0.1439': attribute type 10 has an invalid length. [ 785.091693][T11380] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1439'. [ 785.906492][T11388] udc-core: couldn't find an available UDC or it's busy [ 785.908411][T11388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 788.625855][T11419] netlink: 'syz.5.1446': attribute type 10 has an invalid length. [ 788.628019][T11419] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1446'. [ 791.140505][T11433] netlink: 'syz.2.1449': attribute type 10 has an invalid length. [ 791.142689][T11433] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1449'. [ 791.205060][T11435] loop3: detected capacity change from 0 to 128 [ 791.904249][T11455] netlink: 'syz.0.1455': attribute type 10 has an invalid length. [ 791.906469][T11455] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1455'. [ 793.031709][T11435] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 794.226851][T11475] devpts: called with bogus options [ 794.384840][T11472] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 794.387203][T11472] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1458'. [ 794.641956][T11480] netlink: 'syz.5.1459': attribute type 10 has an invalid length. [ 794.644146][T11480] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1459'. [ 795.418197][T11487] loop2: detected capacity change from 0 to 256 [ 795.500180][T11486] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 795.519626][T11487] FAT-fs (loop2): Directory bread(block 64) failed [ 795.521424][T11487] FAT-fs (loop2): Directory bread(block 65) failed [ 795.523510][T11486] netlink: 'syz.0.1461': attribute type 4 has an invalid length. [ 795.525561][T11486] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1461'. [ 795.554008][T11487] FAT-fs (loop2): Directory bread(block 66) failed [ 795.555808][T11487] FAT-fs (loop2): Directory bread(block 67) failed [ 795.557558][T11487] FAT-fs (loop2): Directory bread(block 68) failed [ 795.594534][T11487] FAT-fs (loop2): Directory bread(block 69) failed [ 795.596351][T11487] FAT-fs (loop2): Directory bread(block 70) failed [ 795.598315][T11487] FAT-fs (loop2): Directory bread(block 71) failed [ 795.622092][T11487] FAT-fs (loop2): Directory bread(block 72) failed [ 795.624067][T11487] FAT-fs (loop2): Directory bread(block 73) failed [ 795.987257][T11499] binder: 11490:11499 ioctl c0306201 0 returned -14 [ 796.002127][T11499] binder: BINDER_SET_CONTEXT_MGR already set [ 796.003838][T11499] binder: 11490:11499 ioctl 4018620d 20000040 returned -16 [ 796.007905][T11499] binder: 11490:11499 context manager tried to acquire desc 0 [ 796.010117][T11499] binder: 11490:11499 ioctl c0306201 200003c0 returned -22 [ 796.014297][T11499] binder: 11490:11499 got transaction to invalid handle, 1 [ 796.016334][T11499] binder: 11490:11499 transaction failed 29201/-22, size 0-24 line 2917 [ 797.494990][T11500] netlink: 'syz.6.1464': attribute type 10 has an invalid length. [ 797.495240][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 797.497217][T11500] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1464'. [ 798.590029][T11516] loop5: detected capacity change from 0 to 128 [ 798.808376][T11516] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 799.681123][T11525] netlink: 'syz.6.1468': attribute type 10 has an invalid length. [ 799.683259][T11525] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1468'. [ 801.443536][T11547] devpts: called with bogus options [ 802.821956][T11561] netlink: 'syz.2.1475': attribute type 10 has an invalid length. [ 802.824049][T11561] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1475'. [ 804.448348][T11576] loop6: detected capacity change from 0 to 256 [ 804.539392][T11576] FAT-fs (loop6): Directory bread(block 64) failed [ 804.554373][T11576] FAT-fs (loop6): Directory bread(block 65) failed [ 804.556441][T11576] FAT-fs (loop6): Directory bread(block 66) failed [ 804.582200][T11576] FAT-fs (loop6): Directory bread(block 67) failed [ 804.584226][T11576] FAT-fs (loop6): Directory bread(block 68) failed [ 804.613442][T11576] FAT-fs (loop6): Directory bread(block 69) failed [ 804.616275][T11576] FAT-fs (loop6): Directory bread(block 70) failed [ 804.641511][T11576] FAT-fs (loop6): Directory bread(block 71) failed [ 804.643609][T11576] FAT-fs (loop6): Directory bread(block 72) failed [ 804.666755][T11576] FAT-fs (loop6): Directory bread(block 73) failed [ 807.313861][T11583] netlink: 'syz.2.1479': attribute type 10 has an invalid length. [ 807.316287][T11583] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1479'. [ 807.339934][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.356900][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.646990][T11605] loop6: detected capacity change from 0 to 256 [ 809.526150][T11580] lo speed is unknown, defaulting to 1000 [ 809.529203][T10237] Bluetooth: hci3: command 0x0409 tx timeout [ 809.573743][T11605] FAT-fs (loop6): Directory bread(block 64) failed [ 809.575592][T11605] FAT-fs (loop6): Directory bread(block 65) failed [ 809.577403][T11605] FAT-fs (loop6): Directory bread(block 66) failed [ 809.608325][T11605] FAT-fs (loop6): Directory bread(block 67) failed [ 809.672667][T11605] FAT-fs (loop6): Directory bread(block 68) failed [ 809.674531][T11605] FAT-fs (loop6): Directory bread(block 69) failed [ 809.676406][T11605] FAT-fs (loop6): Directory bread(block 70) failed [ 809.678158][T11605] FAT-fs (loop6): Directory bread(block 71) failed [ 809.701343][T11605] FAT-fs (loop6): Directory bread(block 72) failed [ 809.703212][T11605] FAT-fs (loop6): Directory bread(block 73) failed [ 811.609785][T10237] Bluetooth: hci3: command 0x041b tx timeout [ 812.827881][T11639] devpts: called with bogus options [ 813.058357][T11634] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 813.060795][T11634] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1488'. [ 813.576138][T11636] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 813.578480][T11636] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1490'. [ 813.710315][T10187] Bluetooth: hci3: command 0x040f tx timeout [ 813.754498][T11644] loop2: detected capacity change from 0 to 256 [ 813.887844][ T4315] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.968521][ T4315] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.991272][T11644] FAT-fs (loop2): Directory bread(block 64) failed [ 813.993199][T11644] FAT-fs (loop2): Directory bread(block 65) failed [ 813.995091][T11644] FAT-fs (loop2): Directory bread(block 66) failed [ 814.147203][T11644] FAT-fs (loop2): Directory bread(block 67) failed [ 814.260785][T11644] FAT-fs (loop2): Directory bread(block 68) failed [ 814.310336][T11644] FAT-fs (loop2): Directory bread(block 69) failed [ 814.355490][T11644] FAT-fs (loop2): Directory bread(block 70) failed [ 814.391906][T11644] FAT-fs (loop2): Directory bread(block 71) failed [ 814.438710][T11644] FAT-fs (loop2): Directory bread(block 72) failed [ 814.481391][T11644] FAT-fs (loop2): Directory bread(block 73) failed [ 815.769218][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 815.882586][ T4315] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.374050][T11667] netlink: 'syz.0.1495': attribute type 10 has an invalid length. [ 817.376780][T11667] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1495'. [ 817.497602][ T4315] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.849425][T10237] Bluetooth: hci2: command 0x0409 tx timeout [ 820.317125][T10187] Bluetooth: hci2: command 0x041b tx timeout [ 820.371147][T11580] chnl_net:caif_netlink_parms(): no params data found [ 820.374989][T11696] udc-core: couldn't find an available UDC or it's busy [ 820.377109][T11696] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 820.536325][T11692] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 820.538517][T11692] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1500'. [ 820.542210][T11693] netlink: 'syz.6.1501': attribute type 10 has an invalid length. [ 820.544328][T11693] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1501'. [ 820.662752][ T4315] tipc: Left network mode [ 820.664157][T11657] lo speed is unknown, defaulting to 1000 [ 820.723858][T11704] loop6: detected capacity change from 0 to 256 [ 820.898906][T11704] FAT-fs (loop6): Directory bread(block 64) failed [ 820.912686][T11704] FAT-fs (loop6): Directory bread(block 65) failed [ 820.924253][T11704] FAT-fs (loop6): Directory bread(block 66) failed [ 820.937008][T11704] FAT-fs (loop6): Directory bread(block 67) failed [ 820.961375][T11704] FAT-fs (loop6): Directory bread(block 68) failed [ 820.963387][T11704] FAT-fs (loop6): Directory bread(block 69) failed [ 820.965273][T11704] FAT-fs (loop6): Directory bread(block 70) failed [ 820.967254][T11704] FAT-fs (loop6): Directory bread(block 71) failed [ 820.969670][T11704] FAT-fs (loop6): Directory bread(block 72) failed [ 820.979319][T11704] FAT-fs (loop6): Directory bread(block 73) failed [ 821.109302][T11716] devpts: called with bogus options [ 824.019243][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.025576][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.028209][T11580] device bridge_slave_0 entered promiscuous mode [ 824.050299][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.054471][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.070046][T10237] Bluetooth: hci2: command 0x040f tx timeout [ 824.074465][T11580] device bridge_slave_1 entered promiscuous mode [ 824.085995][T11657] chnl_net:caif_netlink_parms(): no params data found [ 824.227602][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.243932][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.245994][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.248635][T11657] device bridge_slave_0 entered promiscuous mode [ 824.253611][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.262417][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.264311][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.266916][T11657] device bridge_slave_1 entered promiscuous mode [ 824.278359][T11580] team0: Port device team_slave_0 added [ 825.060994][T11580] team0: Port device team_slave_1 added [ 826.053036][ T3607] Bluetooth: hci0: command 0x0406 tx timeout [ 826.090069][ T4073] Bluetooth: hci2: command 0x0419 tx timeout [ 826.184273][T11756] loop2: detected capacity change from 0 to 128 [ 826.480772][T11756] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 826.492159][T11657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.602770][T11768] Cannot find add_set index 0 as target [ 827.191205][T11657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.348002][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.378634][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.384351][T11772] loop6: detected capacity change from 0 to 128 [ 827.386769][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.426583][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.513000][T11775] devpts: called with bogus options [ 828.191605][T11772] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 828.195110][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.229102][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.581494][T11780] devpts: called