[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. 2021/02/20 16:27:46 fuzzer started 2021/02/20 16:27:47 dialing manager at 10.128.0.163:41437 2021/02/20 16:27:47 syscalls: 3542 2021/02/20 16:27:47 code coverage: enabled 2021/02/20 16:27:47 comparison tracing: enabled 2021/02/20 16:27:47 extra coverage: enabled 2021/02/20 16:27:47 setuid sandbox: enabled 2021/02/20 16:27:47 namespace sandbox: enabled 2021/02/20 16:27:47 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/20 16:27:47 fault injection: enabled 2021/02/20 16:27:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/20 16:27:47 net packet injection: enabled 2021/02/20 16:27:47 net device setup: enabled 2021/02/20 16:27:47 concurrency sanitizer: enabled 2021/02/20 16:27:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/20 16:27:47 USB emulation: enabled 2021/02/20 16:27:47 hci packet injection: enabled 2021/02/20 16:27:47 wifi device emulation: enabled 2021/02/20 16:27:47 802.15.4 emulation: enabled 2021/02/20 16:27:52 suppressing KCSAN reports in functions: 'do_sys_poll' 'blk_mq_do_dispatch_sched' 'ext4_free_inodes_count' 'do_signal_stop' 'dd_has_work' 'bpf_lru_pop_free' 'pcpu_alloc' 'jbd2_journal_dirty_metadata' '__process_echoes' 'ext4_setattr' 'alloc_pid' '__ext4_handle_dirty_metadata' 'ext4_mark_iloc_dirty' 'blk_mq_dispatch_rq_list' 'wbt_wait' 'iptunnel_xmit' '__xa_clear_mark' 'ext4_writepages' 'n_tty_receive_buf_common' '__mod_timer' 'jbd2_journal_commit_transaction' 'complete_signal' 'ext4_fc_commit' 'do_nanosleep' 'audit_log_start' '__add_to_page_cache_locked' 'blk_mq_rq_ctx_init' '_prb_read_valid' 'blk_mq_sched_dispatch_requests' 'shmem_file_read_iter' 'shmem_unlink' '__jbd2_journal_file_buffer' 'ext4_mb_regular_allocator' 'expire_timers' 'futex_wait_queue_me' 'xas_find_marked' 'blk_mq_request_bypass_insert' 'generic_write_end' 'ext4_mb_good_group' '__xa_set_mark' 'exit_mm' '__mark_inode_dirty' '__filemap_fdatawrite_range' 'kauditd_thread' 'ext4_free_inode' 'ext4_mb_find_by_goal' 'wbt_done' 'start_this_handle' 'wbt_issue' 'compaction_alloc' 'do_select' 'atime_needs_update' '__delete_from_page_cache' 'dput' 'tick_nohz_next_event' 'jbd2_journal_stop' 'find_get_pages_range_tag' 'xas_clear_mark' '__ext4_new_inode' 2021/02/20 16:27:52 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/20 16:27:52 fetching corpus: 45, signal 24220/28069 (executing program) 2021/02/20 16:27:52 fetching corpus: 95, signal 38921/44567 (executing program) 2021/02/20 16:27:52 fetching corpus: 144, signal 45269/52736 (executing program) 2021/02/20 16:27:52 fetching corpus: 194, signal 51054/60287 (executing program) 2021/02/20 16:27:52 fetching corpus: 244, signal 59815/70758 (executing program) 2021/02/20 16:27:52 fetching corpus: 294, signal 65474/78109 (executing program) 2021/02/20 16:27:53 fetching corpus: 344, signal 69076/83424 (executing program) 2021/02/20 16:27:53 fetching corpus: 394, signal 74816/90813 (executing program) 2021/02/20 16:27:53 fetching corpus: 444, signal 77718/95418 (executing program) 2021/02/20 16:27:53 fetching corpus: 494, signal 80983/100340 (executing program) 2021/02/20 16:27:53 fetching corpus: 544, signal 85088/106052 (executing program) 2021/02/20 16:27:54 fetching corpus: 594, signal 90122/112619 (executing program) 2021/02/20 16:27:54 fetching corpus: 644, signal 95092/119121 (executing program) 2021/02/20 16:27:54 fetching corpus: 694, signal 100089/125620 (executing program) 2021/02/20 16:27:54 fetching corpus: 744, signal 103381/130447 (executing program) 2021/02/20 16:27:55 fetching corpus: 794, signal 107247/135829 (executing program) 2021/02/20 16:27:55 fetching corpus: 844, signal 109668/139771 (executing program) 2021/02/20 16:27:55 fetching corpus: 894, signal 112106/143752 (executing program) 2021/02/20 16:27:55 fetching corpus: 944, signal 115446/148590 (executing program) 2021/02/20 16:27:55 fetching corpus: 994, signal 118786/153357 (executing program) 2021/02/20 16:27:55 fetching corpus: 1044, signal 121740/157755 (executing program) 2021/02/20 16:27:55 fetching corpus: 1094, signal 123553/161077 (executing program) 2021/02/20 16:27:56 fetching corpus: 1144, signal 125332/164357 (executing program) 2021/02/20 16:27:56 fetching corpus: 1194, signal 129111/169459 (executing program) 2021/02/20 16:27:56 fetching corpus: 1244, signal 130611/172417 (executing program) 2021/02/20 16:27:56 fetching corpus: 1294, signal 132400/175683 (executing program) 2021/02/20 16:27:56 fetching corpus: 1344, signal 134402/179118 (executing program) 2021/02/20 16:27:56 fetching corpus: 1394, signal 136754/182859 (executing program) 2021/02/20 16:27:56 fetching corpus: 1444, signal 138505/186067 (executing program) 2021/02/20 16:27:56 fetching corpus: 1494, signal 140345/189264 (executing program) 2021/02/20 16:27:57 fetching corpus: 1544, signal 142040/192335 (executing program) 2021/02/20 16:27:57 fetching corpus: 1594, signal 144361/196022 (executing program) 2021/02/20 16:27:57 fetching corpus: 1644, signal 145824/198895 (executing program) 2021/02/20 16:27:57 fetching corpus: 1694, signal 147482/201936 (executing program) 2021/02/20 16:27:57 fetching corpus: 1744, signal 149043/204881 (executing program) 2021/02/20 16:27:57 fetching corpus: 1794, signal 151283/208423 (executing program) 2021/02/20 16:27:57 fetching corpus: 1844, signal 154031/212358 (executing program) 2021/02/20 16:27:57 fetching corpus: 1894, signal 155626/215282 (executing program) 2021/02/20 16:27:58 fetching corpus: 1944, signal 157579/218532 (executing program) 2021/02/20 16:27:58 fetching corpus: 1993, signal 159019/221299 (executing program) 2021/02/20 16:27:58 fetching corpus: 2042, signal 160885/224452 (executing program) 2021/02/20 16:27:58 fetching corpus: 2092, signal 162558/227408 (executing program) 2021/02/20 16:27:58 fetching corpus: 2142, signal 164302/230452 (executing program) 2021/02/20 16:27:58 fetching corpus: 2192, signal 166714/234010 (executing program) 2021/02/20 16:27:58 fetching corpus: 2242, signal 168242/236815 (executing program) 2021/02/20 16:27:58 fetching corpus: 2292, signal 169818/239624 (executing program) 2021/02/20 16:27:59 fetching corpus: 2342, signal 171255/242332 (executing program) 2021/02/20 16:27:59 fetching corpus: 2392, signal 172751/245055 (executing program) 2021/02/20 16:27:59 fetching corpus: 2442, signal 174946/248402 (executing program) 2021/02/20 16:27:59 fetching corpus: 2492, signal 176001/250792 (executing program) 2021/02/20 16:27:59 fetching corpus: 2542, signal 177396/253478 (executing program) 2021/02/20 16:27:59 fetching corpus: 2592, signal 179101/256339 (executing program) 2021/02/20 16:27:59 fetching corpus: 2642, signal 180333/258791 (executing program) 2021/02/20 16:27:59 fetching corpus: 2692, signal 181706/261364 (executing program) 2021/02/20 16:27:59 fetching corpus: 2742, signal 183316/264124 (executing program) 2021/02/20 16:28:00 fetching corpus: 2792, signal 185243/267171 (executing program) 2021/02/20 16:28:00 fetching corpus: 2841, signal 186389/269514 (executing program) 2021/02/20 16:28:00 fetching corpus: 2891, signal 188270/272499 (executing program) 2021/02/20 16:28:00 fetching corpus: 2941, signal 189587/274962 (executing program) 2021/02/20 16:28:00 fetching corpus: 2991, signal 191102/277655 (executing program) 2021/02/20 16:28:00 fetching corpus: 3041, signal 192678/280335 (executing program) 2021/02/20 16:28:00 fetching corpus: 3091, signal 193856/282765 (executing program) 2021/02/20 16:28:00 fetching corpus: 3141, signal 195080/285129 (executing program) 2021/02/20 16:28:01 fetching corpus: 3191, signal 196257/287484 (executing program) 2021/02/20 16:28:01 fetching corpus: 3241, signal 197860/290126 (executing program) 2021/02/20 16:28:01 fetching corpus: 3291, signal 199063/292471 (executing program) 2021/02/20 16:28:01 fetching corpus: 3341, signal 200255/294771 (executing program) 2021/02/20 16:28:01 fetching corpus: 3391, signal 201323/297032 (executing program) 2021/02/20 16:28:01 fetching corpus: 3441, signal 202370/299251 (executing program) 2021/02/20 16:28:01 fetching corpus: 3491, signal 203689/301705 (executing program) 2021/02/20 16:28:01 fetching corpus: 3541, signal 204604/303790 (executing program) 2021/02/20 16:28:01 fetching corpus: 3591, signal 205972/306243 (executing program) 2021/02/20 16:28:02 fetching corpus: 3641, signal 206722/308173 (executing program) 2021/02/20 16:28:02 fetching corpus: 3691, signal 207955/310485 (executing program) 2021/02/20 16:28:02 fetching corpus: 3741, signal 208758/312471 (executing program) 2021/02/20 16:28:02 fetching corpus: 3791, signal 210224/314934 (executing program) 2021/02/20 16:28:02 fetching corpus: 3841, signal 211840/317559 (executing program) 2021/02/20 16:28:02 fetching corpus: 3890, signal 212664/319585 (executing program) 2021/02/20 16:28:02 fetching corpus: 3940, signal 213875/321875 (executing program) 2021/02/20 16:28:02 fetching corpus: 3990, signal 215292/324349 (executing program) 2021/02/20 16:28:03 fetching corpus: 4040, signal 216423/326549 (executing program) 2021/02/20 16:28:03 fetching corpus: 4090, signal 217455/328665 (executing program) 2021/02/20 16:28:03 fetching corpus: 4140, signal 218350/330650 (executing program) 2021/02/20 16:28:03 fetching corpus: 4190, signal 219212/332622 (executing program) 2021/02/20 16:28:03 fetching corpus: 4240, signal 219960/334494 (executing program) 2021/02/20 16:28:03 fetching corpus: 4290, signal 220685/336369 (executing program) 2021/02/20 16:28:03 fetching corpus: 4340, signal 222169/338789 (executing program) 2021/02/20 16:28:03 fetching corpus: 4390, signal 222953/340682 (executing program) 2021/02/20 16:28:04 fetching corpus: 4440, signal 223957/342737 (executing program) 2021/02/20 16:28:04 fetching corpus: 4490, signal 225068/344832 (executing program) 2021/02/20 16:28:04 fetching corpus: 4540, signal 226025/346832 (executing program) 2021/02/20 16:28:04 fetching corpus: 4590, signal 226768/348670 (executing program) 2021/02/20 16:28:04 fetching corpus: 4640, signal 228222/351060 (executing program) 2021/02/20 16:28:04 fetching corpus: 4690, signal 229149/352980 (executing program) 2021/02/20 16:28:04 fetching corpus: 4740, signal 229929/354782 (executing program) 2021/02/20 16:28:05 fetching corpus: 4790, signal 231110/356928 (executing program) 2021/02/20 16:28:05 fetching corpus: 4840, signal 232458/359158 (executing program) 2021/02/20 16:28:05 fetching corpus: 4890, signal 233342/361078 (executing program) 2021/02/20 16:28:05 fetching corpus: 4940, signal 234146/362907 (executing program) 2021/02/20 16:28:05 fetching corpus: 4990, signal 235144/364904 (executing program) 2021/02/20 16:28:05 fetching corpus: 5040, signal 236172/366873 (executing program) 2021/02/20 16:28:05 fetching corpus: 5090, signal 236902/368636 (executing program) 2021/02/20 16:28:05 fetching corpus: 5140, signal 237669/370437 (executing program) 2021/02/20 16:28:05 fetching corpus: 5189, signal 238727/372459 (executing program) 2021/02/20 16:28:06 fetching corpus: 5239, signal 239657/374365 (executing program) 2021/02/20 16:28:06 fetching corpus: 5289, signal 240412/376139 (executing program) 2021/02/20 16:28:06 fetching corpus: 5339, signal 241303/378016 (executing program) 2021/02/20 16:28:06 fetching corpus: 5389, signal 242096/379788 (executing program) 2021/02/20 16:28:06 fetching corpus: 5439, signal 242881/381561 (executing program) 2021/02/20 16:28:06 fetching corpus: 5489, signal 243872/383490 (executing program) 2021/02/20 16:28:06 fetching corpus: 5539, signal 244691/385287 (executing program) 2021/02/20 16:28:06 fetching corpus: 5589, signal 245458/387027 (executing program) 2021/02/20 16:28:06 fetching corpus: 5639, signal 246478/388946 (executing program) 2021/02/20 16:28:07 fetching corpus: 5689, signal 247171/390624 (executing program) 2021/02/20 16:28:07 fetching corpus: 5739, signal 248190/392550 (executing program) 2021/02/20 16:28:07 fetching corpus: 5789, signal 248899/394269 (executing program) 2021/02/20 16:28:07 fetching corpus: 5839, signal 249781/396053 (executing program) 2021/02/20 16:28:07 fetching corpus: 5889, signal 250549/397757 (executing program) 2021/02/20 16:28:07 fetching corpus: 5939, signal 251272/399492 (executing program) 2021/02/20 16:28:08 fetching corpus: 5989, signal 252078/401246 (executing program) 2021/02/20 16:28:08 fetching corpus: 6039, signal 252784/402936 (executing program) 2021/02/20 16:28:08 fetching corpus: 6089, signal 253494/404658 (executing program) 2021/02/20 16:28:08 fetching corpus: 6139, signal 254461/406506 (executing program) 2021/02/20 16:28:08 fetching corpus: 6189, signal 255343/408260 (executing program) 2021/02/20 16:28:08 fetching corpus: 6239, signal 255810/409794 (executing program) 2021/02/20 16:28:09 fetching corpus: 6289, signal 256542/411461 (executing program) 2021/02/20 16:28:09 fetching corpus: 6339, signal 257481/413279 (executing program) 2021/02/20 16:28:09 fetching corpus: 6389, signal 258199/414955 (executing program) 2021/02/20 16:28:09 fetching corpus: 6439, signal 258789/416538 (executing program) 2021/02/20 16:28:09 fetching corpus: 6489, signal 259789/418339 (executing program) 2021/02/20 16:28:09 fetching corpus: 6539, signal 260422/419930 (executing program) 2021/02/20 16:28:09 fetching corpus: 6589, signal 261276/421634 (executing program) 2021/02/20 16:28:09 fetching corpus: 6639, signal 262027/423317 (executing program) 2021/02/20 16:28:09 fetching corpus: 6688, signal 262707/424885 (executing program) 2021/02/20 16:28:10 fetching corpus: 6738, signal 263399/426495 (executing program) 2021/02/20 16:28:10 fetching corpus: 6788, signal 263991/427985 (executing program) 2021/02/20 16:28:10 fetching corpus: 6838, signal 264827/429674 (executing program) 2021/02/20 16:28:10 fetching corpus: 6888, signal 265449/431208 (executing program) 2021/02/20 16:28:10 fetching corpus: 6938, signal 266186/432820 (executing program) 2021/02/20 16:28:10 fetching corpus: 6988, signal 266931/434425 (executing program) 2021/02/20 16:28:10 fetching corpus: 7038, signal 267706/436070 (executing program) 2021/02/20 16:28:11 fetching corpus: 7088, signal 268551/437757 (executing program) 2021/02/20 16:28:11 fetching corpus: 7138, signal 269258/439359 (executing program) 2021/02/20 16:28:11 fetching corpus: 7188, signal 269730/440752 (executing program) 2021/02/20 16:28:11 fetching corpus: 7238, signal 270337/442267 (executing program) 2021/02/20 16:28:11 fetching corpus: 7288, signal 271084/443869 (executing program) 2021/02/20 16:28:11 fetching corpus: 7338, signal 271559/445317 (executing program) 2021/02/20 16:28:11 fetching corpus: 7388, signal 272232/446838 (executing program) 2021/02/20 16:28:11 fetching corpus: 7438, signal 272980/448418 (executing program) 2021/02/20 16:28:11 fetching corpus: 7488, signal 273498/449855 (executing program) 2021/02/20 16:28:12 fetching corpus: 7538, signal 274212/451427 (executing program) 2021/02/20 16:28:12 fetching corpus: 7588, signal 274809/452951 (executing program) 2021/02/20 16:28:12 fetching corpus: 7638, signal 275409/454414 (executing program) 2021/02/20 16:28:12 fetching corpus: 7688, signal 275997/455876 (executing program) 2021/02/20 16:28:12 fetching corpus: 7738, signal 277640/457851 (executing program) 2021/02/20 16:28:12 fetching corpus: 7788, signal 278076/459216 (executing program) 2021/02/20 16:28:12 fetching corpus: 7838, signal 278633/460640 (executing program) 2021/02/20 16:28:12 fetching corpus: 7888, signal 279187/462095 (executing program) 2021/02/20 16:28:12 fetching corpus: 7938, signal 279824/463608 (executing program) 2021/02/20 16:28:13 fetching corpus: 7988, signal 280399/465059 (executing program) 2021/02/20 16:28:13 fetching corpus: 8037, signal 280899/466460 (executing program) 2021/02/20 16:28:13 fetching corpus: 8087, signal 281770/468072 (executing program) 2021/02/20 16:28:13 fetching corpus: 8137, signal 282358/469528 (executing program) 2021/02/20 16:28:13 fetching corpus: 8187, signal 282963/470981 (executing program) 2021/02/20 16:28:13 fetching corpus: 8237, signal 284173/472749 (executing program) 2021/02/20 16:28:13 fetching corpus: 8287, signal 284812/474169 (executing program) 2021/02/20 16:28:13 fetching corpus: 8337, signal 285630/475667 (executing program) 2021/02/20 16:28:13 fetching corpus: 8385, signal 286174/477074 (executing program) 2021/02/20 16:28:14 fetching corpus: 8435, signal 286905/478567 (executing program) 2021/02/20 16:28:14 fetching corpus: 8485, signal 287394/479918 (executing program) 2021/02/20 16:28:14 fetching corpus: 8535, signal 287889/481279 (executing program) 2021/02/20 16:28:14 fetching corpus: 8585, signal 288361/482591 (executing program) 2021/02/20 16:28:14 fetching corpus: 8635, signal 288818/483942 (executing program) 2021/02/20 16:28:14 fetching corpus: 8684, signal 289355/485300 (executing program) 2021/02/20 16:28:14 fetching corpus: 8734, signal 289980/486704 (executing program) 2021/02/20 16:28:14 fetching corpus: 8784, signal 290563/488124 (executing program) 2021/02/20 16:28:14 fetching corpus: 8834, signal 291182/489538 (executing program) 2021/02/20 16:28:14 fetching corpus: 8884, signal 291939/491028 (executing program) 2021/02/20 16:28:15 fetching corpus: 8934, signal 292481/492396 (executing program) 2021/02/20 16:28:15 fetching corpus: 8984, signal 293068/493795 (executing program) 2021/02/20 16:28:15 fetching corpus: 9034, signal 293806/495217 (executing program) 2021/02/20 16:28:15 fetching corpus: 9084, signal 294505/496613 (executing program) 2021/02/20 16:28:15 fetching corpus: 9134, signal 295448/498205 (executing program) 2021/02/20 16:28:15 fetching corpus: 9183, signal 296055/499611 (executing program) 2021/02/20 16:28:16 fetching corpus: 9233, signal 296621/500984 (executing program) 2021/02/20 16:28:16 fetching corpus: 9283, signal 297007/502248 (executing program) 2021/02/20 16:28:16 fetching corpus: 9333, signal 297628/503626 (executing program) 2021/02/20 16:28:16 fetching corpus: 9383, signal 298225/504988 (executing program) 2021/02/20 16:28:16 fetching corpus: 9433, signal 299073/506445 (executing program) 2021/02/20 16:28:16 fetching corpus: 9483, signal 299762/507800 (executing program) 2021/02/20 16:28:16 fetching corpus: 9533, signal 300434/509159 (executing program) 2021/02/20 16:28:16 fetching corpus: 9583, signal 301021/510493 (executing program) 2021/02/20 16:28:17 fetching corpus: 9633, signal 301509/511771 (executing program) 2021/02/20 16:28:17 fetching corpus: 9683, signal 302034/513053 (executing program) 2021/02/20 16:28:17 fetching corpus: 9733, signal 302802/514463 (executing program) 2021/02/20 16:28:17 fetching corpus: 9783, signal 303460/515806 (executing program) 2021/02/20 16:28:17 fetching corpus: 9833, signal 303999/517047 (executing program) 2021/02/20 16:28:17 fetching corpus: 9883, signal 304853/518453 (executing program) 2021/02/20 16:28:17 fetching corpus: 9933, signal 305635/519844 (executing program) 2021/02/20 16:28:17 fetching corpus: 9983, signal 306396/521216 (executing program) 2021/02/20 16:28:17 fetching corpus: 10033, signal 307216/522573 (executing program) 2021/02/20 16:28:18 fetching corpus: 10083, signal 307960/523918 (executing program) 2021/02/20 16:28:18 fetching corpus: 10133, signal 308277/525095 (executing program) 2021/02/20 16:28:18 fetching corpus: 10183, signal 308912/526388 (executing program) 2021/02/20 16:28:19 fetching corpus: 10233, signal 309362/527594 (executing program) 2021/02/20 16:28:19 fetching corpus: 10283, signal 310283/528983 (executing program) 2021/02/20 16:28:19 fetching corpus: 10333, signal 310889/530291 (executing program) 2021/02/20 16:28:19 fetching corpus: 10383, signal 311339/531493 (executing program) 2021/02/20 16:28:19 fetching corpus: 10433, signal 312183/532830 (executing program) 2021/02/20 16:28:19 fetching corpus: 10483, signal 312784/534123 (executing program) 2021/02/20 16:28:19 fetching corpus: 10533, signal 313361/535389 (executing program) 2021/02/20 16:28:19 fetching corpus: 10583, signal 313929/536619 (executing program) 2021/02/20 16:28:20 fetching corpus: 10633, signal 314333/537819 (executing program) 2021/02/20 16:28:20 fetching corpus: 10683, signal 315113/539147 (executing program) 2021/02/20 16:28:20 fetching corpus: 10733, signal 315583/540337 (executing program) 2021/02/20 16:28:20 fetching corpus: 10783, signal 316258/541605 (executing program) 2021/02/20 16:28:20 fetching corpus: 10833, signal 316758/542785 (executing program) 2021/02/20 16:28:20 fetching corpus: 10881, signal 317393/544030 (executing program) 2021/02/20 16:28:20 fetching corpus: 10931, signal 318174/545341 (executing program) 2021/02/20 16:28:20 fetching corpus: 10981, signal 318970/546627 (executing program) 2021/02/20 16:28:21 fetching corpus: 11031, signal 319486/547843 (executing program) 2021/02/20 16:28:21 fetching corpus: 11081, signal 320057/549077 (executing program) 2021/02/20 16:28:21 fetching corpus: 11131, signal 320479/550244 (executing program) 2021/02/20 16:28:21 fetching corpus: 11181, signal 321226/551526 (executing program) 2021/02/20 16:28:21 fetching corpus: 11231, signal 321724/552706 (executing program) 2021/02/20 16:28:21 fetching corpus: 11281, signal 322157/553896 (executing program) syzkaller login: [ 64.724422][ T3301] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.731081][ T3301] ieee802154 phy1 wpan1: encryption failed: -22 2021/02/20 16:28:21 fetching corpus: 11331, signal 323057/555178 (executing program) 2021/02/20 16:28:21 fetching corpus: 11381, signal 323513/556342 (executing program) 2021/02/20 16:28:21 fetching corpus: 11431, signal 324136/557549 (executing program) 2021/02/20 16:28:22 fetching corpus: 11481, signal 324726/558749 (executing program) 2021/02/20 16:28:22 fetching corpus: 11531, signal 325343/559920 (executing program) 2021/02/20 16:28:22 fetching corpus: 11581, signal 325975/561110 (executing program) 2021/02/20 16:28:22 fetching corpus: 11631, signal 326485/562328 (executing program) 2021/02/20 16:28:22 fetching corpus: 11681, signal 326978/563439 (executing program) 2021/02/20 16:28:22 fetching corpus: 11731, signal 327472/564630 (executing program) 2021/02/20 16:28:22 fetching corpus: 11781, signal 327907/565744 (executing program) 2021/02/20 16:28:22 fetching corpus: 11831, signal 328320/566837 (executing program) 2021/02/20 16:28:23 fetching corpus: 11881, signal 328946/568022 (executing program) 2021/02/20 16:28:23 fetching corpus: 11931, signal 329415/569138 (executing program) 2021/02/20 16:28:23 fetching corpus: 11981, signal 330014/570307 (executing program) 2021/02/20 16:28:23 fetching corpus: 12031, signal 330442/571407 (executing program) 2021/02/20 16:28:23 fetching corpus: 12081, signal 330936/572521 (executing program) 2021/02/20 16:28:23 fetching corpus: 12131, signal 331556/573703 (executing program) 2021/02/20 16:28:23 fetching corpus: 12181, signal 331951/574795 (executing program) 2021/02/20 16:28:23 fetching corpus: 12231, signal 332709/575999 (executing program) 2021/02/20 16:28:24 fetching corpus: 12281, signal 333156/577089 (executing program) 2021/02/20 16:28:24 fetching corpus: 12331, signal 333606/578198 (executing program) 2021/02/20 16:28:24 fetching corpus: 12381, signal 334368/579387 (executing program) 2021/02/20 16:28:24 fetching corpus: 12431, signal 335077/580553 (executing program) 2021/02/20 16:28:24 fetching corpus: 12481, signal 335590/581647 (executing program) 2021/02/20 16:28:24 fetching corpus: 12531, signal 335976/582715 (executing program) 2021/02/20 16:28:24 fetching corpus: 12581, signal 336471/583813 (executing program) 2021/02/20 16:28:24 fetching corpus: 12631, signal 336898/584919 (executing program) 2021/02/20 16:28:24 fetching corpus: 12681, signal 337306/585930 (executing program) 2021/02/20 16:28:25 fetching corpus: 12731, signal 337754/587027 (executing program) 2021/02/20 16:28:25 fetching corpus: 12781, signal 338189/588153 (executing program) 2021/02/20 16:28:25 fetching corpus: 12831, signal 338653/589186 (executing program) 2021/02/20 16:28:25 fetching corpus: 12881, signal 339114/590189 (executing program) 2021/02/20 16:28:25 fetching corpus: 12931, signal 339585/591263 (executing program) 2021/02/20 16:28:25 fetching corpus: 12981, signal 340090/592324 (executing