with bogus options [ 829.242826][T11657] team0: Port device team_slave_0 added [ 829.314245][T11783] loop2: detected capacity change from 0 to 128 [ 829.333387][T11657] team0: Port device team_slave_1 added [ 829.380297][T11657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.401989][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.410127][T11657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.414859][T11657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.416927][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.425335][T11657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.440477][T11783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 829.721443][T11580] device hsr_slave_0 entered promiscuous mode [ 829.760362][T11580] device hsr_slave_1 entered promiscuous mode [ 829.936028][T11580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.938423][T11580] Cannot create hsr debugfs directory [ 830.106181][T11799] Cannot find add_set index 0 as target [ 831.191187][T11657] device hsr_slave_0 entered promiscuous mode [ 831.547824][T11657] device hsr_slave_1 entered promiscuous mode [ 831.589103][T11657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.591362][T11657] Cannot create hsr debugfs directory [ 831.681968][T11801] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 831.684231][T11801] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1513'. [ 834.477519][T11816] netlink: 'syz.6.1519': attribute type 10 has an invalid length. [ 834.479773][T11816] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1519'. [ 834.482457][T11824] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 834.484502][T11824] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1518'. [ 834.486935][T11820] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 834.489615][T11820] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1517'. [ 835.981163][T11835] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 835.983430][T11835] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1521'. [ 835.997473][T11839] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 836.000323][T11839] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1520'. [ 837.553971][T11852] netlink: 'syz.0.1524': attribute type 10 has an invalid length. [ 837.556192][T11852] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1524'. [ 837.949597][T11858] devpts: called with bogus options [ 838.750915][T11859] netlink: 'syz.6.1526': attribute type 10 has an invalid length. [ 838.759182][T11859] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1526'. [ 838.970192][ T4315] device hsr_slave_0 left promiscuous mode [ 839.019280][ T4315] device hsr_slave_1 left promiscuous mode [ 839.802270][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.804395][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.825955][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.827976][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.843230][ T4315] rdma_rxe: ignoring netdev event = 10 for lo [ 839.997288][ T4315] device veth1_vlan left promiscuous mode [ 839.999044][ T4315] device veth0_vlan left promiscuous mode [ 841.040204][ T4315] infiniband syz0: set down [ 841.360865][ T4315] device team_slave_1 left promiscuous mode [ 841.366821][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 841.376777][ T4315] device team_slave_0 left promiscuous mode [ 841.380891][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 841.392944][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.447646][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.590791][ T4315] bond0 (unregistering): Released all slaves [ 841.602177][ T4313] smc: removing ib device syz0 [ 841.609602][T11867] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 841.611686][T11867] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1529'. [ 841.620343][ T6785] lo speed is unknown, defaulting to 1000 [ 841.797886][T11872] loop6: detected capacity change from 0 to 128 [ 841.902944][T11872] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 841.936955][T11874] tipc: Started in network mode [ 842.134551][T11874] tipc: Node identity 4, cluster identity 4711 [ 842.432215][T11874] tipc: Node number set to 4 [ 842.688770][T11886] udc-core: couldn't find an available UDC or it's busy [ 842.701394][T11886] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 843.011760][T11889] devpts: called with bogus options [ 845.193284][T11899] Cannot find add_set index 0 as target [ 845.489811][T11903] loop6: detected capacity change from 0 to 128 [ 845.725590][T11904] devpts: called with bogus options [ 845.738405][T11903] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 845.816279][T11580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 846.570655][T11580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 846.659399][T11915] loop2: detected capacity change from 0 to 128 [ 846.713615][T11580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 846.761441][T11915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 847.075065][T11923] Cannot find add_set index 0 as target [ 847.679168][T11580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 847.809102][T11928] devpts: called with bogus options [ 848.559307][T11580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.570227][T11580] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.597007][T11580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 848.600019][T11580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.608937][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 848.616831][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 848.620913][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 848.623734][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 848.626253][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.628220][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.631216][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 848.634186][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 848.636831][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.638834][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.648887][T11931] loop6: detected capacity change from 0 to 128 [ 848.704862][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 848.707938][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 848.711749][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 848.715277][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 848.718317][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 848.721653][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 848.724396][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 848.727026][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 848.736454][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 848.741937][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 848.744811][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 848.747367][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 848.750963][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 848.754304][T11657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 848.776618][T11933] devpts: called with bogus options [ 848.797320][T11931] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 848.972080][T11657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 850.167866][T11657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 850.231926][T11657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 850.536293][T11946] loop2: detected capacity change from 0 to 128 [ 850.547889][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.550579][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.576684][T11657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.584730][T11580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.617217][T11946] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 850.624147][T11657] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.626341][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.629351][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.653370][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.656747][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.680093][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.682292][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.893601][T11955] devpts: called with bogus options [ 851.061789][T11956] devpts: called with bogus options [ 851.423407][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.428389][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.464398][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.489408][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.491335][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.697447][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.728288][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.745450][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.754935][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.764348][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 851.801252][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 851.821878][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.857247][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 851.877990][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 851.925264][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 851.928577][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.943990][T11657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 851.971849][T11975] loop2: detected capacity change from 0 to 128 [ 852.067979][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.107213][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.110666][T11975] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 852.116414][T11580] device veth0_vlan entered promiscuous mode [ 852.119525][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.122438][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.133373][T11580] device veth1_vlan entered promiscuous mode [ 852.145050][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.148117][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.151608][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.154659][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.188765][T11580] device veth0_macvtap entered promiscuous mode [ 852.211208][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.219843][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.244589][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 852.398765][T11580] device veth1_macvtap entered promiscuous mode [ 852.443286][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.539600][T11988] devpts: called with bogus options [ 853.052970][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.131690][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.136257][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.199278][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.202165][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.204809][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.207608][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.230657][T11580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.239884][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.242618][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.245537][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.335307][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.338233][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.351785][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.354581][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.357150][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.395680][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.398512][T11580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.413028][T11580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.440071][T11580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.442422][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.446632][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 853.486752][T11580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.512449][T11580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.514827][T11580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.515222][T11995] loop2: detected capacity change from 0 to 128 [ 853.566671][T11580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.574968][T11995] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 853.592958][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.595119][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 853.711477][T11657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.918450][T12003] devpts: called with bogus options [ 854.626929][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.629405][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.637978][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.660658][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.663037][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.716197][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.830044][T12012] loop4: detected capacity change from 0 to 128 [ 854.873667][T12012] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 855.037244][T12019] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 855.040144][T12019] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1553'. [ 855.300214][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 855.303095][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 855.362193][T11657] device veth0_vlan entered promiscuous mode [ 855.364684][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 855.370663][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 855.391540][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 855.394296][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 855.401869][T11657] device veth1_vlan entered promiscuous mode [ 855.445843][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 855.453996][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 855.464397][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.475030][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.489630][T11657] device veth0_macvtap entered promiscuous mode [ 855.500801][T11657] device veth1_macvtap entered promiscuous mode [ 855.535080][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.537981][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.553453][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.556234][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.558835][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.590856][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.593654][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.596538][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.619249][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.628732][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.642801][T11657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.657482][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.679801][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.682521][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.695577][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.698250][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.707678][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.754864][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.757674][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.801000][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.809058][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.924383][T11657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.926945][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 855.932121][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 855.937880][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 855.972099][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 856.004135][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.028014][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.492220][T11657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.505885][T11657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.526139][T11657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.549597][T11657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.690028][T12045] loop2: detected capacity change from 0 to 256 [ 856.851435][T12045] FAT-fs (loop2): Directory bread(block 64) failed [ 856.853239][T12045] FAT-fs (loop2): Directory bread(block 65) failed [ 856.855016][T12045] FAT-fs (loop2): Directory bread(block 66) failed [ 856.856763][T12045] FAT-fs (loop2): Directory bread(block 67) failed [ 856.858505][T12045] FAT-fs (loop2): Directory bread(block 68) failed [ 856.896379][T12045] FAT-fs (loop2): Directory bread(block 69) failed [ 856.898321][T12045] FAT-fs (loop2): Directory bread(block 70) failed [ 856.929516][T12045] FAT-fs (loop2): Directory bread(block 71) failed [ 856.931333][T12045] FAT-fs (loop2): Directory bread(block 72) failed [ 856.933134][T12045] FAT-fs (loop2): Directory bread(block 73) failed [ 856.997808][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.000370][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.024810][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 857.146345][T12052] Cannot find add_set index 0 as target [ 857.729471][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.732021][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.737070][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 857.925492][T12055] loop4: detected capacity change from 0 to 128 [ 858.724343][T12055] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 858.833937][T12066] loop7: detected capacity change from 0 to 128 [ 858.981282][T12068] binder: 12059:12068 ioctl 4018620d 0 returned -22 [ 858.990112][T12068] binder: 12059:12068 ioctl c0306201 0 returned -14 [ 858.996262][T12068] binder: 12059:12068 Acquire 1 refcount change on invalid ref 0 ret -22 [ 859.000726][T12068] binder: 12059:12068 got transaction to invalid handle, 1 [ 859.002718][T12068] binder: 12059:12068 transaction failed 29201/-22, size 0-24 line 2917 [ 859.563068][T12070] devpts: called with bogus options [ 859.803778][T10186] binder: undelivered TRANSACTION_ERROR: 29201 [ 860.124874][T12066] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 861.154370][T12081] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 861.156496][T12081] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1560'. [ 862.326212][T12080] netlink: 'syz.6.1562': attribute type 10 has an invalid length. [ 862.330420][T12080] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1562'. [ 862.801007][T12092] Cannot find add_set index 0 as target [ 863.179428][T12095] devpts: called with bogus options [ 863.471605][T12097] loop6: detected capacity change from 0 to 256 [ 863.481530][T12099] loop2: detected capacity change from 0 to 128 [ 863.964539][T12107] devpts: called with bogus options [ 864.857739][T12099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 864.877223][T12097] FAT-fs (loop6): Directory bread(block 64) failed [ 864.879141][T12097] FAT-fs (loop6): Directory bread(block 65) failed [ 864.880940][T12097] FAT-fs (loop6): Directory bread(block 66) failed [ 864.882743][T12097] FAT-fs (loop6): Directory bread(block 67) failed [ 864.884603][T12097] FAT-fs (loop6): Directory bread(block 68) failed [ 864.886503][T12097] FAT-fs (loop6): Directory bread(block 69) failed [ 864.888402][T12097] FAT-fs (loop6): Directory bread(block 70) failed [ 864.989219][T12097] FAT-fs (loop6): Directory bread(block 71) failed [ 864.991098][T12097] FAT-fs (loop6): Directory bread(block 72) failed [ 864.993731][T12097] FAT-fs (loop6): Directory bread(block 73) failed [ 866.635183][ T4315] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.798143][ T4315] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.818697][T12108] netlink: 'syz.4.1567': attribute type 10 has an invalid length. [ 866.821154][T12108] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1567'. [ 866.823649][T12108] device team0 entered promiscuous mode [ 866.825097][T12108] device team_slave_0 entered promiscuous mode [ 866.826930][T12108] device team_slave_1 entered promiscuous mode [ 866.829652][T12108] bridge0: port 3(team0) entered blocking state [ 866.831386][T12108] bridge0: port 3(team0) entered disabled state [ 866.834544][T12108] bridge0: port 3(team0) entered blocking state [ 866.836421][T12108] bridge0: port 3(team0) entered forwarding state [ 866.861864][T12124] loop6: detected capacity change from 0 to 256 [ 867.579661][T12124] FAT-fs (loop6): Directory bread(block 64) failed [ 867.581672][T12124] FAT-fs (loop6): Directory bread(block 65) failed [ 867.583508][T12124] FAT-fs (loop6): Directory bread(block 66) failed [ 867.636131][ T4315] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.677734][T12124] FAT-fs (loop6): Directory bread(block 67) failed [ 867.691353][T12132] loop4: detected capacity change from 0 to 128 [ 867.692556][T12124] FAT-fs (loop6): Directory bread(block 68) failed [ 867.699345][T12124] FAT-fs (loop6): Directory bread(block 69) failed [ 867.701220][T12124] FAT-fs (loop6): Directory bread(block 70) failed [ 867.712687][T12124] FAT-fs (loop6): Directory bread(block 71) failed [ 867.718522][T12124] FAT-fs (loop6): Directory bread(block 72) failed [ 867.727631][T12124] FAT-fs (loop6): Directory bread(block 73) failed [ 868.029751][T12142] Cannot find add_set index 0 as target [ 868.458843][T12144] binder: 12129:12144 ioctl c0306201 0 returned -14 [ 868.681683][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.683697][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.695403][T12153] binder: 12147:12153 ioctl c0306201 0 returned -14 [ 869.711533][T12153] binder: BINDER_SET_CONTEXT_MGR already set [ 869.713254][T12153] binder: 12147:12153 ioctl 4018620d 20000040 returned -16 [ 869.718008][T12153] binder: 12147:12153 context manager tried to acquire desc 0 [ 869.720248][T12153] binder: 12147:12153 ioctl c0306201 200003c0 returned -22 [ 869.724817][T12153] binder: 12147:12153 got transaction to invalid handle, 1 [ 869.726790][T12153] binder: 12147:12153 transaction failed 29201/-22, size 0-24 line 2917 [ 870.451393][T10187] binder: undelivered TRANSACTION_ERROR: 29201 [ 871.012809][T12132] EXT4-fs: failed to create workqueue [ 871.014348][T12132] EXT4-fs (loop4): mount failed [ 871.027197][ T4315] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.189517][T12159] udc-core: couldn't find an available UDC or it's busy [ 871.191432][T12159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 871.524267][T12166] Cannot find add_set index 0 as target [ 873.843021][T12178] loop2: detected capacity change from 0 to 128 [ 873.992445][T12178] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 874.000073][ T4315] tipc: Left network mode [ 874.213601][T12184] netlink: 'syz.4.1581': attribute type 10 has an invalid length. [ 874.215769][T12184] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1581'. [ 874.343306][T12186] devpts: called with bogus options [ 875.245945][T12189] loop6: detected capacity change from 0 to 128 [ 875.285067][T12192] loop4: detected capacity change from 0 to 256 [ 875.363082][T12194] binder: 12182:12194 ioctl c0306201 0 returned -14 [ 875.377870][T12194] binder: BINDER_SET_CONTEXT_MGR already set [ 875.379621][T12194] binder: 12182:12194 ioctl 4018620d 20000040 returned -16 [ 875.384279][T12194] binder: 12182:12194 context manager tried to acquire desc 0 [ 875.386482][T12194] binder: 12182:12194 ioctl c0306201 200003c0 returned -22 [ 875.390987][T12194] binder: 12182:12194 got transaction to invalid handle, 1 [ 875.393041][T12194] binder: 12182:12194 transaction failed 29201/-22, size 0-24 line 2917 [ 875.530840][ T4027] binder: undelivered TRANSACTION_ERROR: 29201 [ 875.610239][T12189] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 875.625496][T12192] FAT-fs (loop4): Directory bread(block 64) failed [ 875.658440][T12192] FAT-fs (loop4): Directory bread(block 65) failed [ 875.840290][T12192] FAT-fs (loop4): Directory bread(block 66) failed [ 875.857243][T12192] FAT-fs (loop4): Directory bread(block 67) failed [ 875.867470][T12192] FAT-fs (loop4): Directory bread(block 68) failed [ 875.880739][T12192] FAT-fs (loop4): Directory bread(block 69) failed [ 875.944376][T12192] FAT-fs (loop4): Directory bread(block 70) failed [ 875.946294][T12192] FAT-fs (loop4): Directory bread(block 71) failed [ 875.948092][T12192] FAT-fs (loop4): Directory bread(block 72) failed [ 875.997643][T12192] FAT-fs (loop4): Directory bread(block 73) failed [ 876.956125][T12202] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 876.958331][T12202] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1584'. [ 878.575382][T12220] loop7: detected capacity change from 0 to 256 [ 879.276228][T12220] FAT-fs (loop7): Directory bread(block 64) failed [ 879.296121][T12220] FAT-fs (loop7): Directory bread(block 65) failed [ 880.189377][T12220] FAT-fs (loop7): Directory bread(block 66) failed [ 880.191214][T12220] FAT-fs (loop7): Directory bread(block 67) failed [ 880.193030][T12220] FAT-fs (loop7): Directory bread(block 68) failed [ 880.194871][T12220] FAT-fs (loop7): Directory bread(block 69) failed [ 880.196592][T12220] FAT-fs (loop7): Directory bread(block 70) failed [ 880.198325][T12220] FAT-fs (loop7): Directory bread(block 71) failed [ 880.280148][T12220] FAT-fs (loop7): Directory bread(block 72) failed [ 880.318168][T12233] loop4: detected capacity change from 0 to 128 [ 880.335778][T12220] FAT-fs (loop7): Directory bread(block 73) failed [ 881.125222][T12233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 882.967703][T12258] netlink: 'syz.6.1595': attribute type 10 has an invalid length. [ 882.970111][T12258] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1595'. [ 883.148605][T12266] udc-core: couldn't find an available UDC or it's busy [ 883.439017][T12270] binder: 12262:12270 ioctl 4018620d 0 returned -22 [ 883.459059][T12270] binder: 12262:12270 ioctl c0306201 0 returned -14 [ 883.477301][T12270] binder: 12262:12270 got transaction to invalid handle, 1 [ 883.479525][T12270] binder: 12262:12270 transaction failed 29201/-22, size 0-24 line 2917 [ 883.990690][T12269] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 883.992830][T12269] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1597'. [ 884.863103][T12266] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 884.869313][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 884.965937][T12272] loop6: detected capacity change from 0 to 256 [ 885.432550][T12281] devpts: called with bogus options [ 888.055072][T12296] binder: 12287:12296 ioctl 4018620d 0 returned -22 [ 888.073698][T12296] binder: 12287:12296 ioctl c0306201 0 returned -14 [ 888.112550][T12296] binder: 12287:12296 got transaction to invalid handle, 1 [ 888.114778][T12296] binder: 12287:12296 transaction failed 29201/-22, size 0-24 line 2917 [ 888.602354][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 888.674047][T12292] netlink: 'syz.0.1603': attribute type 10 has an invalid length. [ 888.676255][T12292] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1603'. [ 888.779734][T12272] FAT-fs (loop6): Directory bread(block 64) failed [ 888.781778][T12272] FAT-fs (loop6): Directory bread(block 65) failed [ 888.809846][T12272] FAT-fs (loop6): Directory bread(block 66) failed [ 888.811765][T12272] FAT-fs (loop6): Directory bread(block 67) failed [ 888.869181][T12272] FAT-fs (loop6): Directory bread(block 68) failed [ 888.871167][T12272] FAT-fs (loop6): Directory bread(block 69) failed [ 888.875692][T12300] loop4: detected capacity change from 0 to 256 [ 888.889142][T12272] FAT-fs (loop6): Directory bread(block 70) failed [ 888.891166][T12272] FAT-fs (loop6): Directory bread(block 71) failed [ 888.950872][T12300] FAT-fs (loop4): Directory bread(block 64) failed [ 888.952670][T12300] FAT-fs (loop4): Directory bread(block 65) failed [ 888.969263][T12272] FAT-fs (loop6): Directory bread(block 72) failed [ 888.971226][T12272] FAT-fs (loop6): Directory bread(block 73) failed [ 888.999484][T12300] FAT-fs (loop4): Directory bread(block 66) failed [ 889.001340][T12300] FAT-fs (loop4): Directory bread(block 67) failed [ 889.003124][T12300] FAT-fs (loop4): Directory bread(block 68) failed [ 889.004852][T12300] FAT-fs (loop4): Directory bread(block 69) failed [ 889.006600][T12300] FAT-fs (loop4): Directory bread(block 70) failed [ 889.079164][T12300] FAT-fs (loop4): Directory bread(block 71) failed [ 889.081105][T12300] FAT-fs (loop4): Directory bread(block 72) failed [ 889.082792][T12300] FAT-fs (loop4): Directory bread(block 73) failed [ 889.181760][T12304] binder: 12297:12304 ioctl c0306201 0 returned -14 [ 889.200911][T12304] binder: BINDER_SET_CONTEXT_MGR already set [ 889.202648][T12304] binder: 12297:12304 ioctl 4018620d 20000040 returned -16 [ 889.207854][T12304] binder: 12297:12304 context manager tried to acquire desc 0 [ 889.210074][T12304] binder: 12297:12304 ioctl c0306201 200003c0 returned -22 [ 889.215104][T12304] binder: 12297:12304 got transaction to invalid handle, 1 [ 889.217150][T12304] binder: 12297:12304 transaction failed 29201/-22, size 0-24 line 2917 [ 889.668763][T10237] binder: undelivered TRANSACTION_ERROR: 29201 [ 889.963046][T12311] loop7: detected capacity change from 0 to 128 [ 892.997895][T12317] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 893.001948][T12317] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1607'. [ 893.329473][T12329] udc-core: couldn't find an available UDC or it's busy [ 893.331420][T12329] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 893.732907][T12335] binder: 12325:12335 ioctl 4018620d 0 returned -22 [ 896.374908][ T5462] Bluetooth: hci5: command 0x0409 tx timeout [ 896.379599][T12333] netlink: 'syz.0.1610': attribute type 10 has an invalid length. [ 896.381686][T12333] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1610'. [ 896.528680][T12356] loop7: detected capacity change from 0 to 256 [ 896.700660][T12356] FAT-fs (loop7): Directory bread(block 64) failed [ 896.719086][T12356] FAT-fs (loop7): Directory bread(block 65) failed [ 896.721164][T12356] FAT-fs (loop7): Directory bread(block 66) failed [ 896.722949][T12356] FAT-fs (loop7): Directory bread(block 67) failed [ 896.724777][T12356] FAT-fs (loop7): Directory bread(block 68) failed [ 896.726539][T12356] FAT-fs (loop7): Directory bread(block 69) failed [ 896.728325][T12356] FAT-fs (loop7): Directory bread(block 70) failed [ 897.466618][T12360] netlink: 'syz.0.1615': attribute type 10 has an invalid length. [ 897.468734][T12360] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1615'. [ 897.482894][T12356] FAT-fs (loop7): Directory bread(block 71) failed [ 897.491220][T12356] FAT-fs (loop7): Directory bread(block 72) failed [ 897.498419][T12356] FAT-fs (loop7): Directory bread(block 73) failed [ 897.917193][T12368] binder: 12362:12368 ioctl c0306201 0 returned -14 [ 897.934200][T12368] binder: 12362:12368 ioctl 4018620d 0 returned -22 [ 897.939089][T12368] binder: 12362:12368 context manager tried to acquire desc 0 [ 897.941268][T12368] binder: 12362:12368 ioctl c0306201 200003c0 returned -22 [ 897.946188][T12368] binder: 12362:12368 got transaction to invalid handle, 1 [ 897.948229][T12368] binder: 12362:12368 transaction failed 29201/-22, size 0-24 line 2917 [ 898.519242][ T4077] binder: undelivered TRANSACTION_ERROR: 29201 [ 898.697895][ T4027] Bluetooth: hci5: command 0x041b tx timeout [ 899.162816][T12380] binder: 12371:12380 ioctl c0306201 0 returned -14 [ 900.729166][ T7599] Bluetooth: hci5: command 0x040f tx timeout [ 900.761547][T12331] chnl_net:caif_netlink_parms(): no params data found [ 900.793572][T12393] netlink: 'syz.0.1621': attribute type 10 has an invalid length. [ 900.795784][T12393] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1621'. [ 900.895768][ T4315] device hsr_slave_0 left promiscuous mode [ 900.939322][ T4315] device hsr_slave_1 left promiscuous mode [ 901.039181][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.041256][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.044047][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.046049][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.072309][ T4315] bridge0: port 3(team0) entered disabled state [ 901.110468][ T4315] device bridge_slave_1 left promiscuous mode [ 901.112339][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.160329][ T4315] device bridge_slave_0 left promiscuous mode [ 901.162297][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.319299][ T4315] device veth0_macvtap left promiscuous mode [ 901.321082][ T4315] device veth1_vlan left promiscuous mode [ 903.027083][ T7599] Bluetooth: hci5: command 0x0419 tx timeout [ 903.079628][ T4315] device team_slave_1 left promiscuous mode [ 903.087698][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 903.098732][ T4315] device team_slave_0 left promiscuous mode [ 903.104672][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 903.137853][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.206172][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.446383][ T4315] bond0 (unregistering): Released all slaves [ 903.549925][T12400] netlink: 'syz.7.1618': attribute type 10 has an invalid length. [ 903.552254][T12400] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1618'. [ 903.554598][T12400] device team0 entered promiscuous mode [ 903.555986][T12400] device team_slave_0 entered