program) 2021/02/20 16:28:25 fetching corpus: 13031, signal 340670/593450 (executing program) 2021/02/20 16:28:26 fetching corpus: 13081, signal 341184/594534 (executing program) 2021/02/20 16:28:26 fetching corpus: 13131, signal 341952/595625 (executing program) 2021/02/20 16:28:26 fetching corpus: 13181, signal 342548/596733 (executing program) 2021/02/20 16:28:26 fetching corpus: 13231, signal 343143/597739 (executing program) 2021/02/20 16:28:26 fetching corpus: 13281, signal 343623/598832 (executing program) 2021/02/20 16:28:26 fetching corpus: 13331, signal 344061/599871 (executing program) 2021/02/20 16:28:26 fetching corpus: 13381, signal 344429/600894 (executing program) 2021/02/20 16:28:26 fetching corpus: 13431, signal 344763/601895 (executing program) 2021/02/20 16:28:27 fetching corpus: 13481, signal 345498/602978 (executing program) 2021/02/20 16:28:27 fetching corpus: 13531, signal 345983/604043 (executing program) 2021/02/20 16:28:27 fetching corpus: 13581, signal 346440/605084 (executing program) 2021/02/20 16:28:27 fetching corpus: 13631, signal 346779/606101 (executing program) 2021/02/20 16:28:27 fetching corpus: 13681, signal 347271/607154 (executing program) 2021/02/20 16:28:27 fetching corpus: 13731, signal 348443/608252 (executing program) 2021/02/20 16:28:27 fetching corpus: 13781, signal 348825/609249 (executing program) 2021/02/20 16:28:27 fetching corpus: 13831, signal 349274/610254 (executing program) 2021/02/20 16:28:27 fetching corpus: 13881, signal 349671/611258 (executing program) 2021/02/20 16:28:28 fetching corpus: 13931, signal 350075/612254 (executing program) 2021/02/20 16:28:28 fetching corpus: 13980, signal 350716/613282 (executing program) 2021/02/20 16:28:28 fetching corpus: 14030, signal 351167/614240 (executing program) 2021/02/20 16:28:28 fetching corpus: 14080, signal 351600/615211 (executing program) 2021/02/20 16:28:28 fetching corpus: 14130, signal 352134/616220 (executing program) 2021/02/20 16:28:28 fetching corpus: 14180, signal 352482/617187 (executing program) 2021/02/20 16:28:28 fetching corpus: 14230, signal 352929/618157 (executing program) 2021/02/20 16:28:28 fetching corpus: 14280, signal 353475/619147 (executing program) 2021/02/20 16:28:28 fetching corpus: 14330, signal 354000/620137 (executing program) 2021/02/20 16:28:29 fetching corpus: 14380, signal 354486/621132 (executing program) 2021/02/20 16:28:29 fetching corpus: 14430, signal 354916/622099 (executing program) 2021/02/20 16:28:29 fetching corpus: 14480, signal 355460/623082 (executing program) 2021/02/20 16:28:29 fetching corpus: 14530, signal 355980/624056 (executing program) 2021/02/20 16:28:29 fetching corpus: 14580, signal 356627/625100 (executing program) 2021/02/20 16:28:29 fetching corpus: 14630, signal 357098/626040 (executing program) 2021/02/20 16:28:29 fetching corpus: 14680, signal 357469/626975 (executing program) 2021/02/20 16:28:29 fetching corpus: 14730, signal 357868/627937 (executing program) 2021/02/20 16:28:29 fetching corpus: 14780, signal 358250/628900 (executing program) 2021/02/20 16:28:29 fetching corpus: 14830, signal 358687/629815 (executing program) 2021/02/20 16:28:30 fetching corpus: 14880, signal 359088/630809 (executing program) 2021/02/20 16:28:30 fetching corpus: 14930, signal 359478/631765 (executing program) 2021/02/20 16:28:30 fetching corpus: 14980, signal 359877/632687 (executing program) 2021/02/20 16:28:30 fetching corpus: 15030, signal 360407/633662 (executing program) 2021/02/20 16:28:30 fetching corpus: 15080, signal 360900/634582 (executing program) 2021/02/20 16:28:30 fetching corpus: 15130, signal 361308/635473 (executing program) 2021/02/20 16:28:30 fetching corpus: 15180, signal 361639/636395 (executing program) 2021/02/20 16:28:30 fetching corpus: 15230, signal 362048/637321 (executing program) 2021/02/20 16:28:31 fetching corpus: 15280, signal 362450/638297 (executing program) 2021/02/20 16:28:31 fetching corpus: 15330, signal 362912/639255 (executing program) 2021/02/20 16:28:31 fetching corpus: 15379, signal 363339/640196 (executing program) 2021/02/20 16:28:31 fetching corpus: 15429, signal 363848/641105 (executing program) 2021/02/20 16:28:32 fetching corpus: 15479, signal 364276/642012 (executing program) 2021/02/20 16:28:32 fetching corpus: 15529, signal 364755/642952 (executing program) 2021/02/20 16:28:32 fetching corpus: 15579, signal 365091/643870 (executing program) 2021/02/20 16:28:32 fetching corpus: 15629, signal 365590/644782 (executing program) 2021/02/20 16:28:32 fetching corpus: 15679, signal 366121/645734 (executing program) 2021/02/20 16:28:32 fetching corpus: 15729, signal 366525/646675 (executing program) 2021/02/20 16:28:32 fetching corpus: 15779, signal 367049/647599 (executing program) 2021/02/20 16:28:33 fetching corpus: 15829, signal 367487/648515 (executing program) 2021/02/20 16:28:33 fetching corpus: 15879, signal 367922/649407 (executing program) 2021/02/20 16:28:33 fetching corpus: 15929, signal 368350/650326 (executing program) 2021/02/20 16:28:33 fetching corpus: 15978, signal 368815/651200 (executing program) 2021/02/20 16:28:33 fetching corpus: 16028, signal 369137/652078 (executing program) 2021/02/20 16:28:33 fetching corpus: 16078, signal 369785/652927 (executing program) 2021/02/20 16:28:33 fetching corpus: 16128, signal 370238/653820 (executing program) 2021/02/20 16:28:33 fetching corpus: 16176, signal 370569/654713 (executing program) 2021/02/20 16:28:33 fetching corpus: 16226, signal 370864/655609 (executing program) 2021/02/20 16:28:34 fetching corpus: 16276, signal 371374/656447 (executing program) 2021/02/20 16:28:34 fetching corpus: 16326, signal 371793/657322 (executing program) 2021/02/20 16:28:34 fetching corpus: 16376, signal 372122/658155 (executing program) 2021/02/20 16:28:34 fetching corpus: 16426, signal 372389/658156 (executing program) 2021/02/20 16:28:34 fetching corpus: 16476, signal 372928/658156 (executing program) 2021/02/20 16:28:34 fetching corpus: 16526, signal 373415/658156 (executing program) 2021/02/20 16:28:34 fetching corpus: 16576, signal 373748/658157 (executing program) 2021/02/20 16:28:34 fetching corpus: 16626, signal 374265/658157 (executing program) 2021/02/20 16:28:35 fetching corpus: 16675, signal 374677/658160 (executing program) 2021/02/20 16:28:35 fetching corpus: 16725, signal 375018/658168 (executing program) 2021/02/20 16:28:35 fetching corpus: 16775, signal 375479/658168 (executing program) 2021/02/20 16:28:35 fetching corpus: 16825, signal 375878/658168 (executing program) 2021/02/20 16:28:35 fetching corpus: 16874, signal 376222/658172 (executing program) 2021/02/20 16:28:35 fetching corpus: 16923, signal 376536/658172 (executing program) 2021/02/20 16:28:35 fetching corpus: 16973, signal 377112/658172 (executing program) 2021/02/20 16:28:35 fetching corpus: 17023, signal 377633/658176 (executing program) 2021/02/20 16:28:35 fetching corpus: 17073, signal 378112/658176 (executing program) 2021/02/20 16:28:36 fetching corpus: 17123, signal 378427/658176 (executing program) 2021/02/20 16:28:36 fetching corpus: 17172, signal 378785/658176 (executing program) 2021/02/20 16:28:36 fetching corpus: 17221, signal 379355/658176 (executing program) 2021/02/20 16:28:36 fetching corpus: 17271, signal 380531/658182 (executing program) 2021/02/20 16:28:36 fetching corpus: 17320, signal 380817/658182 (executing program) 2021/02/20 16:28:36 fetching corpus: 17369, signal 381115/658182 (executing program) 2021/02/20 16:28:36 fetching corpus: 17419, signal 381475/658182 (executing program) 2021/02/20 16:28:37 fetching corpus: 17469, signal 381992/658182 (executing program) 2021/02/20 16:28:37 fetching corpus: 17519, signal 382394/658193 (executing program) 2021/02/20 16:28:37 fetching corpus: 17569, signal 382715/658193 (executing program) 2021/02/20 16:28:37 fetching corpus: 17619, signal 382990/658193 (executing program) 2021/02/20 16:28:38 fetching corpus: 17669, signal 383285/658193 (executing program) 2021/02/20 16:28:38 fetching corpus: 17718, signal 383559/658194 (executing program) 2021/02/20 16:28:38 fetching corpus: 17768, signal 383858/658194 (executing program) 2021/02/20 16:28:38 fetching corpus: 17818, signal 384248/658194 (executing program) 2021/02/20 16:28:39 fetching corpus: 17868, signal 384678/658205 (executing program) 2021/02/20 16:28:39 fetching corpus: 17917, signal 385056/658207 (executing program) 2021/02/20 16:28:39 fetching corpus: 17966, signal 385360/658207 (executing program) 2021/02/20 16:28:39 fetching corpus: 18016, signal 385747/658207 (executing program) 2021/02/20 16:28:39 fetching corpus: 18066, signal 386103/658207 (executing program) 2021/02/20 16:28:39 fetching corpus: 18116, signal 386493/658207 (executing program) 2021/02/20 16:28:39 fetching corpus: 18166, signal 387175/658207 (executing program) 2021/02/20 16:28:39 fetching corpus: 18216, signal 387423/658207 (executing program) 2021/02/20 16:28:40 fetching corpus: 18266, signal 387794/658207 (executing program) 2021/02/20 16:28:40 fetching corpus: 18315, signal 388171/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18365, signal 388445/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18415, signal 388966/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18464, signal 389371/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18514, signal 389845/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18564, signal 390365/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18614, signal 390739/658208 (executing program) 2021/02/20 16:28:40 fetching corpus: 18664, signal 391110/658208 (executing program) 2021/02/20 16:28:41 fetching corpus: 18714, signal 391437/658208 (executing program) 2021/02/20 16:28:41 fetching corpus: 18764, signal 392073/658208 (executing program) 2021/02/20 16:28:41 fetching corpus: 18814, signal 392330/658208 (executing program) 2021/02/20 16:28:41 fetching corpus: 18864, signal 392591/658208 (executing program) 2021/02/20 16:28:41 fetching corpus: 18914, signal 393098/658212 (executing program) 2021/02/20 16:28:41 fetching corpus: 18964, signal 393506/658212 (executing program) 2021/02/20 16:28:41 fetching corpus: 19014, signal 393897/658212 (executing program) 2021/02/20 16:28:41 fetching corpus: 19064, signal 394166/658213 (executing program) 2021/02/20 16:28:41 fetching corpus: 19114, signal 394577/658214 (executing program) 2021/02/20 16:28:41 fetching corpus: 19164, signal 394918/658214 (executing program) 2021/02/20 16:28:41 fetching corpus: 19214, signal 395280/658214 (executing program) 2021/02/20 16:28:42 fetching corpus: 19264, signal 395857/658214 (executing program) 2021/02/20 16:28:42 fetching corpus: 19314, signal 396154/658214 (executing program) 2021/02/20 16:28:42 fetching corpus: 19364, signal 396526/658214 (executing program) 2021/02/20 16:28:42 fetching corpus: 19414, signal 396882/658214 (executing program) 2021/02/20 16:28:42 fetching corpus: 19463, signal 397228/658214 (executing program) 2021/02/20 16:28:42 fetching corpus: 19513, signal 397625/658217 (executing program) 2021/02/20 16:28:42 fetching corpus: 19563, signal 398053/658217 (executing program) 2021/02/20 16:28:42 fetching corpus: 19613, signal 398293/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19663, signal 398930/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19713, signal 399299/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19763, signal 399653/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19813, signal 400082/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19863, signal 400484/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19913, signal 400778/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 19963, signal 401107/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 20013, signal 401508/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 20063, signal 401977/658217 (executing program) 2021/02/20 16:28:43 fetching corpus: 20113, signal 402543/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20163, signal 403005/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20213, signal 403301/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20263, signal 403745/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20313, signal 404405/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20363, signal 404817/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20412, signal 405210/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20462, signal 405665/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20512, signal 405957/658217 (executing program) 2021/02/20 16:28:44 fetching corpus: 20562, signal 406357/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20612, signal 406670/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20662, signal 407165/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20712, signal 407516/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20762, signal 407884/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20812, signal 408161/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20862, signal 408428/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20912, signal 408820/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 20962, signal 409131/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 21012, signal 409466/658220 (executing program) 2021/02/20 16:28:45 fetching corpus: 21062, signal 409812/658220 (executing program) 2021/02/20 16:28:46 fetching corpus: 21112, signal 410106/658220 (executing program) 2021/02/20 16:28:46 fetching corpus: 21162, signal 410417/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21212, signal 410675/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21262, signal 411200/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21312, signal 411472/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21362, signal 411900/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21412, signal 412187/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21462, signal 412530/658221 (executing program) 2021/02/20 16:28:46 fetching corpus: 21512, signal 412811/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21562, signal 413268/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21612, signal 413654/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21662, signal 413951/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21712, signal 414228/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21762, signal 414554/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21812, signal 414881/658221 (executing program) 2021/02/20 16:28:47 fetching corpus: 21862, signal 415184/658223 (executing program) 2021/02/20 16:28:47 fetching corpus: 21912, signal 415610/658223 (executing program) 2021/02/20 16:28:47 fetching corpus: 21962, signal 415886/658223 (executing program) 2021/02/20 16:28:47 fetching corpus: 22012, signal 416245/658223 (executing program) 2021/02/20 16:28:47 fetching corpus: 22062, signal 416672/658223 (executing program) 2021/02/20 16:28:48 fetching corpus: 22112, signal 416988/658223 (executing program) 2021/02/20 16:28:48 fetching corpus: 22162, signal 417194/658223 (executing program) 2021/02/20 16:28:48 fetching corpus: 22212, signal 417613/658223 (executing program) 2021/02/20 16:28:48 fetching corpus: 22261, signal 417992/658225 (executing program) 2021/02/20 16:28:48 fetching corpus: 22311, signal 418309/658225 (executing program) 2021/02/20 16:28:48 fetching corpus: 22361, signal 418628/658225 (executing program) 2021/02/20 16:28:48 fetching corpus: 22411, signal 418996/658225 (executing program) 2021/02/20 16:28:48 fetching corpus: 22461, signal 419363/658225 (executing program) 2021/02/20 16:28:48 fetching corpus: 22511, signal 419676/658225 (executing program) 2021/02/20 16:28:49 fetching corpus: 22560, signal 419890/658225 (executing program) 2021/02/20 16:28:49 fetching corpus: 22610, signal 420186/658225 (executing program) 2021/02/20 16:28:49 fetching corpus: 22660, signal 420500/658225 (executing program) 2021/02/20 16:28:49 fetching corpus: 22709, signal 420939/658225 (executing program) 2021/02/20 16:28:49 fetching corpus: 22759, signal 421253/658225 (executing program) 2021/02/20 16:28:49 fetching corpus: 22809, signal 421564/658227 (executing program) 2021/02/20 16:28:49 fetching corpus: 22858, signal 421816/658227 (executing program) 2021/02/20 16:28:49 fetching corpus: 22908, signal 422164/658227 (executing program) 2021/02/20 16:28:49 fetching corpus: 22958, signal 422490/658227 (executing program) 2021/02/20 16:28:49 fetching corpus: 23008, signal 422860/658229 (executing program) 2021/02/20 16:28:49 fetching corpus: 23058, signal 423096/658229 (executing program) 2021/02/20 16:28:49 fetching corpus: 23108, signal 423495/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23158, signal 423907/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23208, signal 424294/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23257, signal 424622/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23307, signal 424894/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23357, signal 425250/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23407, signal 425659/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23457, signal 425933/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23507, signal 426303/658229 (executing program) 2021/02/20 16:28:50 fetching corpus: 23557, signal 426581/658273 (executing program) 2021/02/20 16:28:50 fetching corpus: 23607, signal 426847/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23657, signal 427121/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23707, signal 427473/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23756, signal 427768/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23806, signal 428213/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23856, signal 428480/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23906, signal 428750/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 23956, signal 428949/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 24006, signal 429347/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 24056, signal 429536/658282 (executing program) 2021/02/20 16:28:51 fetching corpus: 24106, signal 429877/658282 (executing program) 2021/02/20 16:28:52 fetching corpus: 24156, signal 430187/658282 (executing program) 2021/02/20 16:28:52 fetching corpus: 24206, signal 430354/658282 (executing program) 2021/02/20 16:28:52 fetching corpus: 24256, signal 430818/658282 (executing program) 2021/02/20 16:28:52 fetching corpus: 24306, signal 431076/658287 (executing program) 2021/02/20 16:28:52 fetching corpus: 24356, signal 431322/658287 (executing program) 2021/02/20 16:28:52 fetching corpus: 24406, signal 431695/658287 (executing program) 2021/02/20 16:28:52 fetching corpus: 24455, signal 431883/658288 (executing program) 2021/02/20 16:28:52 fetching corpus: 24505, signal 432218/658288 (executing program) 2021/02/20 16:28:52 fetching corpus: 24555, signal 432477/658288 (executing program) 2021/02/20 16:28:52 fetching corpus: 24605, signal 432755/658289 (executing program) 2021/02/20 16:28:52 fetching corpus: 24655, signal 433004/658289 (executing program) 2021/02/20 16:28:53 fetching corpus: 24705, signal 433348/658289 (executing program) 2021/02/20 16:28:53 fetching corpus: 24755, signal 433580/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 24805, signal 433941/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 24855, signal 434291/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 24905, signal 434601/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 24955, signal 434908/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 25005, signal 435204/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 25055, signal 435537/658291 (executing program) 2021/02/20 16:28:53 fetching corpus: 25105, signal 436034/658293 (executing program) 2021/02/20 16:28:53 fetching corpus: 25155, signal 436348/658293 (executing program) 2021/02/20 16:28:54 fetching corpus: 25205, signal 436723/658293 (executing program) 2021/02/20 16:28:54 fetching corpus: 25255, signal 436959/658293 (executing program) 2021/02/20 16:28:54 fetching corpus: 25305, signal 437302/658293 (executing program) 2021/02/20 16:28:54 fetching corpus: 25355, signal 437582/658293 (executing program) 2021/02/20 16:28:54 fetching corpus: 25405, signal 437908/658295 (executing program) 2021/02/20 16:28:54 fetching corpus: 25454, signal 438254/658295 (executing program) 2021/02/20 16:28:54 fetching corpus: 25503, signal 438585/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25552, signal 438896/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25602, signal 439307/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25652, signal 439740/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25702, signal 440041/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25751, signal 440442/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25801, signal 440757/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25851, signal 441047/658295 (executing program) 2021/02/20 16:28:55 fetching corpus: 25901, signal 441399/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 25951, signal 441859/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26001, signal 442157/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26051, signal 442483/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26101, signal 442798/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26151, signal 443195/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26201, signal 443470/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26251, signal 443803/658295 (executing program) 2021/02/20 16:28:56 fetching corpus: 26301, signal 444082/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26351, signal 444346/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26401, signal 444621/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26451, signal 444884/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26501, signal 445201/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26551, signal 445403/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26601, signal 445728/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26651, signal 445963/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26701, signal 446297/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26750, signal 446619/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26800, signal 446927/658310 (executing program) 2021/02/20 16:28:57 fetching corpus: 26850, signal 447145/658310 (executing program) 2021/02/20 16:28:58 fetching corpus: 26900, signal 447478/658310 (executing program) 2021/02/20 16:28:58 fetching corpus: 26949, signal 447708/658310 (executing program) 2021/02/20 16:28:58 fetching corpus: 26999, signal 447942/658312 (executing program) 2021/02/20 16:28:58 fetching corpus: 27049, signal 448357/658314 (executing program) 2021/02/20 16:28:58 fetching corpus: 27099, signal 448623/658315 (executing program) 2021/02/20 16:28:58 fetching corpus: 27149, signal 449049/658315 (executing program) 2021/02/20 16:28:58 fetching corpus: 27199, signal 449308/658315 (executing program) 2021/02/20 16:28:58 fetching corpus: 27249, signal 449613/658315 (executing program) 2021/02/20 16:28:58 fetching corpus: 27299, signal 449842/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27349, signal 450070/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27399, signal 450522/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27449, signal 450827/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27499, signal 451016/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27548, signal 451279/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27598, signal 451568/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27648, signal 451755/658315 (executing program) 2021/02/20 16:28:59 fetching corpus: 27698, signal 452101/658323 (executing program) 2021/02/20 16:28:59 fetching corpus: 27748, signal 452337/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 27798, signal 452595/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 27848, signal 452860/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 27898, signal 