promiscuous mode [ 903.557686][T12400] device team_slave_1 entered promiscuous mode [ 903.559665][T12400] bridge0: port 3(team0) entered blocking state [ 903.561438][T12400] bridge0: port 3(team0) entered disabled state [ 903.564523][T12400] bridge0: port 3(team0) entered blocking state [ 903.566180][T12400] bridge0: port 3(team0) entered forwarding state [ 903.568414][T12401] netlink: 'syz.6.1622': attribute type 10 has an invalid length. [ 903.570767][T12401] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1622'. [ 903.640447][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.642651][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.646521][T12331] device bridge_slave_0 entered promiscuous mode [ 903.787811][T12404] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 903.790181][T12404] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1623'. [ 903.818807][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.824982][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.827670][T12331] device bridge_slave_1 entered promiscuous mode [ 904.102501][T12420] devpts: called with bogus options [ 904.623297][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.726864][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.613823][T12426] netlink: 'syz.6.1626': attribute type 10 has an invalid length. [ 907.615971][T12426] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1626'. [ 907.719058][T12425] netlink: 'syz.7.1625': attribute type 10 has an invalid length. [ 907.721299][T12425] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1625'. [ 907.746725][T12436] netlink: 'syz.4.1627': attribute type 10 has an invalid length. [ 907.748848][T12436] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1627'. [ 909.168080][T12331] team0: Port device team_slave_0 added [ 909.213825][T12331] team0: Port device team_slave_1 added [ 909.244247][T12439] loop7: detected capacity change from 0 to 128 [ 909.248078][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.259046][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.291506][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.687880][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.702951][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.881156][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.894940][T12439] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 910.911883][T12446] netlink: 'syz.6.1630': attribute type 10 has an invalid length. [ 910.914036][T12446] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1630'. [ 911.369375][T12457] devpts: called with bogus options [ 913.781072][T12331] device hsr_slave_0 entered promiscuous mode [ 913.792165][T12331] device hsr_slave_1 entered promiscuous mode [ 913.839241][T12331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.842981][T12331] Cannot create hsr debugfs directory [ 913.844981][T12460] netlink: 'syz.6.1634': attribute type 10 has an invalid length. [ 913.847041][T12460] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1634'. [ 913.849724][T12458] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 913.851949][T12458] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1632'. [ 913.854392][T12449] netlink: 'syz.4.1633': attribute type 10 has an invalid length. [ 913.856668][T12449] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1633'. [ 914.970362][T12486] netlink: 'syz.7.1635': attribute type 10 has an invalid length. [ 914.972630][T12486] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1635'. [ 918.610128][T12503] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 918.612422][T12503] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1637'. [ 918.645880][T12504] netlink: 'syz.6.1638': attribute type 10 has an invalid length. [ 918.647978][T12504] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1638'. [ 919.760854][T12517] netlink: 'syz.7.1639': attribute type 10 has an invalid length. [ 919.763207][T12517] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1639'. [ 920.481305][T12520] netlink: 'syz.6.1642': attribute type 10 has an invalid length. [ 920.483435][T12520] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1642'. [ 920.841981][T12534] netlink: 'syz.4.1640': attribute type 10 has an invalid length. [ 920.844238][T12534] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1640'. [ 922.009199][T12537] netlink: 'syz.7.1643': attribute type 10 has an invalid length. [ 922.011377][T12537] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1643'. [ 922.610405][T12331] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 925.690297][T12555] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 925.692523][T12555] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1645'. [ 925.695685][T12556] netlink: 'syz.7.1646': attribute type 10 has an invalid length. [ 925.697762][T12556] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1646'. [ 925.794575][T12331] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 925.860085][T12331] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 926.233232][T12570] binder: 12560:12570 ioctl c0306201 0 returned -14 [ 926.265055][T12570] binder: BINDER_SET_CONTEXT_MGR already set [ 926.266973][T12570] binder: 12560:12570 ioctl 4018620d 20000040 returned -16 [ 926.274229][T12570] binder: 12560:12570 context manager tried to acquire desc 0 [ 926.276529][T12570] binder: 12560:12570 ioctl c0306201 200003c0 returned -22 [ 926.284346][T12570] binder: 12560:12570 ioctl c0306201 0 returned -14 [ 928.241771][T12572] netlink: 'syz.0.1647': attribute type 10 has an invalid length. [ 928.244930][T12572] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1647'. [ 928.305401][T12573] netlink: 'syz.7.1649': attribute type 10 has an invalid length. [ 928.307839][T12573] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1649'. [ 928.470288][T12331] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 929.574967][T12581] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 929.577220][T12581] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1651'. [ 929.749265][T12331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.780267][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.782045][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 929.855131][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 929.858072][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.892432][T12331] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.663258][T12591] netlink: 'syz.7.1652': attribute type 10 has an invalid length. [ 930.665808][T12591] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1652'. [ 930.697806][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 930.706792][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 930.718184][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.720244][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.899801][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 930.902786][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 930.905663][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 930.908701][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.910768][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.747899][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 931.785995][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 931.795844][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 931.823326][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 931.854252][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 931.856585][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 931.869930][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 931.884901][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 931.887821][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 931.899639][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 931.905831][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 931.934523][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 932.018396][T12599] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 932.020837][T12599] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1654'. [ 932.099834][T12604] netlink: 'syz.6.1653': attribute type 10 has an invalid length. [ 932.102433][T12604] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1653'. [ 933.118805][T12615] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 933.121112][T12615] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1656'. [ 933.465993][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.468925][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 933.471281][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 934.330976][T12626] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 934.333214][T12626] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1657'. [ 935.549388][T12640] netlink: 'syz.0.1659': attribute type 10 has an invalid length. [ 935.551683][T12640] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1659'. [ 936.233155][T12661] binder: 12647:12661 ioctl c0306201 0 returned -14 [ 936.254164][T12661] binder: BINDER_SET_CONTEXT_MGR already set [ 936.256068][T12661] binder: 12647:12661 ioctl 4018620d 20000040 returned -16 [ 936.262662][T12661] binder: 12647:12661 context manager tried to acquire desc 0 [ 936.265040][T12661] binder: 12647:12661 ioctl c0306201 200003c0 returned -22 [ 937.591229][T12660] netlink: 'syz.7.1661': attribute type 10 has an invalid length. [ 937.593356][T12660] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1661'. [ 937.689097][T10186] Bluetooth: hci1: command 0x0409 tx timeout [ 937.938232][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 938.000501][T12672] binder: 12665:12672 ioctl c0306201 0 returned -14 [ 938.017636][T12672] binder: BINDER_SET_CONTEXT_MGR already set [ 938.019506][T12672] binder: 12665:12672 ioctl 4018620d 20000040 returned -16 [ 938.023840][T12672] binder: 12665:12672 context manager tried to acquire desc 0 [ 938.025984][T12672] binder: 12665:12672 ioctl c0306201 200003c0 returned -22 [ 938.098166][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 938.659847][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 938.662625][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 938.665554][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 938.668286][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 938.721700][T12331] device veth0_vlan entered promiscuous mode [ 938.728414][T12331] device veth1_vlan entered promiscuous mode [ 938.783855][T12644] chnl_net:caif_netlink_parms(): no params data found [ 939.667865][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 939.743063][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 939.773604][ T4072] Bluetooth: hci1: command 0x041b tx timeout [ 939.776405][T12671] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 939.778527][T12671] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1662'. [ 939.817326][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 939.832323][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 940.822591][T12685] netlink: 'syz.7.1664': attribute type 10 has an invalid length. [ 940.824912][T12685] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1664'. [ 940.892308][T12331] device veth0_macvtap entered promiscuous mode [ 941.080700][T12331] device veth1_macvtap entered promiscuous mode [ 941.988169][ T4077] Bluetooth: hci1: command 0x040f tx timeout [ 943.034204][ T4077] Bluetooth: hci2: command 0x0406 tx timeout [ 943.040530][T12696] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 943.042788][T12696] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1665'. [ 943.048509][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.065059][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.078151][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.089151][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.091779][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.094596][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.097225][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.119071][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.121701][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.125630][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.145428][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.161662][T12706] netlink: 'syz.6.1666': attribute type 10 has an invalid length. [ 943.163813][T12706] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1666'. [ 943.167114][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.178027][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.181416][T12644] device bridge_slave_0 entered promiscuous mode [ 943.190944][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.193762][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.199880][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.219530][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.222419][T12644] device bridge_slave_1 entered promiscuous mode [ 943.462240][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.465131][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.467619][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.489171][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.491871][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.511232][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.299616][T10187] Bluetooth: hci1: command 0x0419 tx timeout [ 944.304415][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.307209][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.313414][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.316223][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.322259][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.797587][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 945.803729][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 945.811280][T12718] netlink: 'syz.0.1668': attribute type 10 has an invalid length. [ 945.813380][T12718] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1668'. [ 945.818620][T12331] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.822961][T12331] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.825297][T12331] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.827637][T12331] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.840411][T12723] netlink: 'syz.7.1667': attribute type 10 has an invalid length. [ 945.842560][T12723] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1667'. [ 945.845219][T12724] netlink: 'syz.6.1669': attribute type 10 has an invalid length. [ 945.847271][T12724] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1669'. [ 945.936087][ T4315] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.118464][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.123286][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.140490][T12644] team0: Port device team_slave_0 added [ 946.143935][T12644] team0: Port device team_slave_1 added [ 946.156699][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.158609][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.165772][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.033734][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.045481][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.059147][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.062969][T12732] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 947.065112][T12732] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1670'. [ 947.100214][ T4315] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.185133][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.187444][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.192675][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 948.204214][T12741] netlink: 'syz.6.1671': attribute type 10 has an invalid length. [ 948.206394][T12741] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1671'. [ 948.218361][ T4315] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.235769][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.238070][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.336547][T12644] device hsr_slave_0 entered promiscuous mode [ 948.399487][T12644] device hsr_slave_1 entered promiscuous mode [ 948.439218][T12644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.441320][T12644] Cannot create hsr debugfs directory [ 948.443158][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 949.275442][ T4315] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.306998][T12749] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 949.309274][T12749] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1672'. [ 949.794702][T12764] binder: 12758:12764 ioctl c0306201 0 returned -14 [ 949.826270][T12764] binder: BINDER_SET_CONTEXT_MGR already set [ 949.828122][T12764] binder: 12758:12764 ioctl 4018620d 20000040 returned -16 [ 949.835592][T12764] binder: 12758:12764 ioctl c0306201 0 returned -14 [ 949.841968][T12764] binder: 12758:12764 got transaction to invalid handle, 1 [ 949.843992][T12764] binder: 12758:12764 transaction failed 29201/-22, size 0-24 line 2917 [ 951.209120][ T4027] binder: undelivered TRANSACTION_ERROR: 29201 [ 951.299045][T12763] netlink: 'syz.6.1673': attribute type 10 has an invalid length. [ 951.301179][T12763] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1673'. [ 951.789026][T12776] devpts: called with bogus options [ 953.555303][T12775] netlink: 'syz.9.1674': attribute type 10 has an invalid length. [ 953.557375][T12775] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1674'. [ 953.559913][T12775] device team0 entered promiscuous mode [ 953.561367][T12775] device team_slave_0 entered promiscuous mode [ 953.563099][T12775] device team_slave_1 entered promiscuous mode [ 953.564957][T12775] bridge0: port 3(team0) entered blocking state [ 953.566684][T12775] bridge0: port 3(team0) entered disabled state [ 953.570380][T12775] bridge0: port 3(team0) entered blocking state [ 953.572059][T12775] bridge0: port 3(team0) entered forwarding state [ 953.812838][ T4315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.689255][T12795] netlink: 'syz.7.1676': attribute type 10 has an invalid length. [ 954.691668][T12795] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1676'. [ 955.401434][T12796] netlink: 'syz.0.1678': attribute type 10 has an invalid length. [ 955.403619][T12796] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1678'. [ 956.750547][T12801] loop7: detected capacity change from 0 to 128 [ 956.768005][T12798] netlink: 'syz.9.1679': attribute type 10 has an invalid length. [ 956.770340][T12798] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1679'. [ 956.818520][T12801] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 956.988080][ T4315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.607291][T12808] netlink: 'syz.0.1681': attribute type 10 has an invalid length. [ 958.609605][T12808] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1681'. [ 958.618673][ T4315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.647441][ T4315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.688472][T12821] netlink: 'syz.6.1682': attribute type 10 has an invalid length. [ 959.690895][T12821] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1682'. [ 961.799676][T12836] netlink: 'syz.0.1685': attribute type 10 has an invalid length. [ 961.801927][T12836] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1685'. [ 961.804425][T12833] netlink: 'syz.7.1684': attribute type 10 has an invalid length. [ 961.806617][T12833] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1684'. [ 961.811507][T12644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 961.987454][T12644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 962.960432][T12644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 963.078299][T12644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 963.141419][T12844] netlink: 'syz.6.1686': attribute type 10 has an invalid length. [ 963.143566][T12844] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1686'. [ 963.147001][ T4315] tipc: Left network mode [ 963.999827][T12851] netlink: 'syz.0.1687': attribute type 10 has an invalid length. [ 964.002077][T12851] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1687'. [ 964.219926][T12644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.276767][T12644] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.279588][T12863] netlink: 'syz.7.1688': attribute type 10 has an invalid length. [ 965.281736][T12863] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1688'. [ 965.287194][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 965.290750][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 965.317524][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 965.343526][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 965.346885][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.348878][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.372087][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 965.382100][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 966.255692][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 966.271698][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.273671][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.276009][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 966.300667][T12868] netlink: 'syz.0.1690': attribute type 10 has an invalid length. [ 966.302779][T12868] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1690'. [ 966.320210][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 966.343000][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 966.346225][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 966.384068][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 966.399665][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 966.410046][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 966.423135][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 966.428496][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 966.446378][T12644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 966.453186][T12644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 968.191360][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 968.195210][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 968.226557][T12880] netlink: 'syz.7.1691': attribute type 10 has an invalid length. [ 