453111/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 27948, signal 453402/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 27996, signal 453692/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 28046, signal 453951/658324 (executing program) 2021/02/20 16:29:00 fetching corpus: 28096, signal 454358/658326 (executing program) 2021/02/20 16:29:00 fetching corpus: 28146, signal 454601/658326 (executing program) 2021/02/20 16:29:00 fetching corpus: 28196, signal 454834/658326 (executing program) 2021/02/20 16:29:01 fetching corpus: 28246, signal 455123/658326 (executing program) 2021/02/20 16:29:01 fetching corpus: 28296, signal 455437/658326 (executing program) 2021/02/20 16:29:01 fetching corpus: 28346, signal 455648/658329 (executing program) 2021/02/20 16:29:01 fetching corpus: 28396, signal 455984/658330 (executing program) 2021/02/20 16:29:01 fetching corpus: 28445, signal 456401/658330 (executing program) 2021/02/20 16:29:01 fetching corpus: 28495, signal 456688/658330 (executing program) 2021/02/20 16:29:01 fetching corpus: 28545, signal 456971/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28595, signal 457328/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28645, signal 457770/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28695, signal 457963/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28745, signal 458191/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28795, signal 458417/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28845, signal 458711/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28895, signal 458950/658330 (executing program) 2021/02/20 16:29:02 fetching corpus: 28945, signal 459327/658335 (executing program) 2021/02/20 16:29:02 fetching corpus: 28995, signal 459584/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29045, signal 460182/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29095, signal 460469/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29145, signal 460750/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29195, signal 461034/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29245, signal 461331/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29295, signal 461561/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29345, signal 461809/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29395, signal 462011/658335 (executing program) 2021/02/20 16:29:03 fetching corpus: 29445, signal 462319/658335 (executing program) 2021/02/20 16:29:04 fetching corpus: 29492, signal 462578/658335 (executing program) 2021/02/20 16:29:04 fetching corpus: 29541, signal 463237/658340 (executing program) 2021/02/20 16:29:04 fetching corpus: 29591, signal 463534/658341 (executing program) 2021/02/20 16:29:04 fetching corpus: 29640, signal 463796/658341 (executing program) 2021/02/20 16:29:04 fetching corpus: 29690, signal 464454/658342 (executing program) 2021/02/20 16:29:04 fetching corpus: 29740, signal 464786/658342 (executing program) 2021/02/20 16:29:05 fetching corpus: 29790, signal 465051/658342 (executing program) 2021/02/20 16:29:05 fetching corpus: 29840, signal 465398/658342 (executing program) 2021/02/20 16:29:05 fetching corpus: 29889, signal 465624/658346 (executing program) 2021/02/20 16:29:05 fetching corpus: 29939, signal 465893/658347 (executing program) 2021/02/20 16:29:05 fetching corpus: 29988, signal 466105/658349 (executing program) 2021/02/20 16:29:05 fetching corpus: 30038, signal 466390/658349 (executing program) 2021/02/20 16:29:05 fetching corpus: 30087, signal 466563/658349 (executing program) 2021/02/20 16:29:05 fetching corpus: 30137, signal 466789/658377 (executing program) 2021/02/20 16:29:05 fetching corpus: 30187, signal 467041/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30235, signal 467274/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30285, signal 467524/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30335, signal 467729/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30385, signal 468056/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30434, signal 468316/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30484, signal 468530/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30533, signal 468805/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30583, signal 469032/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30633, signal 469335/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30683, signal 469607/658378 (executing program) 2021/02/20 16:29:06 fetching corpus: 30733, signal 469832/658378 (executing program) 2021/02/20 16:29:07 fetching corpus: 30783, signal 470099/658378 (executing program) 2021/02/20 16:29:07 fetching corpus: 30833, signal 470333/658378 (executing program) 2021/02/20 16:29:07 fetching corpus: 30883, signal 470553/658383 (executing program) 2021/02/20 16:29:07 fetching corpus: 30933, signal 470808/658384 (executing program) 2021/02/20 16:29:07 fetching corpus: 30983, signal 471137/658384 (executing program) 2021/02/20 16:29:07 fetching corpus: 31033, signal 471405/658384 (executing program) 2021/02/20 16:29:07 fetching corpus: 31083, signal 471651/658384 (executing program) 2021/02/20 16:29:07 fetching corpus: 31133, signal 471923/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31183, signal 472155/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31233, signal 472439/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31282, signal 472660/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31332, signal 472917/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31379, signal 473103/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31429, signal 473289/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31479, signal 473635/658384 (executing program) 2021/02/20 16:29:08 fetching corpus: 31529, signal 474009/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31577, signal 474285/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31627, signal 474529/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31677, signal 474780/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31726, signal 475077/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31775, signal 475348/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31825, signal 475585/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31875, signal 475831/658389 (executing program) 2021/02/20 16:29:09 fetching corpus: 31922, signal 476039/658392 (executing program) 2021/02/20 16:29:10 fetching corpus: 31972, signal 476282/658392 (executing program) 2021/02/20 16:29:10 fetching corpus: 32022, signal 476538/658395 (executing program) 2021/02/20 16:29:10 fetching corpus: 32071, signal 476817/658397 (executing program) 2021/02/20 16:29:10 fetching corpus: 32121, signal 477086/658397 (executing program) 2021/02/20 16:29:10 fetching corpus: 32170, signal 477281/658398 (executing program) 2021/02/20 16:29:10 fetching corpus: 32220, signal 477598/658398 (executing program) 2021/02/20 16:29:11 fetching corpus: 32270, signal 477883/658398 (executing program) 2021/02/20 16:29:11 fetching corpus: 32319, signal 478137/658398 (executing program) 2021/02/20 16:29:11 fetching corpus: 32368, signal 478290/658404 (executing program) 2021/02/20 16:29:11 fetching corpus: 32418, signal 478584/658404 (executing program) 2021/02/20 16:29:11 fetching corpus: 32468, signal 478864/658485 (executing program) 2021/02/20 16:29:11 fetching corpus: 32518, signal 479060/658485 (executing program) 2021/02/20 16:29:11 fetching corpus: 32568, signal 479260/658485 (executing program) 2021/02/20 16:29:11 fetching corpus: 32618, signal 479579/658487 (executing program) 2021/02/20 16:29:11 fetching corpus: 32668, signal 479922/658493 (executing program) 2021/02/20 16:29:11 fetching corpus: 32718, signal 480131/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 32768, signal 480422/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 32818, signal 480717/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 32868, signal 480977/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 32918, signal 481180/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 32968, signal 481412/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 33018, signal 481584/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 33068, signal 481902/658493 (executing program) 2021/02/20 16:29:12 fetching corpus: 33117, signal 482213/658495 (executing program) 2021/02/20 16:29:12 fetching corpus: 33166, signal 482504/658495 (executing program) 2021/02/20 16:29:12 fetching corpus: 33216, signal 482720/658495 (executing program) 2021/02/20 16:29:13 fetching corpus: 33266, signal 482919/658495 (executing program) 2021/02/20 16:29:13 fetching corpus: 33316, signal 483273/658496 (executing program) 2021/02/20 16:29:13 fetching corpus: 33366, signal 483474/658496 (executing program) 2021/02/20 16:29:13 fetching corpus: 33415, signal 483831/658496 (executing program) 2021/02/20 16:29:13 fetching corpus: 33465, signal 484028/658496 (executing program) 2021/02/20 16:29:14 fetching corpus: 33515, signal 484333/658496 (executing program) 2021/02/20 16:29:14 fetching corpus: 33565, signal 484560/658496 (executing program) 2021/02/20 16:29:14 fetching corpus: 33613, signal 484844/658496 (executing program) 2021/02/20 16:29:14 fetching corpus: 33663, signal 485022/658496 (executing program) 2021/02/20 16:29:14 fetching corpus: 33713, signal 485225/658496 (executing program) 2021/02/20 16:29:14 fetching corpus: 33763, signal 485613/658498 (executing program) 2021/02/20 16:29:14 fetching corpus: 33813, signal 485904/658498 (executing program) 2021/02/20 16:29:14 fetching corpus: 33863, signal 486281/658498 (executing program) 2021/02/20 16:29:14 fetching corpus: 33913, signal 486522/658500 (executing program) 2021/02/20 16:29:15 fetching corpus: 33962, signal 486784/658500 (executing program) 2021/02/20 16:29:15 fetching corpus: 34012, signal 487053/658500 (executing program) 2021/02/20 16:29:15 fetching corpus: 34062, signal 487300/658500 (executing program) 2021/02/20 16:29:15 fetching corpus: 34112, signal 487581/658500 (executing program) 2021/02/20 16:29:15 fetching corpus: 34161, signal 487822/658502 (executing program) 2021/02/20 16:29:15 fetching corpus: 34211, signal 488040/658502 (executing program) 2021/02/20 16:29:15 fetching corpus: 34261, signal 488357/658502 (executing program) 2021/02/20 16:29:15 fetching corpus: 34311, signal 488591/658502 (executing program) 2021/02/20 16:29:15 fetching corpus: 34360, signal 488866/658502 (executing program) 2021/02/20 16:29:15 fetching corpus: 34410, signal 489099/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34460, signal 489404/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34509, signal 489713/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34558, signal 489966/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34608, signal 490216/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34658, signal 490472/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34708, signal 490698/658502 (executing program) 2021/02/20 16:29:16 fetching corpus: 34758, signal 491001/658502 (executing program) 2021/02/20 16:29:17 fetching corpus: 34808, signal 491203/658502 (executing program) 2021/02/20 16:29:17 fetching corpus: 34858, signal 491526/658502 (executing program) 2021/02/20 16:29:17 fetching corpus: 34907, signal 491699/658502 (executing program) 2021/02/20 16:29:17 fetching corpus: 34957, signal 492001/658504 (executing program) 2021/02/20 16:29:17 fetching corpus: 35007, signal 492224/658504 (executing program) 2021/02/20 16:29:17 fetching corpus: 35056, signal 492454/658507 (executing program) 2021/02/20 16:29:17 fetching corpus: 35106, signal 492762/658507 (executing program) 2021/02/20 16:29:17 fetching corpus: 35156, signal 493029/658507 (executing program) 2021/02/20 16:29:17 fetching corpus: 35206, signal 493211/658507 (executing program) 2021/02/20 16:29:17 fetching corpus: 35256, signal 493465/658507 (executing program) 2021/02/20 16:29:17 fetching corpus: 35306, signal 493726/658508 (executing program) 2021/02/20 16:29:17 fetching corpus: 35355, signal 493909/658510 (executing program) 2021/02/20 16:29:17 fetching corpus: 35404, signal 494128/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35454, signal 494398/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35504, signal 494676/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35554, signal 494906/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35604, signal 495114/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35654, signal 495363/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35704, signal 495593/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35754, signal 495867/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35804, signal 496050/658510 (executing program) 2021/02/20 16:29:18 fetching corpus: 35851, signal 496292/658512 (executing program) 2021/02/20 16:29:18 fetching corpus: 35901, signal 496579/658512 (executing program) 2021/02/20 16:29:19 fetching corpus: 35951, signal 496810/658512 (executing program) 2021/02/20 16:29:19 fetching corpus: 36001, signal 497008/658512 (executing program) 2021/02/20 16:29:19 fetching corpus: 36051, signal 497211/658514 (executing program) 2021/02/20 16:29:19 fetching corpus: 36101, signal 497418/658514 (executing program) 2021/02/20 16:29:19 fetching corpus: 36151, signal 497619/658514 (executing program) 2021/02/20 16:29:19 fetching corpus: 36201, signal 498006/658514 (executing program) 2021/02/20 16:29:19 fetching corpus: 36251, signal 498245/658514 (executing program) 2021/02/20 16:29:20 fetching corpus: 36301, signal 498478/658514 (executing program) 2021/02/20 16:29:20 fetching corpus: 36351, signal 498749/658517 (executing program) 2021/02/20 16:29:20 fetching corpus: 36401, signal 498992/658517 (executing program) 2021/02/20 16:29:20 fetching corpus: 36451, signal 499254/658518 (executing program) 2021/02/20 16:29:20 fetching corpus: 36501, signal 499527/658518 (executing program) 2021/02/20 16:29:20 fetching corpus: 36551, signal 499730/658518 (executing program) 2021/02/20 16:29:20 fetching corpus: 36601, signal 499934/658518 (executing program) 2021/02/20 16:29:20 fetching corpus: 36651, signal 500147/658518 (executing program) 2021/02/20 16:29:20 fetching corpus: 36701, signal 500358/658526 (executing program) 2021/02/20 16:29:21 fetching corpus: 36751, signal 500697/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 36800, signal 501019/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 36850, signal 501324/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 36900, signal 501519/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 36950, signal 501723/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 37000, signal 501958/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 37050, signal 502176/658553 (executing program) 2021/02/20 16:29:21 fetching corpus: 37100, signal 502361/658554 (executing program) 2021/02/20 16:29:21 fetching corpus: 37148, signal 502571/658554 (executing program) 2021/02/20 16:29:22 fetching corpus: 37198, signal 502751/658554 (executing program) 2021/02/20 16:29:22 fetching corpus: 37248, signal 502911/658554 (executing program) 2021/02/20 16:29:22 fetching corpus: 37297, signal 503161/658554 (executing program) 2021/02/20 16:29:22 fetching corpus: 37347, signal 503402/658556 (executing program) 2021/02/20 16:29:22 fetching corpus: 37397, signal 503584/658568 (executing program) 2021/02/20 16:29:22 fetching corpus: 37447, signal 503795/658568 (executing program) 2021/02/20 16:29:22 fetching corpus: 37497, signal 504137/658568 (executing program) 2021/02/20 16:29:22 fetching corpus: 37547, signal 504384/658568 (executing program) 2021/02/20 16:29:22 fetching corpus: 37596, signal 504626/658568 (executing program) 2021/02/20 16:29:22 fetching corpus: 37646, signal 504893/658571 (executing program) 2021/02/20 16:29:22 fetching corpus: 37696, signal 505153/658571 (executing program) 2021/02/20 16:29:22 fetching corpus: 37746, signal 505321/658571 (executing program) 2021/02/20 16:29:22 fetching corpus: 37796, signal 505569/658571 (executing program) 2021/02/20 16:29:22 fetching corpus: 37846, signal 505784/658571 (executing program) 2021/02/20 16:29:22 fetching corpus: 37896, signal 506019/658574 (executing program) 2021/02/20 16:29:23 fetching corpus: 37946, signal 506178/658576 (executing program) 2021/02/20 16:29:23 fetching corpus: 37995, signal 506477/658576 (executing program) 2021/02/20 16:29:23 fetching corpus: 38045, signal 506709/658576 (executing program) 2021/02/20 16:29:23 fetching corpus: 38095, signal 506964/658576 (executing program) [ 126.158413][ T3301] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.165853][ T3301] ieee802154 phy1 wpan1: encryption failed: -22 2021/02/20 16:29:23 fetching corpus: 38145, signal 507148/658576 (executing program) 2021/02/20 16:29:23 fetching corpus: 38195, signal 507408/658576 (executing program) 2021/02/20 16:29:23 fetching corpus: 38245, signal 507655/658576 (executing program) 2021/02/20 16:29:23 fetching corpus: 38295, signal 507848/658582 (executing program) 2021/02/20 16:29:23 fetching corpus: 38345, signal 508087/658582 (executing program) 2021/02/20 16:29:23 fetching corpus: 38395, signal 508287/658582 (executing program) 2021/02/20 16:29:23 fetching corpus: 38445, signal 508518/658582 (executing program) 2021/02/20 16:29:23 fetching corpus: 38495, signal 508746/658582 (executing program) 2021/02/20 16:29:23 fetching corpus: 38545, signal 508989/658583 (executing program) 2021/02/20 16:29:23 fetching corpus: 38594, signal 509195/658584 (executing program) 2021/02/20 16:29:23 fetching corpus: 38644, signal 509405/658584 (executing program) 2021/02/20 16:29:23 fetching corpus: 38694, signal 509641/658586 (executing program) 2021/02/20 16:29:24 fetching corpus: 38744, signal 509924/658586 (executing program) 2021/02/20 16:29:24 fetching corpus: 38793, signal 510184/658589 (executing program) 2021/02/20 16:29:24 fetching corpus: 38843, signal 510356/658590 (executing program) 2021/02/20 16:29:24 fetching corpus: 38893, signal 510597/658590 (executing program) 2021/02/20 16:29:24 fetching corpus: 38942, signal 510904/658590 (executing program) 2021/02/20 16:29:24 fetching corpus: 38992, signal 511196/658590 (executing program) 2021/02/20 16:29:24 fetching corpus: 39042, signal 511420/658590 (executing program) 2021/02/20 16:29:24 fetching corpus: 39092, signal 511734/658593 (executing program) 2021/02/20 16:29:24 fetching corpus: 39142, signal 511912/658597 (executing program) 2021/02/20 16:29:24 fetching corpus: 39192, signal 512130/658597 (executing program) 2021/02/20 16:29:24 fetching corpus: 39242, signal 512313/658597 (executing program) 2021/02/20 16:29:24 fetching corpus: 39292, signal 512493/658597 (executing program) 2021/02/20 16:29:25 fetching corpus: 39341, signal 512733/658597 (executing program) 2021/02/20 16:29:25 fetching corpus: 39390, signal 512929/658597 (executing program) 2021/02/20 16:29:25 fetching corpus: 39440, signal 513209/658597 (executing program) 2021/02/20 16:29:25 fetching corpus: 39490, signal 513528/658597 (executing program) 2021/02/20 16:29:25 fetching corpus: 39540, signal 513798/658608 (executing program) 2021/02/20 16:29:25 fetching corpus: 39590, signal 514063/658608 (executing program) 2021/02/20 16:29:25 fetching corpus: 39640, signal 514242/658608 (executing program) 2021/02/20 16:29:25 fetching corpus: 39690, signal 514457/658608 (executing program) 2021/02/20 16:29:25 fetching corpus: 39740, signal 514661/658608 (executing program) 2021/02/20 16:29:25 fetching corpus: 39790, signal 514896/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 39840, signal 515170/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 39890, signal 515376/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 39939, signal 515684/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 39989, signal 515870/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 40039, signal 516120/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 40088, signal 516371/658610 (executing program) 2021/02/20 16:29:25 fetching corpus: 40138, signal 516550/658610 (executing program) 2021/02/20 16:29:26 fetching corpus: 40188, signal 516718/658610 (executing program) 2021/02/20 16:29:26 fetching corpus: 40238, signal 516890/658610 (executing program) 2021/02/20 16:29:26 fetching corpus: 40288, signal 517100/658610 (executing program) 2021/02/20 16:29:26 fetching corpus: 40338, signal 517298/658610 (executing program) 2021/02/20 16:29:26 fetching corpus: 40388, signal 517551/658616 (executing program) 2021/02/20 16:29:26 fetching corpus: 40438, signal 517732/658616 (executing program) 2021/02/20 16:29:26 fetching corpus: 40488, signal 517956/658616 (executing program) 2021/02/20 16:29:26 fetching corpus: 40537, signal 518151/658620 (executing program) 2021/02/20 16:29:26 fetching corpus: 40587, signal 518356/658622 (executing program) 2021/02/20 16:29:26 fetching corpus: 40637, signal 518602/658623 (executing program) 2021/02/20 16:29:26 fetching corpus: 40687, signal 518899/658623 (executing program) 2021/02/20 16:29:26 fetching corpus: 40737, signal 519159/658623 (executing program) 2021/02/20 16:29:26 fetching corpus: 40787, signal 519321/658623 (executing program) 2021/02/20 16:29:26 fetching corpus: 40837, signal 519558/658623 (executing program) 2021/02/20 16:29:26 fetching corpus: 40886, signal 519762/658623 (executing program) 2021/02/20 16:29:26 fetching corpus: 40936, signal 520069/658628 (executing program) 2021/02/20 16:29:26 fetching corpus: 40986, signal 520410/658628 (executing program) 2021/02/20 16:29:26 fetching corpus: 41035, signal 520582/658628 (executing program) 2021/02/20 16:29:26 fetching corpus: 41085, signal 520787/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41134, signal 521052/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41184, signal 521254/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41234, signal 521441/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41283, signal 521669/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41333, signal 521845/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41383, signal 522010/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41433, signal 522237/658628 (executing program) 2021/02/20 16:29:27 fetching corpus: 41483, signal 522439/658629 (executing program) 2021/02/20 16:29:27 fetching corpus: 41533, signal 522747/658629 (executing program) 2021/02/20 16:29:27 fetching corpus: 41583, signal 522959/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41633, signal 523222/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41683, signal 523399/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41733, signal 524353/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41783, signal 524532/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41833, signal 524783/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41883, signal 525004/658632 (executing program) 2021/02/20 16:29:27 fetching corpus: 41933, signal 525189/658632 (executing program) 2021/02/20 16:29:28 fetching corpus: 41982, signal 525416/658632 (executing program) 2021/02/20 16:29:28 fetching corpus: 42032, signal 525663/658634 (executing program) 2021/02/20 16:29:28 fetching corpus: 42082, signal 525843/658634 (executing program) 2021/02/20 16:29:28 fetching corpus: 42131, signal 526024/658634 (executing program) 2021/02/20 16:29:28 fetching corpus: 42181, signal 526261/658634 (executing program) 2021/02/20 16:29:28 fetching corpus: 42230, signal 526456/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42280, signal 526630/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42330, signal 526814/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42380, signal 527016/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42430, signal 527189/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42480, signal 527396/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42530, signal 527666/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42580, signal 527907/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42629, signal 528105/658692 (executing program) 