968.228787][T12880] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1691'. [ 968.269753][T12861] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 968.339150][T12861] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1689'. [ 969.325543][T12889] netlink: 'syz.0.1692': attribute type 10 has an invalid length. [ 969.327653][T12889] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1692'. [ 969.354107][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 969.356204][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 969.425465][T12644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.517993][T12644] device veth0_vlan entered promiscuous mode [ 969.565694][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 969.568735][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 969.575746][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 969.589981][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 969.598270][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 970.439678][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 970.457036][T12644] device veth1_vlan entered promiscuous mode [ 970.503950][T12900] netlink: 'syz.9.1693': attribute type 10 has an invalid length. [ 970.506045][T12900] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1693'. [ 970.516323][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 970.594315][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 970.597412][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 970.603884][T12644] device veth0_macvtap entered promiscuous mode [ 970.617962][T12644] device veth1_macvtap entered promiscuous mode [ 970.639331][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.668078][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.688328][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.693444][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.701574][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.718718][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.728873][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.769115][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.785811][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.805156][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.600336][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.615685][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.637269][T12644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.667429][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.673655][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.679376][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.686625][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.694814][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.700836][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.706709][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.740212][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.743528][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.747152][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.754165][T12644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.757018][T12644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.766212][T12644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.783914][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 971.786552][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 971.789602][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 971.801976][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 971.810407][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 971.823537][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 971.826350][T12910] netlink: 'syz.6.1695': attribute type 10 has an invalid length. [ 971.828457][T12910] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1695'. [ 971.969701][T12915] netlink: 'syz.7.1694': attribute type 10 has an invalid length. [ 971.971937][T12915] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1694'. [ 971.977300][T12644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.983168][T12644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.985520][T12644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.987807][T12644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.906560][T12924] netlink: 'syz.9.1697': attribute type 10 has an invalid length. [ 972.908671][T12924] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1697'. [ 974.250048][ T5218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.252590][ T5218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.300136][T12932] netlink: 'syz.6.1698': attribute type 10 has an invalid length. [ 974.302305][T12932] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1698'. [ 974.319496][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 975.135377][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.138652][T12936] netlink: 'syz.9.1699': attribute type 10 has an invalid length. [ 975.141568][T12936] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1699'. [ 975.165981][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.335324][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 975.855109][T12943] netlink: 'syz.6.1700': attribute type 10 has an invalid length. [ 975.857441][T12943] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1700'. [ 976.664805][T12952] binder: 12945:12952 ioctl c0306201 0 returned -14 [ 976.694390][T12952] binder: BINDER_SET_CONTEXT_MGR already set [ 976.696238][T12952] binder: 12945:12952 ioctl 4018620d 20000040 returned -16 [ 976.702985][T12952] binder: 12945:12952 context manager tried to acquire desc 0 [ 976.705225][T12952] binder: 12945:12952 ioctl c0306201 200003c0 returned -22 [ 977.178362][T12951] netlink: 'syz.0.1701': attribute type 10 has an invalid length. [ 977.180684][T12951] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1701'. [ 979.142847][T12960] netlink: 'syz.9.1702': attribute type 10 has an invalid length. [ 979.145065][T12960] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1702'. [ 980.237899][T12968] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 980.240578][T12968] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1705'. [ 980.971846][T12977] netlink: 'syz.9.1706': attribute type 10 has an invalid length. [ 980.974102][T12977] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1706'. [ 982.445911][T12995] netlink: 'syz.9.1708': attribute type 10 has an invalid length. [ 982.448204][T12995] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1708'. [ 983.045142][T12996] netlink: 'syz.7.1710': attribute type 10 has an invalid length. [ 983.047373][T12996] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1710'. [ 984.734198][T12997] netlink: 'syz.1.1709': attribute type 10 has an invalid length. [ 984.736425][T12997] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1709'. [ 984.738843][T12997] device team0 entered promiscuous mode [ 984.741410][T12997] device team_slave_0 entered promiscuous mode [ 984.743172][T12997] device team_slave_1 entered promiscuous mode [ 984.744992][T12997] bridge0: port 3(team0) entered blocking state [ 984.746684][T12997] bridge0: port 3(team0) entered disabled state [ 984.749938][T12997] bridge0: port 3(team0) entered blocking state [ 984.751672][T12997] bridge0: port 3(team0) entered forwarding state [ 989.807327][T13029] netlink: 'syz.6.1717': attribute type 10 has an invalid length. [ 989.810120][T13029] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1717'. [ 989.815409][T13028] netlink: 'syz.7.1716': attribute type 10 has an invalid length. [ 989.817683][T13028] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1716'. [ 990.540917][T13048] loop9: detected capacity change from 0 to 4096 [ 990.674455][T13048] NILFS (loop9): invalid segment: Checksum error in segment payload [ 990.676904][T13048] NILFS (loop9): trying rollback from an earlier position [ 991.247671][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.250975][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.556908][T13048] NILFS (loop9): recovery complete [ 991.595365][T13055] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 991.632698][T13054] netlink: 'syz.1.1720': attribute type 10 has an invalid length. [ 991.635194][T13054] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1720'. [ 991.656531][ T4315] device hsr_slave_0 left promiscuous mode [ 991.880193][T13060] syz.7.1723 uses obsolete (PF_INET,SOCK_PACKET) [ 993.488606][ T4315] device hsr_slave_1 left promiscuous mode [ 994.400596][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.404900][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.411727][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.420142][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.425467][ T4315] bridge0: port 3(team0) entered disabled state [ 994.587575][ T4315] device bridge_slave_1 left promiscuous mode [ 994.589590][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.302384][ T4315] device bridge_slave_0 left promiscuous mode [ 995.353936][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.417519][ T4315] device hsr_slave_0 left promiscuous mode [ 995.469682][ T4315] device hsr_slave_1 left promiscuous mode [ 995.549251][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.551551][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.555725][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.557810][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.561694][ T4315] bridge0: port 3(team0) entered disabled state [ 995.611340][ T4315] device bridge_slave_1 left promiscuous mode [ 995.613291][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.650363][ T4315] device bridge_slave_0 left promiscuous mode [ 995.652276][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.809932][ T4315] device veth1_macvtap left promiscuous mode [ 995.811677][ T4315] device veth0_macvtap left promiscuous mode [ 995.813500][ T4315] device veth1_vlan left promiscuous mode [ 995.815241][ T4315] device veth0_vlan left promiscuous mode [ 995.909267][ T4315] device veth1_macvtap left promiscuous mode [ 995.911111][ T4315] device veth0_macvtap left promiscuous mode [ 995.912945][ T4315] device veth1_vlan left promiscuous mode [ 995.914664][ T4315] device veth0_vlan left promiscuous mode [ 996.315155][ T4315] device team_slave_1 left promiscuous mode [ 996.323035][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 996.333054][ T4315] device team_slave_0 left promiscuous mode [ 996.335609][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 996.346401][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.397459][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.558206][ T4315] bond0 (unregistering): Released all slaves [ 996.755734][ T4315] device team_slave_1 left promiscuous mode [ 996.762886][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 996.776077][ T4315] device team_slave_0 left promiscuous mode [ 996.779690][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 996.791843][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.828760][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.986559][ T4315] bond0 (unregistering): Released all slaves [ 997.131913][T13074] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 