2021/02/20 16:29:28 fetching corpus: 42679, signal 528323/658695 (executing program) 2021/02/20 16:29:28 fetching corpus: 42729, signal 528614/658695 (executing program) 2021/02/20 16:29:29 fetching corpus: 42779, signal 528845/658702 (executing program) 2021/02/20 16:29:29 fetching corpus: 42829, signal 529052/658702 (executing program) 2021/02/20 16:29:29 fetching corpus: 42879, signal 529338/658702 (executing program) 2021/02/20 16:29:29 fetching corpus: 42928, signal 529597/658702 (executing program) 2021/02/20 16:29:29 fetching corpus: 42978, signal 529823/658702 (executing program) 2021/02/20 16:29:29 fetching corpus: 43028, signal 530036/658702 (executing program) 2021/02/20 16:29:29 fetching corpus: 43078, signal 530214/658703 (executing program) 2021/02/20 16:29:29 fetching corpus: 43128, signal 530362/658703 (executing program) 2021/02/20 16:29:29 fetching corpus: 43177, signal 530565/658704 (executing program) 2021/02/20 16:29:29 fetching corpus: 43225, signal 530793/658704 (executing program) 2021/02/20 16:29:29 fetching corpus: 43275, signal 531001/658710 (executing program) 2021/02/20 16:29:29 fetching corpus: 43325, signal 531197/658710 (executing program) 2021/02/20 16:29:29 fetching corpus: 43375, signal 531441/658710 (executing program) 2021/02/20 16:29:29 fetching corpus: 43425, signal 531663/658710 (executing program) 2021/02/20 16:29:29 fetching corpus: 43474, signal 531894/658710 (executing program) 2021/02/20 16:29:29 fetching corpus: 43523, signal 532106/658710 (executing program) 2021/02/20 16:29:29 fetching corpus: 43573, signal 532334/658711 (executing program) 2021/02/20 16:29:30 fetching corpus: 43622, signal 532559/658711 (executing program) 2021/02/20 16:29:30 fetching corpus: 43672, signal 532764/658711 (executing program) 2021/02/20 16:29:30 fetching corpus: 43721, signal 532957/658711 (executing program) 2021/02/20 16:29:30 fetching corpus: 43769, signal 533187/658711 (executing program) 2021/02/20 16:29:30 fetching corpus: 43818, signal 533377/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 43868, signal 533559/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 43918, signal 533725/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 43968, signal 533960/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44018, signal 534202/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44068, signal 534477/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44118, signal 534878/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44168, signal 535094/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44218, signal 535277/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44268, signal 535488/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44317, signal 535717/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44367, signal 535903/658713 (executing program) 2021/02/20 16:29:30 fetching corpus: 44417, signal 536080/658718 (executing program) 2021/02/20 16:29:31 fetching corpus: 44467, signal 536241/658718 (executing program) 2021/02/20 16:29:31 fetching corpus: 44516, signal 536470/658719 (executing program) 2021/02/20 16:29:31 fetching corpus: 44566, signal 536653/658719 (executing program) 2021/02/20 16:29:31 fetching corpus: 44616, signal 536840/658719 (executing program) 2021/02/20 16:29:31 fetching corpus: 44666, signal 537030/658719 (executing program) 2021/02/20 16:29:31 fetching corpus: 44716, signal 537214/658780 (executing program) 2021/02/20 16:29:31 fetching corpus: 44765, signal 537643/658780 (executing program) 2021/02/20 16:29:31 fetching corpus: 44814, signal 537848/658781 (executing program) 2021/02/20 16:29:31 fetching corpus: 44864, signal 538065/658781 (executing program) 2021/02/20 16:29:31 fetching corpus: 44913, signal 538224/658782 (executing program) 2021/02/20 16:29:31 fetching corpus: 44963, signal 538407/658782 (executing program) 2021/02/20 16:29:31 fetching corpus: 45013, signal 538557/658782 (executing program) 2021/02/20 16:29:31 fetching corpus: 45063, signal 538764/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45113, signal 539005/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45163, signal 539409/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45213, signal 539642/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45263, signal 539869/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45312, signal 540122/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45362, signal 540346/658784 (executing program) 2021/02/20 16:29:31 fetching corpus: 45411, signal 540548/658784 (executing program) 2021/02/20 16:29:32 fetching corpus: 45460, signal 540746/658788 (executing program) 2021/02/20 16:29:32 fetching corpus: 45510, signal 540975/658788 (executing program) 2021/02/20 16:29:32 fetching corpus: 45560, signal 541277/658789 (executing program) 2021/02/20 16:29:32 fetching corpus: 45610, signal 541461/658789 (executing program) 2021/02/20 16:29:32 fetching corpus: 45660, signal 541699/658789 (executing program) 2021/02/20 16:29:32 fetching corpus: 45710, signal 541889/658789 (executing program) 2021/02/20 16:29:32 fetching corpus: 45759, signal 542129/658789 (executing program) 2021/02/20 16:29:32 fetching corpus: 45809, signal 542371/658789 (executing program) 2021/02/20 16:29:32 fetching corpus: 45859, signal 542545/658793 (executing program) 2021/02/20 16:29:32 fetching corpus: 45909, signal 542738/658795 (executing program) 2021/02/20 16:29:32 fetching corpus: 45959, signal 542931/658795 (executing program) 2021/02/20 16:29:32 fetching corpus: 46008, signal 543161/658800 (executing program) 2021/02/20 16:29:32 fetching corpus: 46058, signal 543347/658801 (executing program) 2021/02/20 16:29:33 fetching corpus: 46107, signal 543576/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46157, signal 543868/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46207, signal 544023/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46257, signal 544232/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46307, signal 544543/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46357, signal 544799/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46407, signal 545047/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46457, signal 545191/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46507, signal 545387/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46557, signal 545558/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46607, signal 545810/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46656, signal 545977/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46706, signal 546164/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46756, signal 546347/658802 (executing program) 2021/02/20 16:29:33 fetching corpus: 46806, signal 546563/658802 (executing program) 2021/02/20 16:29:34 fetching corpus: 46856, signal 546795/658802 (executing program) 2021/02/20 16:29:34 fetching corpus: 46906, signal 546964/658802 (executing program) 2021/02/20 16:29:34 fetching corpus: 46956, signal 547134/658802 (executing program) 2021/02/20 16:29:34 fetching corpus: 47006, signal 547409/658802 (executing program) 2021/02/20 16:29:34 fetching corpus: 47056, signal 547676/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47105, signal 547812/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47155, signal 548044/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47205, signal 548238/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47255, signal 548401/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47305, signal 548564/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47354, signal 548748/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47403, signal 548951/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47453, signal 549303/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47503, signal 549477/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47553, signal 549730/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47603, signal 549889/658821 (executing program) 2021/02/20 16:29:34 fetching corpus: 47653, signal 550191/658821 (executing program) 2021/02/20 16:29:35 fetching corpus: 47703, signal 550395/658828 (executing program) 2021/02/20 16:29:35 fetching corpus: 47753, signal 550570/658828 (executing program) 2021/02/20 16:29:35 fetching corpus: 47803, signal 550754/658828 (executing program) 2021/02/20 16:29:35 fetching corpus: 47853, signal 550962/658828 (executing program) 2021/02/20 16:29:35 fetching corpus: 47900, signal 551161/658832 (executing program) 2021/02/20 16:29:35 fetching corpus: 47950, signal 551319/658832 (executing program) 2021/02/20 16:29:35 fetching corpus: 48000, signal 551581/658832 (executing program) 2021/02/20 16:29:35 fetching corpus: 48050, signal 551783/658834 (executing program) 2021/02/20 16:29:35 fetching corpus: 48100, signal 551970/658836 (executing program) 2021/02/20 16:29:35 fetching corpus: 48150, signal 552225/658836 (executing program) 2021/02/20 16:29:35 fetching corpus: 48199, signal 552411/658836 (executing program) 2021/02/20 16:29:36 fetching corpus: 48249, signal 552655/658836 (executing program) 2021/02/20 16:29:36 fetching corpus: 48299, signal 552874/658836 (executing program) 2021/02/20 16:29:36 fetching corpus: 48348, signal 553041/658836 (executing program) 2021/02/20 16:29:36 fetching corpus: 48398, signal 553191/658837 (executing program) 2021/02/20 16:29:36 fetching corpus: 48448, signal 553398/658837 (executing program) 2021/02/20 16:29:36 fetching corpus: 48497, signal 553571/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48547, signal 553765/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48597, signal 553965/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48647, signal 554092/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48697, signal 554282/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48747, signal 554497/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48796, signal 554720/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48846, signal 554906/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48896, signal 555139/658840 (executing program) 2021/02/20 16:29:36 fetching corpus: 48945, signal 555325/658840 (executing program) 2021/02/20 16:29:37 fetching corpus: 48994, signal 555766/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49044, signal 555942/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49094, signal 556192/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49144, signal 556373/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49193, signal 556655/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49243, signal 556826/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49293, signal 557123/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49343, signal 557330/658844 (executing program) 2021/02/20 16:29:37 fetching corpus: 49393, signal 557570/658846 (executing program) 2021/02/20 16:29:37 fetching corpus: 49442, signal 557824/658852 (executing program) 2021/02/20 16:29:37 fetching corpus: 49492, signal 557998/658852 (executing program) 2021/02/20 16:29:37 fetching corpus: 49541, signal 558259/658852 (executing program) 2021/02/20 16:29:37 fetching corpus: 49590, signal 558467/658852 (executing program) 2021/02/20 16:29:37 fetching corpus: 49640, signal 558603/658852 (executing program) 2021/02/20 16:29:37 fetching corpus: 49690, signal 558805/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 49739, signal 558962/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 49788, signal 559211/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 49837, signal 559380/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 49887, signal 559515/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 49936, signal 559716/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 49986, signal 559931/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 50036, signal 560117/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 50086, signal 560300/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 50136, signal 560473/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 50186, signal 560731/658852 (executing program) 2021/02/20 16:29:38 fetching corpus: 50236, signal 561113/658855 (executing program) 2021/02/20 16:29:38 fetching corpus: 50286, signal 561314/658877 (executing program) 2021/02/20 16:29:38 fetching corpus: 50336, signal 561534/658877 (executing program) 2021/02/20 16:29:38 fetching corpus: 50386, signal 561733/658877 (executing program) 2021/02/20 16:29:38 fetching corpus: 50436, signal 561926/658877 (executing program) 2021/02/20 16:29:38 fetching corpus: 50486, signal 562106/658877 (executing program) 2021/02/20 16:29:39 fetching corpus: 50536, signal 562253/658877 (executing program) 2021/02/20 16:29:39 fetching corpus: 50586, signal 562409/658877 (executing program) 2021/02/20 16:29:39 fetching corpus: 50636, signal 562587/658877 (executing program) 2021/02/20 16:29:39 fetching corpus: 50686, signal 562837/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 50736, signal 563053/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 50785, signal 563256/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 50834, signal 563429/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 50883, signal 563632/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 50933, signal 563876/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 50983, signal 564061/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51033, signal 564377/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51083, signal 564564/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51133, signal 564820/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51183, signal 565010/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51233, signal 565307/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51283, signal 565462/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51333, signal 565594/658878 (executing program) 2021/02/20 16:29:39 fetching corpus: 51383, signal 565741/658878 (executing program) 2021/02/20 16:29:40 fetching corpus: 51432, signal 565898/658878 (executing program) 2021/02/20 16:29:40 fetching corpus: 51482, signal 566071/658878 (executing program) 2021/02/20 16:29:40 fetching corpus: 51531, signal 566308/658880 (executing program) 2021/02/20 16:29:40 fetching corpus: 51581, signal 566517/658880 (executing program) 2021/02/20 16:29:40 fetching corpus: 51629, signal 566732/658886 (executing program) 2021/02/20 16:29:40 fetching corpus: 51679, signal 566903/658887 (executing program) 2021/02/20 16:29:40 fetching corpus: 51729, signal 567099/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 51779, signal 567303/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 51829, signal 567479/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 51878, signal 567627/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 51927, signal 567795/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 51977, signal 567968/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 52027, signal 568266/658889 (executing program) 2021/02/20 16:29:40 fetching corpus: 52077, signal 568515/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52127, signal 568692/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52177, signal 568917/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52227, signal 569088/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52276, signal 569282/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52326, signal 569534/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52376, signal 569731/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52426, signal 569953/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52476, signal 570089/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52526, signal 570361/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52576, signal 570535/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52626, signal 570766/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52676, signal 570924/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52726, signal 571065/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52776, signal 571219/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52825, signal 571516/658889 (executing program) 2021/02/20 16:29:41 fetching corpus: 52874, signal 571672/658891 (executing program) 2021/02/20 16:29:41 fetching corpus: 52924, signal 573500/658891 (executing program) 2021/02/20 16:29:41 fetching corpus: 52974, signal 573665/658891 (executing program) 2021/02/20 16:29:41 fetching corpus: 53024, signal 573856/658891 (executing program) 2021/02/20 16:29:41 fetching corpus: 53074, signal 574058/658891 (executing program) 2021/02/20 16:29:42 fetching corpus: 53124, signal 574227/658891 (executing program) 2021/02/20 16:29:42 fetching corpus: 53172, signal 574393/658891 (executing program) 2021/02/20 16:29:42 fetching corpus: 53222, signal 574553/658892 (executing program) 2021/02/20 16:29:42 fetching corpus: 53272, signal 574880/658892 (executing program) 2021/02/20 16:29:42 fetching corpus: 53320, signal 575032/658902 (executing program) 2021/02/20 16:29:42 fetching corpus: 53370, signal 575225/658902 (executing program) 2021/02/20 16:29:42 fetching corpus: 53419, signal 575461/658902 (executing program) 2021/02/20 16:29:42 fetching corpus: 53469, signal 575611/658902 (executing program) 2021/02/20 16:29:42 fetching corpus: 53519, signal 575766/658902 (executing program) 2021/02/20 16:29:42 fetching corpus: 53568, signal 575960/658905 (executing program) 2021/02/20 16:29:42 fetching corpus: 53618, signal 576145/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53668, signal 576301/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53718, signal 576519/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53767, signal 576707/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53817, signal 576978/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53867, signal 577149/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53917, signal 577381/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 53967, signal 577538/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 54017, signal 577775/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 54067, signal 577977/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 54116, signal 578148/658905 (executing program) 2021/02/20 16:29:43 fetching corpus: 54166, signal 578296/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54216, signal 578440/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54266, signal 578612/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54316, signal 578842/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54366, signal 579070/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54416, signal 579252/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54466, signal 579435/658906 (executing program) 2021/02/20 16:29:43 fetching corpus: 54516, signal 579632/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54566, signal 579842/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54616, signal 580001/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54665, signal 580161/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54715, signal 580327/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54765, signal 580550/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54815, signal 580746/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54865, signal 580894/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54914, signal 581116/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 54964, signal 581284/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 55014, signal 581411/658906 (executing program) 2021/02/20 16:29:44 fetching corpus: 55064, signal 581630/658907 (executing program) 2021/02/20 16:29:44 fetching corpus: 55113, signal 581858/658907 (executing program) 2021/02/20 16:29:44 fetching corpus: 55163, signal 582010/658932 (executing program) 2021/02/20 16:29:44 fetching corpus: 55213, signal 582181/658937 (executing program) 2021/02/20 16:29:44 fetching corpus: 55263, signal 582382/658937 (executing program) 2021/02/20 16:29:44 fetching corpus: 55312, signal 582582/658937 (executing program) 2021/02/20 16:29:44 fetching corpus: 55362, signal 582728/658937 (executing program) 2021/02/20 16:29:45 fetching corpus: 55412, signal 583278/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55461, signal 583414/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55511, signal 583564/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55561, signal 583754/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55611, signal 583926/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55660, signal 584125/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55710, signal 584306/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55760, signal 584488/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55810, signal 584630/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55859, signal 584790/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55909, signal 584958/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 55958, signal 585126/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 56007, signal 585339/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 56055, signal 585479/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 56105, signal 585660/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 56155, signal 585864/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 56205, signal 586023/658940 (executing program) 2021/02/20 16:29:45 fetching corpus: 56255, signal 586309/658940 (executing program) 2021/02/20 16:29:46 fetching corpus: 56305, signal 586448/658940 (executing program) 2021/02/20 16:29:46 fetching corpus: 56355, signal 586612/658940 (executing program) 2021/02/20 16:29:46 fetching corpus: 56405, signal 586745/658940 (executing program) 2021/02/20 16:29:46 fetching corpus: 56455, signal 587156/658940 (executing program) 2021/02/20 16:29:46 fetching corpus: 56505, signal 587339/658940 (executing program) 2021/02/20 16:29:46 fetching corpus: 56554, signal 587544/659008 (executing program) 2021/02/20 16:29:46 fetching corpus: 56604, signal 587710/659008 (executing program) 2021/02/20 16:29:46 fetching corpus: 56654, signal 587927/659008 (executing program) 2021/02/20 16:29:46 fetching corpus: 56704, signal 588071/659008 (executing program) 2021/02/20 16:29:46 fetching corpus: 56754, signal 588498/659008 (executing program) 2021/02/20 16:29:46 fetching corpus: 56804, signal 588676/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 56854, signal 588855/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 56904, signal 589057/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 56953, signal 589296/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 57003, signal 589490/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 57053, signal 589734/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 57103, signal 589916/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 57153, signal 590087/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 57203, signal 590287/659010 (executing program) 2021/02/20 16:29:46 fetching corpus: 57252, signal 590484/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57302, signal 590840/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57352, signal 590993/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57402, signal 591162/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57452, signal 591294/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57502, signal 591498/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57551, signal 591637/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57601, signal 591860/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57651, signal 592022/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57701, signal 592314/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57751, signal 592514/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57801, signal 592638/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57851, signal 592828/659010 (executing program) 2021/02/20 16:29:47 fetching corpus: 57901, signal 592990/659010 (executing program) 2021/02/20 16:29:48 fetching corpus: 57951, signal 593124/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 57999, signal 593330/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58048, signal 593511/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58098, signal 593680/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58147, signal 593843/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58197, signal 594035/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58246, signal 594177/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58296, signal 594340/659018 (executing program) 2021/02/20 16:29:48 fetching corpus: 58346, signal 594446/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58396, signal 594624/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58446, signal 594773/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58496, signal 594930/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58545, signal 595042/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58594, signal 595215/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58644, signal 595404/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58694, signal 595710/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58744, signal 595864/659020 (executing program) 2021/02/20 16:29:48 fetching corpus: 58794, signal 596015/659020 (executing program) 2021/02/20 16:29:49 fetching corpus: 58844, signal 596197/659020 (executing program) 2021/02/20 16:29:49 fetching corpus: 58894, signal 596385/659020 (executing program) 2021/02/20 16:29:49 fetching corpus: 58943, signal 596561/659020 (executing program) 2021/02/20 16:29:49 fetching corpus: 58993, signal 596712/659020 (executing program) 2021/02/20 16:29:49 fetching corpus: 59043, signal 596892/659021 (executing program) 2021/02/20 16:29:49 fetching corpus: 59093, signal 597056/659021 (executing program) 2021/02/20 16:29:49 fetching corpus: 59143, signal 597176/659021 (executing program) 2021/02/20 16:29:49 fetching corpus: 59193, signal 597337/659021 (executing program) 2021/02/20 16:29:49 fetching corpus: 59242, signal 597497/659021 (executing program) 2021/02/20 16:29:49 fetching corpus: 59291, signal 597650/659022 (executing program) 2021/02/20 16:29:49 fetching corpus: 59341, signal 597797/659022 (executing program) 2021/02/20 16:29:49 fetching corpus: 59391, signal 597918/659022 (executing program) 2021/02/20 16:29:49 fetching corpus: 59439, signal 598082/659039 (executing program) 2021/02/20 16:29:49 fetching corpus: 59489, signal 598273/659039 (executing program) 2021/02/20 16:29:49 fetching corpus: 59539, signal 598524/659039 (executing program) 2021/02/20 16:29:49 fetching corpus: 59588, signal 598657/659040 (executing program) 2021/02/20 16:29:49 fetching corpus: 59638, signal 598852/659040 (executing program) 2021/02/20 16:29:49 fetching corpus: 59687, signal 598993/659040 (executing program) 2021/02/20 16:29:49 fetching corpus: 59736, signal 599144/659040 (executing program) 2021/02/20 16:29:49 fetching corpus: 59786, signal 599266/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 59836, signal 599409/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 59886, signal 599595/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 59935, signal 599719/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 59985, signal 600033/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60035, signal 600206/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60085, signal 600371/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60134, signal 600555/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60184, signal 600753/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60233, signal 600898/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60283, signal 601082/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60333, signal 601262/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60382, signal 601457/659044 (executing program) 2021/02/20 16:29:50 fetching corpus: 60432, signal 601644/659087 (executing program) 2021/02/20 16:29:50 fetching corpus: 60482, signal 601802/659087 (executing program) 2021/02/20 16:29:50 fetching corpus: 60532, signal 602052/659087 (executing program) 2021/02/20 16:29:50 fetching corpus: 60581, signal 602246/659087 (executing program) 2021/02/20 16:29:50 fetching corpus: 60631, signal 602384/659087 (executing program) 2021/02/20 16:29:50 fetching corpus: 60681, signal 602525/659088 (executing program) 2021/02/20 16:29:50 fetching corpus: 60731, signal 602723/659088 (executing program) 2021/02/20 16:29:50 fetching corpus: 60780, signal 602872/659088 (executing program) 2021/02/20 16:29:50 fetching corpus: 60830, signal 603063/659088 (executing program) 2021/02/20 16:29:51 fetching corpus: 60880, signal 603277/659091 (executing program) 2021/02/20 16:29:51 fetching corpus: 60929, signal 603451/659091 (executing program) 2021/02/20 16:29:51 fetching corpus: 60978, signal 603646/659096 (executing program) 2021/02/20 16:29:51 fetching corpus: 61027, signal 604056/659096 (executing program) 2021/02/20 16:29:51 fetching corpus: 61077, signal 604239/659096 (executing program) 2021/02/20 16:29:51 fetching corpus: 61126, signal 604427/659096 (executing program) 2021/02/20 16:29:51 fetching corpus: 61176, signal 604642/659097 (executing program) 2021/02/20 16:29:51 fetching corpus: 61226, signal 604813/659097 (executing program) 2021/02/20 16:29:51 fetching corpus: 61275, signal 605002/659097 (executing program) 2021/02/20 16:29:51 fetching corpus: 61325, signal 605143/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61374, signal 605309/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61424, signal 605459/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61474, signal 605623/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61524, signal 605803/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61574, signal 605968/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61623, signal 606114/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61673, signal 606281/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61723, signal 606436/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61773, signal 606596/659098 (executing program) 2021/02/20 16:29:51 fetching corpus: 61823, signal 606755/659098 (executing program) 2021/02/20 16:29:52 fetching corpus: 61873, signal 606889/659098 (executing program) 2021/02/20 16:29:52 fetching corpus: 61923, signal 607070/659098 (executing program) 2021/02/20 16:29:52 fetching corpus: 61972, signal 607283/659098 (executing program) 2021/02/20 16:29:52 fetching corpus: 62022, signal 607477/659098 (executing program) 2021/02/20 16:29:52 fetching corpus: 62071, signal 607637/659098 (executing program) 2021/02/20 16:29:52 fetching corpus: 62121, signal 607783/659101 (executing program) 2021/02/20 16:29:52 fetching corpus: 62170, signal 607960/659101 (executing program) 2021/02/20 16:29:52 fetching corpus: 62220, signal 608112/659101 (executing program) 2021/02/20 16:29:52 fetching corpus: 62270, signal 608274/659101 (executing program) 2021/02/20 16:29:52 fetching corpus: 62320, signal 608434/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62369, signal 608579/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62419, signal 608756/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62468, signal 608919/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62518, signal 609172/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62568, signal 609346/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62618, signal 609612/659102 (executing program) 2021/02/20 16:29:52 fetching corpus: 62668, signal 609856/659110 (executing program) 2021/02/20 16:29:52 fetching corpus: 62717, signal 610047/659110 (executing program) 2021/02/20 16:29:52 fetching corpus: 62767, signal 610185/659114 (executing program) 2021/02/20 16:29:53 fetching corpus: 62817, signal 610332/659114 (executing program) 2021/02/20 16:29:53 fetching corpus: 62867, signal 610624/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 62917, signal 610777/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 62966, signal 610961/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 63015, signal 611149/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 63065, signal 611279/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 63115, signal 611491/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 63165, signal 611630/659117 (executing program) 2021/02/20 16:29:53 fetching corpus: 63214, signal 611793/659118 (executing program) 2021/02/20 16:29:53 fetching corpus: 63263, signal 611948/659118 (executing program) 2021/02/20 16:29:53 fetching corpus: 63313, signal 612091/659122 (executing program) 2021/02/20 16:29:53 fetching corpus: 63362, signal 612211/659140 (executing program) 2021/02/20 16:29:53 fetching corpus: 63410, signal 612372/659140 (executing program) 2021/02/20 16:29:53 fetching corpus: 63459, signal 612709/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63508, signal 612974/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63558, signal 613130/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63608, signal 613274/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63658, signal 613391/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63708, signal 613565/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63758, signal 613801/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63808, signal 613972/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63858, signal 614123/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63908, signal 614285/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 63958, signal 614901/659151 (executing program) 2021/02/20 16:29:54 fetching corpus: 64007, signal 615060/659152 (executing program) 2021/02/20 16:29:54 fetching corpus: 64056, signal 615211/659152 (executing program) 2021/02/20 16:29:54 fetching corpus: 64106, signal 615355/659152 (executing program) 2021/02/20 16:29:54 fetching corpus: 64156, signal 615477/659152 (executing program) 2021/02/20 16:29:54 fetching corpus: 64206, signal 615652/659153 (executing program) 2021/02/20 16:29:54 fetching corpus: 64256, signal 615805/659153 (executing program) 2021/02/20 16:29:54 fetching corpus: 64306, signal 615973/659153 (executing program) 2021/02/20 16:29:54 fetching corpus: 64356, signal 616093/659153 (executing program) 2021/02/20 16:29:54 fetching corpus: 64406, signal 616445/659153 (executing program) 2021/02/20 16:29:54 fetching corpus: 64455, signal 616613/659153 (executing program) 2021/02/20 16:29:55 fetching corpus: 64504, signal 616769/659153 (executing program) 2021/02/20 16:29:55 fetching corpus: 64554, signal 616893/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64604, signal 617016/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64653, signal 617199/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64703, signal 617375/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64752, signal 617646/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64801, signal 617776/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64851, signal 617922/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64901, signal 618159/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 64951, signal 618356/659160 (executing program) 2021/02/20 16:29:55 fetching corpus: 65000, signal 618490/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65050, signal 618624/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65100, signal 618786/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65150, signal 618963/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65200, signal 619139/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65250, signal 619292/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65300, signal 619542/659174 (executing program) 2021/02/20 16:29:55 fetching corpus: 65350, signal 619728/659174 (executing program) 2021/02/20 16:29:56 fetching corpus: 65399, signal 619860/659175 (executing program) 2021/02/20 16:29:56 fetching corpus: 65449, signal 620003/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65498, signal 620266/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65547, signal 620425/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65597, signal 620638/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65647, signal 620862/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65696, signal 621022/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65746, signal 621130/659176 (executing program) 2021/02/20 16:29:56 fetching corpus: 65793, signal 621265/659178 (executing program) 2021/02/20 16:29:56 fetching corpus: 65843, signal 621424/659182 (executing program) 2021/02/20 16:29:56 fetching corpus: 65892, signal 621567/659182 (executing program) 2021/02/20 16:29:56 fetching corpus: 65941, signal 621692/659182 (executing program) 2021/02/20 16:29:56 fetching corpus: 65991, signal 621818/659182 (executing program) 2021/02/20 16:29:56 fetching corpus: 66041, signal 621959/659182 (executing program) 2021/02/20 16:29:56 fetching corpus: 66090, signal 622209/659182 (executing program) 2021/02/20 16:29:57 fetching corpus: 66138, signal 622347/659183 (executing program) 2021/02/20 16:29:57 fetching corpus: 66185, signal 622482/659187 (executing program) 2021/02/20 16:29:57 fetching corpus: 66235, signal 622697/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66283, signal 622846/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66333, signal 623018/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66383, signal 623199/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66433, signal 623341/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66482, signal 623520/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66532, signal 623698/659188 (executing program) 2021/02/20 16:29:57 fetching corpus: 66580, signal 623881/659195 (executing program) 2021/02/20 16:29:57 fetching corpus: 66630, signal 624055/659195 (executing program) 2021/02/20 16:29:57 fetching corpus: 66680, signal 624252/659207 (executing program) 2021/02/20 16:29:57 fetching corpus: 66730, signal 624407/659207 (executing program) 2021/02/20 16:29:57 fetching corpus: 66779, signal 624526/659207 (executing program) 2021/02/20 16:29:57 fetching corpus: 66829, signal 624713/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 66879, signal 624862/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 66929, signal 624995/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 66979, signal 625157/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 67029, signal 625297/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 67079, signal 625431/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 67129, signal 625592/659211 (executing program) 2021/02/20 16:29:58 fetching corpus: 67179, signal 625733/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67228, signal 625861/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67278, signal 626040/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67328, signal 626203/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67378, signal 626360/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67428, signal 626534/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67477, signal 626721/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67527, signal 626986/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67577, signal 627152/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67627, signal 627330/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67677, signal 627470/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67727, signal 627637/659213 (executing program) 2021/02/20 16:29:58 fetching corpus: 67777, signal 627751/659229 (executing program) 2021/02/20 16:29:58 fetching corpus: 67827, signal 627903/659229 (executing program) 2021/02/20 16:29:58 fetching corpus: 67877, signal 628040/659241 (executing program) 2021/02/20 16:29:59 fetching corpus: 67927, signal 628192/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 67977, signal 628332/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 68027, signal 628510/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 68077, signal 628650/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 68127, signal 628811/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 68177, signal 629005/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 68227, signal 629328/659242 (executing program) 2021/02/20 16:29:59 fetching corpus: 68276, signal 629466/659244 (executing program) 2021/02/20 16:29:59 fetching corpus: 68325, signal 629609/659244 (executing program) 2021/02/20 16:29:59 fetching corpus: 68375, signal 629766/659244 (executing program) 2021/02/20 16:29:59 fetching corpus: 68423, signal 629953/659248 (executing program) 2021/02/20 16:29:59 fetching corpus: 68473, signal 630083/659258 (executing program) 2021/02/20 16:29:59 fetching corpus: 68523, signal 630295/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68573, signal 630435/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68623, signal 630579/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68673, signal 630757/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68722, signal 631066/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68771, signal 631223/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68821, signal 631377/659258 (executing program) 2021/02/20 16:30:00 fetching corpus: 68871, signal 631566/659260 (executing program) 2021/02/20 16:30:00 fetching corpus: 68921, signal 631703/659260 (executing program) 2021/02/20 16:30:00 fetching corpus: 68971, signal 631925/659260 (executing program) 2021/02/20 16:30:00 fetching corpus: 69021, signal 632045/659261 (executing program) 2021/02/20 16:30:00 fetching corpus: 69071, signal 632172/659261 (executing program) 2021/02/20 16:30:00 fetching corpus: 69120, signal 632360/659261 (executing program) 2021/02/20 16:30:00 fetching corpus: 69169, signal 632507/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69219, signal 632620/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69268, signal 632777/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69317, signal 632945/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69367, signal 633105/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69417, signal 633259/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69467, signal 633426/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69517, signal 633561/659263 (executing program) 2021/02/20 16:30:00 fetching corpus: 69567, signal 633732/659263 (executing program) 2021/02/20 16:30:01 fetching corpus: 69617, signal 633855/659263 (executing program) 2021/02/20 16:30:01 fetching corpus: 69665, signal 634031/659263 (executing program) 2021/02/20 16:30:01 fetching corpus: 69715, signal 634204/659263 (executing program) 2021/02/20 16:30:01 fetching corpus: 69765, signal 634363/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 69815, signal 634525/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 69865, signal 634671/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 69914, signal 634817/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 69964, signal 634953/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70014, signal 635209/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70064, signal 635308/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70114, signal 635501/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70164, signal 635616/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70214, signal 635774/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70264, signal 635903/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70314, signal 636053/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70364, signal 636182/659275 (executing program) 2021/02/20 16:30:01 fetching corpus: 70414, signal 636306/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70463, signal 636444/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70512, signal 636547/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70562, signal 636692/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70612, signal 636803/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70662, signal 636955/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70712, signal 637097/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70761, signal 637238/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70811, signal 637401/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70860, signal 637502/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70910, signal 637669/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 70960, signal 637832/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 71010, signal 637939/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 71060, signal 638573/659275 (executing program) 2021/02/20 16:30:02 fetching corpus: 71110, signal 638717/659282 (executing program) 2021/02/20 16:30:02 fetching corpus: 71160, signal 638870/659282 (executing program) 2021/02/20 16:30:02 fetching corpus: 71210, signal 639002/659282 (executing program) 2021/02/20 16:30:02 fetching corpus: 71260, signal 639127/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71310, signal 639297/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71360, signal 639440/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71410, signal 639583/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71460, signal 639721/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71510, signal 639894/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71560, signal 640025/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71610, signal 640223/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71660, signal 640331/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71710, signal 640483/659282 (executing program) 2021/02/20 16:30:03 fetching corpus: 71760, signal 640636/659284 (executing program) 2021/02/20 16:30:03 fetching corpus: 71810, signal 640811/659284 (executing program) 2021/02/20 16:30:03 fetching corpus: 71860, signal 640953/659284 (executing program) 2021/02/20 16:30:03 fetching corpus: 71910, signal 641107/659287 (executing program) 2021/02/20 16:30:03 fetching corpus: 71960, signal 641258/659287 (executing program) 2021/02/20 16:30:03 fetching corpus: 72010, signal 641428/659287 (executing program) 2021/02/20 16:30:03 fetching corpus: 72059, signal 641583/659287 (executing program) 2021/02/20 16:30:03 fetching corpus: 72108, signal 641892/659287 (executing program) 2021/02/20 16:30:03 fetching corpus: 72158, signal 642059/659287 (executing program) 2021/02/20 16:30:03 fetching corpus: 72207, signal 642193/659287 (executing program) 2021/02/20 16:30:04 fetching corpus: 72255, signal 642347/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72305, signal 642489/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72355, signal 642606/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72405, signal 642765/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72455, signal 642922/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72505, signal 643098/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72555, signal 643238/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72605, signal 643390/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72655, signal 643555/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72705, signal 643716/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72755, signal 643883/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72804, signal 644176/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72853, signal 644319/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72902, signal 644482/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 72952, signal 644610/659303 (executing program) 2021/02/20 16:30:04 fetching corpus: 73000, signal 644770/659305 (executing program) 2021/02/20 16:30:04 fetching corpus: 73050, signal 644918/659305 (executing program) 2021/02/20 16:30:04 fetching corpus: 73100, signal 645047/659305 (executing program) 2021/02/20 16:30:04 fetching corpus: 