997.134008][T13074] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1725'. [ 998.241283][T13091] loop6: detected capacity change from 0 to 512 [ 998.321320][T13091] EXT4-fs (loop6): journaled quota format not specified [ 998.674524][T13097] loop7: detected capacity change from 0 to 4096 [ 998.826299][T13097] NILFS (loop7): invalid segment: Checksum error in segment payload [ 998.828584][T13097] NILFS (loop7): trying rollback from an earlier position [ 999.879275][T13097] NILFS (loop7): recovery complete [ 999.899217][T13112] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1001.789565][T13119] netlink: 'syz.9.1735': attribute type 10 has an invalid length. [ 1001.791760][T13119] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1735'. [ 1003.239011][T13138] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 1003.241302][T13138] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1736'. [ 1004.135292][T13148] netlink: 'syz.6.1740': attribute type 10 has an invalid length. [ 1004.137521][T13148] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1740'. [ 1006.909047][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1008.921229][ T4032] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1008.925856][ T4032] CPU: 0 PID: 4032 Comm: kworker/u5:2 Not tainted 5.15.182-syzkaller #0 [ 1008.928245][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1008.931069][ T4032] Workqueue: hci5 hci_rx_work [ 1008.932365][ T4032] Call trace: [ 1008.933259][ T4032] dump_backtrace+0x0/0x43c [ 1008.934445][ T4032] show_stack+0x2c/0x3c [ 1008.935586][ T4032] __dump_stack+0x30/0x40 [ 1008.936811][ T4032] dump_stack_lvl+0xf8/0x160 [ 1008.938053][ T4032] dump_stack+0x1c/0x5c [ 1008.939183][ T4032] sysfs_create_dir_ns+0x22c/0x24c [ 1008.940554][ T4032] kobject_add_internal+0x590/0xc54 [ 1008.941988][ T4032] kobject_add+0x134/0x1f8 [ 1008.943181][ T4032] device_add+0x3f0/0xf94 [ 1008.944353][ T4032] hci_conn_add_sysfs+0xbc/0x1cc [ 1008.945617][ T4032] le_conn_complete_evt+0x9a4/0x11bc [ 1008.947064][ T4032] hci_le_meta_evt+0x85c/0x3010 [ 1008.948315][ T4032] hci_event_packet+0xd10/0x11bc [ 1008.949636][ T4032] hci_rx_work+0x1cc/0x880 [ 1008.950842][ T4032] process_one_work+0x79c/0x1140 [ 1008.952179][ T4032] worker_thread+0x8f4/0x101c [ 1008.953451][ T4032] kthread+0x374/0x454 [ 1008.954569][ T4032] ret_from_fork+0x10/0x20 [ 1008.961114][ T4032] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1008.965346][ T4032] Bluetooth: hci5: failed to register connection device [ 1009.092667][ T4032] ================================================================== [ 1009.095264][ T4032] BUG: KASAN: use-after-free in l2cap_connect_cfm+0x594/0xd64 [ 1009.097399][ T4032] Read of size 8 at addr ffff0000d6002488 by task kworker/u5:2/4032 [ 1009.099558][ T4032] [ 1009.100206][ T4032] CPU: 0 PID: 4032 Comm: kworker/u5:2 Not tainted 5.15.182-syzkaller #0 [ 1009.102525][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1009.105328][ T4032] Workqueue: hci5 hci_rx_work [ 1009.106620][ T4032] Call trace: [ 1009.107560][ T4032] dump_backtrace+0x0/0x43c [ 1009.108788][ T4032] show_stack+0x2c/0x3c [ 1009.109990][ T4032] __dump_stack+0x30/0x40 [ 1009.111193][ T4032] dump_stack_lvl+0xf8/0x160 [ 1009.112465][ T4032] print_address_description+0x78/0x30c [ 1009.114020][ T4032] kasan_report+0xec/0x15c [ 1009.115329][ T4032] __asan_report_load8_noabort+0x44/0x50 [ 1009.116866][ T4032] l2cap_connect_cfm+0x594/0xd64 [ 1009.118200][ T4032] le_conn_complete_evt+0xa7c/0x11bc [ 1009.119702][ T4032] hci_le_meta_evt+0x85c/0x3010 [ 1009.121026][ T4032] hci_event_packet+0xd10/0x11bc [ 1009.122495][ T4032] hci_rx_work+0x1cc/0x880 [ 1009.123747][ T4032] process_one_work+0x79c/0x1140 [ 1009.125165][ T4032] worker_thread+0x8f4/0x101c [ 1009.126487][ T4032] kthread+0x374/0x454 [ 1009.127610][ T4032] ret_from_fork+0x10/0x20 [ 1009.128819][ T4032] [ 1009.129423][ T4032] Allocated by task 4032: [ 1009.130625][ T4032] __kasan_kmalloc+0xb0/0xf0 [ 1009.131911][ T4032] kmem_cache_alloc_trace+0x274/0x3fc [ 1009.133423][ T4032] l2cap_chan_create+0x58/0x68c [ 1009.134778][ T4032] l2cap_sock_new_connection_cb+0x1b4/0x304 [ 1009.136404][ T4032] l2cap_connect_cfm+0x2d4/0xd64 [ 1009.137774][ T4032] le_conn_complete_evt+0xa7c/0x11bc [ 1009.139285][ T4032] hci_le_meta_evt+0x85c/0x3010 [ 1009.140604][ T4032] hci_event_packet+0xd10/0x11bc [ 1009.142006][ T4032] hci_rx_work+0x1cc/0x880 [ 1009.143232][ T4032] process_one_work+0x79c/0x1140 [ 1009.144627][ T4032] worker_thread+0x8f4/0x101c [ 1009.145998][ T4032] kthread+0x374/0x454 [ 1009.147063][ T4032] ret_from_fork+0x10/0x20 [ 1009.148318][ T4032] [ 1009.148951][ T4032] Freed by task 13182: [ 1009.150105][ T4032] kasan_set_track+0x4c/0x84 [ 1009.151375][ T4032] kasan_set_free_info+0x28/0x4c [ 1009.152708][ T4032] ____kasan_slab_free+0x118/0x164 [ 1009.154085][ T4032] __kasan_slab_free+0x18/0x28 [ 1009.155398][ T4032] slab_free_freelist_hook+0x128/0x1e8 [ 1009.156942][ T4032] kfree+0x170/0x40c [ 1009.157987][ T4032] l2cap_chan_put+0x17c/0x260 [ 1009.159270][ T4032] l2cap_sock_cleanup_listen+0x104/0x28c [ 1009.160822][ T4032] l2cap_sock_teardown_cb+0x17c/0x360 [ 1009.162324][ T4032] l2cap_chan_close+0x250/0x768 [ 1009.163650][ T4032] l2cap_sock_shutdown+0x334/0x7c8 [ 1009.165077][ T4032] l2cap_sock_release+0x78/0x1ac [ 1009.166442][ T4032] sock_close+0xb4/0x1f8 [ 1009.167602][ T4032] __fput+0x1c0/0x7f8 [ 1009.168697][ T4032] ____fput+0x20/0x30 [ 1009.169808][ T4032] task_work_run+0x12c/0x1e0 [ 1009.171128][ T4032] do_notify_resume+0x24b4/0x3128 [ 1009.172524][ T4032] el0_svc+0xf0/0x1e0 [ 1009.173622][ T4032] el0t_64_sync_handler+0xcc/0xe4 [ 1009.174969][ T4032] el0t_64_sync+0x1a0/0x1a4 [ 1009.176202][ T4032] [ 1009.176869][ T4032] Last potentially related work creation: [ 1009.178396][ T4032] kasan_save_stack+0x38/0x68 [ 1009.179659][ T4032] kasan_record_aux_stack+0xcc/0x114 [ 1009.181096][ T4032] kvfree_call_rcu+0xb8/0x66c [ 1009.182373][ T4032] drop_sysctl_table+0x274/0x39c [ 1009.183758][ T4032] unregister_sysctl_table+0x94/0x134 [ 1009.185224][ T4032] unregister_net_sysctl_table+0x20/0x30 [ 1009.186778][ T4032] inetdev_event+0x578/0x127c [ 1009.188063][ T4032] raw_notifier_call_chain+0xd4/0x164 [ 1009.189487][ T4032] unregister_netdevice_many+0xe10/0x17d0 [ 1009.191092][ T4032] default_device_exit_batch+0x444/0x4a4 [ 1009.192619][ T4032] cleanup_net+0x644/0xa98 [ 1009.193863][ T4032] process_one_work+0x79c/0x1140 [ 1009.195191][ T4032] worker_thread+0x8f4/0x101c [ 1009.196485][ T4032] kthread+0x374/0x454 [ 1009.197579][ T4032] ret_from_fork+0x10/0x20 [ 1009.198769][ T4032] [ 1009.199483][ T4032] The buggy address belongs to the object at ffff0000d6002000 [ 1009.199483][ T4032] which belongs to the cache kmalloc-2k of size 2048 [ 1009.203289][ T4032] The buggy address is located 1160 bytes inside of [ 1009.203289][ T4032] 2048-byte region [ffff0000d6002000, ffff0000d6002800) [ 1009.207026][ T4032] The buggy address belongs to the page: [ 1009.208580][ T4032] page:00000000d3768692 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116000 [ 1009.211371][ T4032] head:00000000d3768692 order:3 compound_mapcount:0 compound_pincount:0 [ 1009.213676][ T4032] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1009.215986][ T4032] raw: 05ffc00000010200 0000000000000000 0000000300000001 ffff0000c0002900 [ 1009.218294][ T4032] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 1009.220644][ T4032] page dumped because: kasan: bad access detected [ 1009.222444][ T4032] [ 1009.223054][ T4032] Memory state around the buggy address: [ 1009.224638][ T4032] ffff0000d6002380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1009.226904][ T4032] ffff0000d6002400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1009.229202][ T4032] >ffff0000d6002480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1009.231579][ T4032] ^ [ 1009.232768][ T4032] ffff0000d6002500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1009.234988][ T4032] ffff0000d6002580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1009.237177][ T4032] ================================================================== [ 1009.239346][ T4032] Disabling lock debugging due to kernel taint [ 1009.266166][ T13] usb 1-1: device descriptor read/64, error -71 [ 1009.272607][ T4032] Unable to handle kernel paging request at virtual address fbd51fffffffff92 [ 1009.275013][ T4032] Mem abort info: [ 1009.276073][ T4032] ESR = 0x0000000096000004 [ 1009.277289][ T4032] EC = 0x25: DABT (current EL), IL = 32 bits [ 1009.278972][ T4032] SET = 0, FnV = 0 [ 1009.279988][ T4032] EA = 0, S1PTW = 0 [ 1009.281098][ T4032] FSC = 0x04: level 0 translation fault [ 1009.282615][ T4032] Data abort info: [ 1009.283577][ T4032] ISV = 0, ISS = 0x00000004 [ 1009.284814][ T4032] CM = 0, WnR = 0 [ 1009.285840][ T4032] [fbd51fffffffff92] address between user and kernel address ranges [ 1009.288137][ T4032] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 1009.290029][ T4032] Modules linked in: [ 1009.291052][ T4032] CPU: 0 PID: 4032 Comm: kworker/u5:2 Tainted: G B 5.15.182-syzkaller #0 [ 1009.293664][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1009.296371][ T4032] Workqueue: hci5 hci_rx_work [ 1009.297624][ T4032] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1009.299728][ T4032] pc : l2cap_connect_cfm+0x4fc/0xd64 [ 1009.301182][ T4032] lr : l2cap_connect_cfm+0x4f0/0xd64 [ 1009.302592][ T4032] sp : ffff80001f1a7540 [ 1009.303681][ T4032] x29: ffff80001f1a75c0 x28: dfff800000000000 x27: 1fffe0001c3d3406 [ 1009.305813][ T4032] x26: 0000000000000001 x25: 0000000000000080 x24: deacfffffffffc94 [ 1009.308071][ T4032] x23: ffff0000cdaf081a x22: dead000000000100 x21: ffff0000cdaf0a60 [ 1009.310246][ T4032] x20: ffff0000e1e9a037 x19: ffff0000cdaf0800 x18: 0000000000000002 [ 1009.312443][ T4032] x17: 0000000040000000 x16: ffff8000082d4b24 x15: 0000000000000002 [ 1009.314606][ T4032] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 1009.316744][ T4032] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 1009.318878][ T4032] x8 : 1bd59fffffffff92 x7 : 0000000000000000 x6 : ffff800008244078 [ 1009.321110][ T4032] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000105497a0 [ 1009.323217][ T4032] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 1009.325401][ T4032] Call trace: [ 1009.326239][ T4032] l2cap_connect_cfm+0x4fc/0xd64 [ 1009.327540][ T4032] le_conn_complete_evt+0xa7c/0x11bc [ 1009.328999][ T4032] hci_le_meta_evt+0x85c/0x3010 [ 1009.330295][ T4032] hci_event_packet+0xd10/0x11bc [ 1009.331627][ T4032] hci_rx_work+0x1cc/0x880 [ 1009.332775][ T4032] process_one_work+0x79c/0x1140 [ 1009.334123][ T4032] worker_thread+0x8f4/0x101c [ 1009.335385][ T4032] kthread+0x374/0x454 [ 1009.336442][ T4032] ret_from_fork+0x10/0x20 [ 1009.337640][ T4032] Code: 960c0b83 d343ff08 12000b09 11000d29 (38fc6908) [ 1009.339474][ T4032] ---[ end trace 677e1b5f175f622c ]--- [ 1009.886121][ T4032] Kernel panic - not syncing: Oops: Fatal exception [ 1009.887974][ T4032] SMP: stopping secondary CPUs [ 1009.889247][ T4032] Kernel Offset: disabled [ 1009.890419][ T4032] CPU features: 0x8,000081c1,21302e40 [ 1009.891899][ T4032] Memory Limit: none [ 1010.468357][ T4032] Rebooting in 86400 seconds..