73150, signal 645194/659305 (executing program) 2021/02/20 16:30:05 fetching corpus: 73199, signal 645296/659305 (executing program) 2021/02/20 16:30:05 fetching corpus: 73249, signal 645440/659305 (executing program) 2021/02/20 16:30:05 fetching corpus: 73298, signal 645580/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73348, signal 645738/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73398, signal 645886/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73448, signal 646016/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73498, signal 646271/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73548, signal 646457/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73598, signal 646546/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73648, signal 646675/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73698, signal 646841/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73746, signal 647000/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73795, signal 647175/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73845, signal 647288/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73894, signal 647401/659306 (executing program) 2021/02/20 16:30:05 fetching corpus: 73944, signal 647577/659315 (executing program) 2021/02/20 16:30:05 fetching corpus: 73993, signal 647760/659315 (executing program) 2021/02/20 16:30:05 fetching corpus: 74043, signal 647915/659326 (executing program) 2021/02/20 16:30:05 fetching corpus: 74093, signal 648041/659326 (executing program) 2021/02/20 16:30:06 fetching corpus: 74143, signal 648223/659326 (executing program) 2021/02/20 16:30:06 fetching corpus: 74193, signal 648423/659326 (executing program) 2021/02/20 16:30:06 fetching corpus: 74243, signal 648540/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74292, signal 648746/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74342, signal 648844/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74392, signal 649015/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74441, signal 649185/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74491, signal 649365/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74541, signal 649482/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74591, signal 649678/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74641, signal 649788/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74690, signal 649892/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74740, signal 650145/659334 (executing program) 2021/02/20 16:30:06 fetching corpus: 74790, signal 650267/659335 (executing program) 2021/02/20 16:30:07 fetching corpus: 74840, signal 650465/659335 (executing program) 2021/02/20 16:30:07 fetching corpus: 74890, signal 650591/659341 (executing program) 2021/02/20 16:30:07 fetching corpus: 74940, signal 650707/659341 (executing program) 2021/02/20 16:30:07 fetching corpus: 74990, signal 650838/659341 (executing program) 2021/02/20 16:30:07 fetching corpus: 75040, signal 650950/659341 (executing program) 2021/02/20 16:30:07 fetching corpus: 75090, signal 651157/659341 (executing program) 2021/02/20 16:30:07 fetching corpus: 75139, signal 651309/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75189, signal 651452/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75238, signal 651674/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75288, signal 651784/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75338, signal 651934/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75388, signal 652100/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75438, signal 652260/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75488, signal 652400/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75538, signal 652555/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75588, signal 652699/659342 (executing program) 2021/02/20 16:30:07 fetching corpus: 75638, signal 652816/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75688, signal 652962/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75737, signal 653075/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75787, signal 653232/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75836, signal 653354/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75886, signal 653529/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75936, signal 653701/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75986, signal 653902/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75994, signal 653917/659349 (executing program) 2021/02/20 16:30:08 fetching corpus: 75994, signal 653917/659349 (executing program) 2021/02/20 16:30:10 starting 6 fuzzer processes 16:30:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 16:30:10 executing program 1: set_mempolicy(0x1, &(0x7f0000000080)=0xe4e, 0x6) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) 16:30:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r1, 0x309, 0x0, 0x0, {{}, {@val={0x8, 0xe}, @val={0xc}}}}, 0x28}}, 0x0) 16:30:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0xb0, 0x32, 0x111, 0x0, 0x0, {0x2}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xfffffffffffffdcc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}]}, @TCA_ACT_TAB={0xffffffffffffffed, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xb0}}, 0x0) 16:30:11 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x300}], 0x0, &(0x7f0000010300)) 16:30:11 executing program 5: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x891a, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0x0, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00'}) [ 174.743877][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 174.820910][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 174.854106][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.861384][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.869082][ T8427] device bridge_slave_0 entered promiscuous mode [ 174.876679][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.883728][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.891171][ T8427] device bridge_slave_1 entered promiscuous mode [ 174.905299][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.915861][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.931191][ T8427] team0: Port device team_slave_0 added [ 174.937864][ T8427] team0: Port device team_slave_1 added [ 174.950436][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.957451][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.984196][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.998882][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 175.010525][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.017503][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.043644][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.074414][ T8427] device hsr_slave_0 entered promiscuous mode [ 175.080852][ T8427] device hsr_slave_1 entered promiscuous mode [ 175.131907][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 175.161912][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 175.190460][ T8427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.217638][ T8427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.234977][ T8427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.244762][ T8427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.267851][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.275089][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.282864][ T8429] device bridge_slave_0 entered promiscuous mode [ 175.290825][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.298245][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.305571][ T8429] device bridge_slave_1 entered promiscuous mode [ 175.333080][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.350555][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 175.373643][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.397453][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.404548][ T8427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.411858][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.418907][ T8427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.454724][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 175.471269][ T8429] team0: Port device team_slave_0 added [ 175.482425][ T8435] IPVS: ftp: loaded support on port[0] = 21 [ 175.518493][ T8429] team0: Port device team_slave_1 added [ 175.542394][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.549550][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.557380][ T8431] device bridge_slave_0 entered promiscuous mode [ 175.564289][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.571498][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.598140][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.609786][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.616812][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.644464][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.682998][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.690123][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.697714][ T8431] device bridge_slave_1 entered promiscuous mode [ 175.725893][ T8429] device hsr_slave_0 entered promiscuous mode [ 175.727500][ T8437] IPVS: ftp: loaded support on port[0] = 21 [ 175.738471][ T8429] device hsr_slave_1 entered promiscuous mode [ 175.744711][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.752270][ T8429] Cannot create hsr debugfs directory [ 175.767953][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.779724][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.798573][ T8431] team0: Port device team_slave_0 added [ 175.806474][ T8431] team0: Port device team_slave_1 added [ 175.822649][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.829650][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.855826][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.876899][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.897427][ T4880] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.905129][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.913573][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 175.926711][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.933680][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.959958][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.979045][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 176.005538][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.022775][ T8431] device hsr_slave_0 entered promiscuous mode [ 176.029225][ T8431] device hsr_slave_1 entered promiscuous mode [ 176.035497][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.043268][ T8431] Cannot create hsr debugfs directory [ 176.062211][ T8429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.071974][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.080149][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.110944][ T8429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.120299][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.132554][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.141028][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.148632][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.183256][ T8429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.191902][ T8429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.205142][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.213901][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.222854][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.229895][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.237646][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.248668][ T8435] chnl_net:caif_netlink_parms(): no params data found [ 176.257569][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.264699][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.272283][ T8433] device bridge_slave_0 entered promiscuous mode [ 176.292793][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.303795][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.311635][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.319767][ T8433] device bridge_slave_1 entered promiscuous mode [ 176.326667][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 176.341722][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.350310][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.360817][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.379403][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.406009][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.414476][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.428287][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.449390][ T8433] team0: Port device team_slave_0 added [ 176.459327][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.466834][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.474363][ T8435] device bridge_slave_0 entered promiscuous mode [ 176.483500][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.490662][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.498330][ T8435] device bridge_slave_1 entered promiscuous mode [ 176.509603][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.517686][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.525736][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.533859][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.543831][ T8433] team0: Port device team_slave_1 added [ 176.559391][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.573733][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.583758][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.591125][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.618218][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.630250][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.637460][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.663740][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.685754][ T8433] device hsr_slave_0 entered promiscuous mode [ 176.692393][ T8433] device hsr_slave_1 entered promiscuous mode [ 176.699025][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.706586][ T8433] Cannot create hsr debugfs directory [ 176.716154][ T8431] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.725064][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.741661][ T8435] team0: Port device team_slave_0 added [ 176.763776][ T8431] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.772585][ T8435] team0: Port device team_slave_1 added [ 176.783931][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.791749][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.806033][ T3070] Bluetooth: hci0: command 0x0409 tx timeout [ 176.807573][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.819222][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.826772][ T8437] device bridge_slave_0 entered promiscuous mode [ 176.834750][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.841990][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.849615][ T8437] device bridge_slave_1 entered promiscuous mode [ 176.856548][ T8431] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.871420][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.878447][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.904738][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.916846][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.930583][ T8431] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.941104][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.948484][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.976377][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.997445][ T8435] device hsr_slave_0 entered promiscuous mode [ 177.003906][ T8435] device hsr_slave_1 entered promiscuous mode [ 177.010620][ T8435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.018315][ T8435] Cannot create hsr debugfs directory [ 177.036023][ T8015] Bluetooth: hci1: command 0x0409 tx timeout [ 177.048845][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.060021][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.088225][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.102529][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.118205][ T8433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.131912][ T8433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.149842][ T8437] team0: Port device team_slave_0 added [ 177.160431][ T8433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.173037][ T8433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.184676][ T8437] team0: Port device team_slave_1 added [ 177.200367][ T8435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.208673][ T3663] Bluetooth: hci2: command 0x0409 tx timeout [ 177.218166][ T8427] device veth0_vlan entered promiscuous mode [ 177.232784][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.241025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.256286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.264071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.272271][ T8435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.281153][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.288248][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.314370][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.326463][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.333398][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.359618][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.372677][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.384097][ T8427] device veth1_vlan entered promiscuous mode [ 177.391894][ T8435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.400284][ T8435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.425331][ T8437] device hsr_slave_0 entered promiscuous mode [ 177.432237][ T8437] device hsr_slave_1 entered promiscuous mode [ 177.436004][ T3663] Bluetooth: hci3: command 0x0409 tx timeout [ 177.444559][ T8437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.452278][ T8437] Cannot create hsr debugfs directory [ 177.466846][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.483619][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.491538][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.500488][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.508362][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.515868][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.524840][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.533522][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.540554][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.548574][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.557217][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.565525][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.572575][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.580358][ T3070] Bluetooth: hci4: command 0x0409 tx timeout [ 177.587092][ T8427] device veth0_macvtap entered promiscuous mode [ 177.612295][ T8427] device veth1_macvtap entered promiscuous mode [ 177.619504][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.627468][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.636628][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.644989][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.653936][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.667058][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.675434][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.683885][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.692472][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.700687][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.709040][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.716890][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.724616][ T9161] Bluetooth: hci5: command 0x0409 tx timeout [ 177.745536][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.762326][ T8429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.773808][ T8429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.798432][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.807856][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.816882][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.825399][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.835194][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.843824][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.853964][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.865593][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.877923][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.890731][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.898146][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.906576][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.915043][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.922895][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.932919][ T8427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.941695][ T8427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.951875][ T8427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.961792][ T8427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.977047][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.987021][ T8437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.004774][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.014838][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.022664][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.030266][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.042487][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.052306][ T8437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.061588][ T8437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.070732][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.079592][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.087346][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.095778][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.104131][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.111173][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.128494][ T8437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.139443][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.148212][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.157354][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.168745][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.175774][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.185283][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.195291][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.203672][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.210752][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.220110][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.246444][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.254940][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.273354][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.280431][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.288388][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.297285][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.306380][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.319224][ T8435] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.326723][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.334300][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.350681][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.359438][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.368003][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.377264][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.409062][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.409188][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.417614][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.435888][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.444358][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.454876][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.463139][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.472097][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.481141][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.489820][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.498258][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.506845][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.514956][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.521986][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.529741][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.538372][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.546968][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.554741][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.565940][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.574813][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.582664][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.590959][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.599037][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.607312][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.615767][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.624114][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.640283][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.648767][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.656823][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.665217][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.673746][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.680903][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.688888][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.697762][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.705808][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.715393][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.723580][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.732802][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.748397][ T8429] device veth0_vlan entered promiscuous mode [ 178.762210][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.770749][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.779799][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.789730][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.798607][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.807527][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.821623][ T8435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.832539][ T8435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.857803][ T8429] device veth1_vlan entered promiscuous mode 16:30:15 executing program 0: socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 178.876133][ T3663] Bluetooth: hci0: command 0x041b tx timeout [ 178.888722][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.897586][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.905339][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.913692][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.921965][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.930363][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.938618][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.946012][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.953388][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.961014][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.968691][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.981652][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.991066][ T9755] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 179.003237][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.018762][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.033153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.061296][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.073430][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.081866][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.101863][ T8429] device veth0_macvtap entered promiscuous mode [ 179.116113][ T34] Bluetooth: hci1: command 0x041b tx timeout [ 179.116806][ T9757] device syz_tun entered promiscuous mode [ 179.129710][ T9757] device syz_tun left promiscuous mode [ 179.138183][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.156767][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.165091][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.173747][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.181639][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.189626][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.198276][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.206883][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.215428][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.223993][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.232606][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.241151][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.248338][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.261223][ T8429] device veth1_macvtap entered promiscuous mode [ 179.276641][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.282239][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 179.284683][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.298756][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.306795][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.315186][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.323881][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.330947][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.338975][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.347061][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.355718][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.363543][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.373009][ T9767] device syz_tun entered promiscuous mode 16:30:16 executing program 0: socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 179.379724][ T9767] device syz_tun left promiscuous mode [ 179.388089][ T8433] device veth0_vlan entered promiscuous mode [ 179.404081][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.415295][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.427524][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.446360][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.454532][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.463436][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.473393][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.482462][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.491547][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.500709][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.508654][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.517958][ T8431] device veth0_vlan entered promiscuous mode [ 179.526408][ T9161] Bluetooth: hci3: command 0x041b tx timeout [ 179.558892][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.567570][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.576615][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.585033][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.594585][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.603995][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.613079][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.621583][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.630353][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.638587][ T3070] Bluetooth: hci4: command 0x041b tx timeout [ 179.640378][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.655396][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.667725][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.677571][ T8429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.686957][ T8429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.695691][ T8429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 16:30:16 executing program 0: socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 179.704516][ T8429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.718370][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.729407][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.738873][ T8433] device veth1_vlan entered promiscuous mode [ 179.747330][ T9776] device syz_tun entered promiscuous mode [ 179.754116][ T9776] device syz_tun left promiscuous mode [ 179.764370][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.772572][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.772660][ T9161] Bluetooth: hci5: command 0x041b tx timeout [ 179.781270][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.795450][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.803663][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.812380][ T8431] device veth1_vlan entered promiscuous mode [ 179.859690][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.877214][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.885158][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.894236][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.902483][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.922226][ T8435] device veth0_vlan entered promiscuous mode [ 179.938597][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.960945][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.972477][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.991879][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.004359][ T8435] device veth1_vlan entered promiscuous mode [ 180.012913][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.017679][ T8433] device veth0_macvtap entered promiscuous mode [ 180.031418][ T9792] device syz_tun entered promiscuous mode [ 180.037873][ T9792] device syz_tun left promiscuous mode [ 180.050204][ T8431] device veth0_macvtap entered promiscuous mode [ 180.058897][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 16:30:17 executing program 0: socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 180.067740][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.075400][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.086069][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.094389][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.104189][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.112087][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.121894][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.137743][ T8433] device veth1_macvtap entered promiscuous mode [ 180.150906][ T8431] device veth1_macvtap entered promiscuous mode [ 180.158142][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.176501][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.185805][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.194970][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.213715][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.224254][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.232273][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.255969][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.266328][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.279826][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.289855][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.300637][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.311747][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.322808][ T8435] device veth0_macvtap entered promiscuous mode [ 180.331745][ T9818] device syz_tun entered promiscuous mode [ 180.338788][ T9818] device syz_tun left promiscuous mode [ 180.350134][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.359741][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.367784][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.377985][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.386780][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.394788][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.404671][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.412605][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.420784][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.431267][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.441255][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.451737][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.462468][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.472475][ T8433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 16:30:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "5fcea2720370debdcd7796d58f06204365cf0a7f6ec14f5e0f9985c451186950aacedbcbe8f6a3261d7e7e850aae5683e9a7045dea2dbc096e6c1bdd9536d8acf4c29b1458627f0b19c8869aad0e53d580eb8cea889860430f40d1c3e29166a8bb2709638caf0ab36da7f2f7b05221eebd323c73f2be7b30bd689717a3c6b23984f0cd4bcc67e34f576f4ea3d016abcd4819b7ed59fdb44820cb7b1fe6630ab67c2a1df18846d4892f10220761ee1647601f89474bdf251e5f982d49afe9b2aeeb930836775e51f0c131bfdc98fb918b1bd627a0b3f781794eab45b26913592c85e470b8345cefd3530bac20a9634f7ce8e9599c3d59e69afaffee9b6e03aeaf"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@delchain={0x24, 0x2a, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0xe}, 0x0) [ 180.482089][ T8433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.491065][ T8433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.500110][ T8433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.514509][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 16:30:17 executing program 0: msgget$private(0x0, 0x0) [ 180.525085][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.535779][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.546622][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.556608][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.567110][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.578806][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.601598][ T8435] device veth1_macvtap entered promiscuous mode [ 180.620915][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.630993][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 16:30:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) msync(&(0x7f00003ee000/0x2000)=nil, 0x2000, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_tid_address(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) [ 180.663158][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.672674][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.683921][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.692720][ T8437] device veth0_vlan entered promiscuous mode [ 180.717791][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.730467][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.742467][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.754793][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.781735][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.792790][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.809273][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.820672][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.835209][ T8437] device veth1_vlan entered promiscuous mode [ 180.844743][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.865411][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.874111][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.888085][ T8431] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.897870][ T8431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.910035][ T8431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.919316][ T8431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.935260][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.952977][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.964582][ T8015] Bluetooth: hci0: command 0x040f tx timeout [ 180.971450][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:30:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) [ 180.983311][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.988259][ C0] hrtimer: interrupt took 35725 ns [ 180.994742][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.024652][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.039440][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.050190][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.063381][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.074932][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.105943][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.123203][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.160686][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.189771][ T8437] device veth0_macvtap entered promiscuous mode [ 181.203528][ T9788] Bluetooth: hci1: command 0x040f tx timeout [ 181.218174][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.237261][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.248114][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.260548][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.271241][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.284341][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.295280][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.307455][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.319278][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.331273][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.340199][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.350681][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.360476][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.366520][ T4880] Bluetooth: hci2: command 0x040f tx timeout [ 181.377646][ T8437] device veth1_macvtap entered promiscuous mode [ 181.390392][ T8435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.399823][ T8435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.408720][ T8435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.419070][ T8435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.431186][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.431927][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.440185][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.449514][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.473510][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.485044][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.495205][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.507251][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.517613][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.528658][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.538599][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.549323][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.559350][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.569867][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.580687][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.593698][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.604053][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.605902][ T4880] Bluetooth: hci3: command 0x040f tx timeout [ 181.613196][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.628862][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.640203][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.650292][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.660848][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.670668][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.681301][ T4880] Bluetooth: hci4: command 0x040f tx timeout [ 181.681884][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.699996][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.710496][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.720356][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.730887][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.741977][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.765926][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.774570][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.786387][ T8437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.795095][ T8437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.803972][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.812151][ T8437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.814232][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.824920][ T8437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.840414][ T3070] Bluetooth: hci5: command 0x040f tx timeout [ 181.853179][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.872185][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.883225][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.908032][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.918485][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.926511][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.934311][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.937711][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.959954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.969634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 16:30:19 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, 0x20) 16:30:19 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000140)={0x0, [[0x10001], [0x84], [0x1]], [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) [ 182.000066][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.000791][ T9909] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.026288][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.050380][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.091216][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.112243][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{&(0x7f0000000180)={0x2, 0x4ea1, @private=0xa01016c}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr, @broadcast}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x3d, 0x40804) [ 182.144499][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.167288][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.184799][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.187389][ T9938] loop4: detected capacity change from 8 to 0 [ 182.208107][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:30:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0xe79fa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 16:30:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) msync(&(0x7f00003ee000/0x2000)=nil, 0x2000, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_tid_address(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) 16:30:19 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_lifetime={0x4, 0x3}]}, 0xb8}}, 0x0) 16:30:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0xfdd4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00f70400000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "6f3769e0"}, 0x0, 0x0, 0x0, 0x0}) 16:30:19 executing program 2: r0 = syz_io_uring_setup(0x43a9, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x26f4, 0x79e2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:30:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x3b}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 16:30:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xf1c3, 0x0, 0x4}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @any, 0x0, 0x2}, 0xe) 16:30:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="39000000f8000000240012800b000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}, @TCA_STAB={0x4}]}, 0x50}}, 0x0) 16:30:19 executing program 2: r0 = syz_io_uring_setup(0x43a9, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x26f4, 0x79e2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 182.522125][ T35] audit: type=1804 audit(1613838619.418:2): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir859553026/syzkaller.Id42v6/1/cgroup.controllers" dev="sda1" ino=14217 res=1 errno=0 16:30:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) msync(&(0x7f00003ee000/0x2000)=nil, 0x2000, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_tid_address(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) 16:30:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x23, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x5, &(0x7f0000000000), 0x20a154cc) [ 182.681810][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.716314][ T4880] usb 2-1: new high-speed USB device number 2 using dummy_hcd 16:30:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0xe79fa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 182.737090][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:30:19 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000040)='./bus\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) lseek(r0, 0xf0ffffff0f0000, 0x0) 16:30:19 executing program 2: r0 = syz_io_uring_setup(0x43a9, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x26f4, 0x79e2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:30:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) msync(&(0x7f00003ee000/0x2000)=nil, 0x2000, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_tid_address(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) [ 182.997216][ T4880] usb 2-1: Using ep0 maxpacket: 16 [ 183.032420][T10008] overlayfs: filesystem on './file0' not supported as upperdir [ 183.040574][ T9926] Bluetooth: hci0: command 0x0419 tx timeout [ 183.049186][ T35] audit: type=1804 audit(1613838619.948:3): pid=10004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir859553026/syzkaller.Id42v6/2/cgroup.controllers" dev="sda1" ino=14217 res=1 errno=0 [ 183.175954][ T4880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.216443][ T4880] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 183.247390][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.278146][ T3663] Bluetooth: hci1: command 0x0419 tx timeout [ 183.281555][ T4880] usb 2-1: config 0 descriptor?? [ 183.359595][ T4880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 183.436964][ T3663] Bluetooth: hci2: command 0x0419 tx timeout [ 183.558722][ T3663] usb 2-1: USB disconnect, device number 2 [ 183.676103][ T8015] Bluetooth: hci3: command 0x0419 tx timeout [ 183.755877][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 183.915886][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 184.115815][ T3663] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.365802][ T3663] usb 2-1: Using ep0 maxpacket: 32 [ 184.525827][ T3663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.536760][ T3663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.546668][ T3663] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 184.555701][ T3663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.565630][ T3663] usb 2-1: config 0 descriptor?? [ 184.606179][ T3663] hub 2-1:0.0: USB hub found [ 184.815829][ T3663] hub 2-1:0.0: 1 port detected [ 185.455883][ T3663] hub 2-1:0.0: activate --> -90 [ 185.877507][ T9926] usb 2-1: USB disconnect, device number 3 [ 186.655780][ T4880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.895770][ T4880] usb 2-1: Using ep0 maxpacket: 16 [ 187.015997][ T4880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.029607][ T4880] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 187.040320][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.051922][ T4880] usb 2-1: config 0 descriptor?? [ 187.099209][ T4880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 16:30:24 executing program 1: unshare(0x2a000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) 16:30:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000040)='./bus\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) lseek(r0, 0xf0ffffff0f0000, 0x0) 16:30:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x8, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4}]}]}, 0x44}}, 0x0) 16:30:24 executing program 2: r0 = syz_io_uring_setup(0x43a9, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x26f4, 0x79e2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:30:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0xe79fa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 16:30:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000001000320003000000000000000000000010003300080000000000000000000001ac1414bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) [ 187.297596][ T9926] usb 2-1: USB disconnect, device number 4 16:30:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x76, &(0x7f0000000480)={r1}, &(0x7f0000000080)=0x8) 16:30:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000040)='./bus\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) lseek(r0, 0xf0ffffff0f0000, 0x0) 16:30:24 executing program 4: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) 16:30:24 executing program 1: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='2', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="3623912e77541d0b2c412c3db3bda6518a63b1f495e67fd3fd8852f32ab3bcc86268db648a31975561363075cf1111dcb51e84d1b40c2016915430324d11fe632bdf0187baa90d2b2b9aec2590867af354771a643ebd39304613e8ad77f4c1a64eaab649d047db2075eb3f7a433c70876e526885ac0b14848cfd6f8fa9caea5602eb7d834932a35a48f7021072fe89863097f965ea8275e3ed91330cf2750a6bc44eccb4a01046df3074f4190eb61807a02b97719089772f83f0250f033347926c6beaa2c82f9fe73828c28a409057fa6e", 0xd1, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="ce", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/74, 0x4a, &(0x7f0000000480)={&(0x7f0000000400)={'tgr160-generic\x00'}, &(0x7f0000000440)="0594ada7cbdd0fbacce466d13f6bab85a2ddd74e50d758d2a735e9", 0x1b}) [ 187.429927][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.445018][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:30:24 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x80, 0x0) 16:30:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000100)) [ 187.512587][ T35] audit: type=1804 audit(1613838624.408:4): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir859553026/syzkaller.Id42v6/3/cgroup.controllers" dev="sda1" ino=14222 res=1 errno=0 16:30:24 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000040)='./bus\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) lseek(r0, 0xf0ffffff0f0000, 0x0) 16:30:24 executing program 4: r0 = socket(0xa, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x11002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) [ 187.595896][ T3301] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.602217][ T3301] ieee802154 phy1 wpan1: encryption failed: -22 16:30:24 executing program 1: unshare(0x40400) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:30:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000300000000000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="000000000000000000000000a74b8e9b57f04b59aa229cc218853f95010040dd37", 0x21, 0x4e0}], 0x0, &(0x7f0000012f00)) 16:30:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0xe79fa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 16:30:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x9b, 0x8, 0x7, 0x0, 0x31, 0x0, 0x32, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 187.852892][T10127] loop2: detected capacity change from 4 to 0 [ 187.867241][T10127] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 187.908623][T10127] EXT4-fs (loop2): fragment/cluster size (32768) != block size (1024) [ 187.956996][T10127] loop2: detected capacity change from 4 to 0 [ 187.964948][T10127] EXT4-fs (loop2): fragment/cluster size (32768) != block size (1024) [ 188.040071][ T35] audit: type=1804 audit(1613838624.938:5): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir859553026/syzkaller.Id42v6/4/cgroup.controllers" dev="sda1" ino=14202 res=1 errno=0 16:30:25 executing program 0: mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001d000729d50014750f00000007070000", @ANYRES32=r1, @ANYBLOB="0a0f25000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 16:30:25 executing program 1: ppoll(&(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3a, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x3]}, 0x8) 16:30:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xff, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x3}, @generic={0x0, 0x4, "61d6"}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x17, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private, @dev]}, @end, @cipso={0x86, 0x11, 0x0, [{0x0, 0xb, "9d0cd6b31163d71fb3"}]}]}}}}}) 16:30:25 executing program 4: unshare(0x4020600) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x300, 0x0, r0}, 0x40) 16:30:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:25 executing program 5: socket(0x22, 0x2, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x40010040, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x5, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8023ff) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10feff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 16:30:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000080)) 16:30:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x51b, 0x4, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000040), 0x0}, 0x20) 16:30:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x3}) 16:30:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x4}) syz_open_dev$vcsu(0x0, 0x800, 0x141400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000000010, 0x2, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2801001, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x40) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') sigaltstack(&(0x7f0000ff9000/0x4000)=nil, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000001c0)={0x3, 0x10, [0x6, 0x0, 0x200, 0x2000], &(0x7f0000000140)=[0x0, 0x0]}) 16:30:25 executing program 5: socket(0x22, 0x2, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x40010040, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x5, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8023ff) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10feff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 16:30:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 16:30:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) [ 188.502998][T10159] IPVS: ftp: loaded support on port[0] = 21 16:30:25 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}, {}], 0x18) bind$can_raw(r0, &(0x7f00000003c0), 0x10) 16:30:25 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/152, 0x98}], 0x3) sendto$inet6(r0, &(0x7f0000000240)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) 16:30:25 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() write$binfmt_script(0xffffffffffffffff, 0x0, 0xad) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000280)={0x7, 0x70, 0xfb, 0x85, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x2100, 0x7, 0x2, 0x6, 0x1ff, 0x5, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x1a) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) dup(0xffffffffffffffff) mmap(&(0x7f0000175000/0x4000)=nil, 0x4000, 0x2000002, 0x11, 0xffffffffffffffff, 0xc2d8a000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket(0x0, 0x0, 0x0) [ 188.631495][T10181] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:30:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:25 executing program 5: socket(0x22, 0x2, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x40010040, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x5, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8023ff) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10feff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 16:30:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f0000000080)={r0}) [ 188.775568][T10167] IPVS: ftp: loaded support on port[0] = 21 16:30:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:25 executing program 5: socket(0x22, 0x2, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x40010040, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x5, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8023ff) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10feff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 16:30:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x5) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x2e0, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7450}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x188, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={[], [], @broadcast}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0xc}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x44000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xb4, r0, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c72dcc5f669e5f201557d1e947d016f84bb74c5c91a46f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0xb4}}, 0x801) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) [ 188.871835][T10221] netlink: 40002 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.909859][T10221] netlink: 39990 bytes leftover after parsing attributes in process `syz-executor.0'. 16:30:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x192) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 16:30:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_ACT={0x18, 0x1, [@m_ct={0x14, 0xc, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) 16:30:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x192) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 189.139594][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.162808][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.215156][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.246708][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.577317][T10254] IPVS: ftp: loaded support on port[0] = 21 [ 189.580212][T10268] IPVS: ftp: loaded support on port[0] = 21 16:30:27 executing program 3: unshare(0x20400) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1b, 0x4) 16:30:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x5) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x2e0, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7450}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x188, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={[], [], @broadcast}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0xc}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x44000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xb4, r0, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c72dcc5f669e5f201557d1e947d016f84bb74c5c91a46f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0xb4}}, 0x801) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) 16:30:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x192) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 16:30:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x5, 0x0, &(0x7f0000000180)) 16:30:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x192) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 16:30:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) syz_io_uring_setup(0x157f, &(0x7f00000002c0), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 16:30:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x5) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x2e0, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7450}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x188, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={[], [], @broadcast}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0xc}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x44000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xb4, r0, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c72dcc5f669e5f201557d1e947d016f84bb74c5c91a46f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0xb4}}, 0x801) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) [ 190.366296][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.392649][T10341] IPVS: ftp: loaded support on port[0] = 21 [ 190.404210][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@jmp={0x5, 0x0, 0xc}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 190.450697][T10344] IPVS: ftp: loaded support on port[0] = 21 16:30:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@jmp={0x5, 0x0, 0xc}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:30:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x18100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xcb41, 0xfffffffffffffff8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 16:30:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x5) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x2e0, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7450}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x188, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={[], [], @broadcast}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0xc}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x44000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xb4, r0, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c72dcc5f669e5f201557d1e947d016f84bb74c5c91a46f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0xb4}}, 0x801) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) 16:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@jmp={0x5, 0x0, 0xc}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 190.699861][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.724306][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) 16:30:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@jmp={0x5, 0x0, 0xc}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:30:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465f90b007c05e87c55a1bc000900b8000699030000000500150004008178a8001600040008c00600000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 190.899276][T10425] IPVS: ftp: loaded support on port[0] = 21 16:30:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f020000ffffff7f000000001000000000209983ff84ba27df9ebeb7bf3a9dae2d034066d8726964676530000a66030cc05bbb95dd31b1f26a32de58eb26f7324eaa51e3e7e68ed0ca42151014e874a8c0b183699bb8fb0ad16e6849b60a4dce7874f5e5800c1f45599088f71d8e7ecc9677f86bc01bd0743cc34efa0e236f11a304bd5b3b69056ee4c74e1a3f633eb0d71196416b0bd6852473deab"], 0x5b) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r4, 0x0, 0x800000080004103) perf_event_open(0x0, 0x0, 0x0, r4, 0xc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000200)={0x7fffffff, 0x7ff, 0x2, 0x10001, 0x8, 0x8}) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0xfa, 0x5, 0xff, 0x0, 0x100, 0x9042, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40440, 0xffffffffffff498a, 0x1, 0x1, 0x6, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x8c, 0x0, 0x0, 0x4, "1fc0baca979bb1f03b0de88187f9862c3b6cf7101be63e253dc5742f6cdb334d09c1a5369e91a5a773663cca1987762990e1a6dbd86665c53558484ac3afbeaa", "7275f912af7f81078909c700ea170747610d4e3e18c8cfa0825fe3c752d961ab", [0x40, 0xffffffff]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x8, 0x0, 0xff, 0x0, 0x1ff000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0}, 0xc4c, 0x81, 0xffff, 0x0, 0xff, 0x6, 0x9ffb}, 0xffffffffffffffff, 0x0, r0, 0x9) 16:30:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x12}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 190.950561][T10432] IPVS: ftp: loaded support on port[0] = 21 [ 190.963437][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.979221][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 191.083731][T10450] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.094432][T10450] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. 16:30:28 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:30:28 executing program 1: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="8202c9e917"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000008c0), &(0x7f0000000900)=0xc) 16:30:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f000001f000/0x2000)=nil, 0x2000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfd, "c60a00008f907152109d400000000000008000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 16:30:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 16:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48854}, 0x20040015) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="15000000010000001c0012000c000100627269646765d7243685beb41141b4d000d779bbb94760d82669d29412ffe341258538390ba31eaf87b5d2d4f41910b351dc056119f97ad58f25544f6ae2a7f8c66dd64195135440f9390199fcb306fe64e0edecc4a7cb7bec519a69257ecda4d96fae3c1cf5a23e91b6da3b244c510eb6916b1e2e974d29e7212b0418934339d97819b791ee0dd3516a988238ca09f881a57cbd4c4046f52d0e11c70e9f17879c8afc769fc9498001d0a57f4fce5cb2e73e1a01200b1db3"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010001fff2cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800128008000100707070000c732300128008000100", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="15000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0xa00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2a}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x5}]}}}]}, 0x50}}, 0x0) 16:30:28 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, 0x0) 16:30:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000280)="ed41000010001000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301002400000000320000000000000900000010400d823b72d376563cb57f0acb4f0c44a0fcbf31ad873cc74497c9abca46880cbc6d66209fe017412f7b9406a6", 0x6a, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) 16:30:28 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, 0x0) 16:30:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f000000ccc0)) [ 191.525440][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.525528][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.528706][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.576384][T10518] loop4: detected capacity change from 69632 to 0 [ 191.590093][T10518] EXT4-fs error (device loop4): ext4_fill_super:4943: inode #2: comm syz-executor.4: iget: bad extended attribute block 42502 [ 191.590257][T10518] EXT4-fs (loop4): get root inode failed [ 191.590265][T10518] EXT4-fs (loop4): mount failed [ 191.660144][T10518] loop4: detected capacity change from 69632 to 0 [ 191.757520][T10518] EXT4-fs: failed to create workqueue [ 191.757528][T10518] EXT4-fs (loop4): mount failed 16:30:28 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 16:30:28 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, 0x0) 16:30:29 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:30:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 16:30:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x100) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x15, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x8000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0)) 16:30:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180)='nl802154\x00', r0) 16:30:29 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, 0x0) 16:30:29 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:30:29 executing program 4: timerfd_create(0x0, 0x0) 16:30:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000000000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001a8018000a8014000700fe880000000000000000000000000001"], 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 16:30:29 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000180)='htcp\x00', 0x5) 16:30:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180)='nl802154\x00', r0) 16:30:29 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x4, 0x400000, 0x4) 16:30:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 16:30:29 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:30:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180)='nl802154\x00', r0) 16:30:30 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x3a) ioctl$PPPIOCSFLAGS(r0, 0x8004745a, 0x0) 16:30:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) 16:30:30 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0xe4, 0x8, &(0x7f0000002540)=[{&(0x7f00000001c0)="954fba7947742d1f52b108a18be3c77021160cf396a255c2195223d6286b8f2898ff641eea1c89df00d6a8fa8ee8f4c490a29a6d5aa5391c2ce19086887dc318a10f2e479bae2831f2cfc8b9e0992a92f09b241f7c8538d3c07fdb642c3ba567110aa6816a10c2538ea064ec765005eeaec953bbe07de026688d76141624c16e0d9ca45052f723da3fb5ab748497497fde30c3d1dd66280b600da6488c030fdbb13b1e85fe90d89bc4f20de08996492c4cfec81bddf0a00c41b0606c5d0682180a6d5c84abcc16b2d5ce64c605a177475b04ea5cae8fca24c5778293536f736bbc76f80432f9c62033dce82c6fe33414", 0xf0, 0xfffffffffffffff9}, {&(0x7f00000002c0)="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", 0xe00}, {0x0, 0x0, 0x3}, {&(0x7f0000001340)="f5da1b87b8eb1c58c80a5b4b1fc5941dfe3f801255952f9f6d40c08db00a94482ad76c39b9850c7731cb99b00c1ecf738842b17e51a6be0ccdeea1f16c45881476bc", 0x42, 0xc00}, {&(0x7f00000000c0)="4bd84a5f84e617f6b62819255dabc8ab5c2d6b49b6b98d96d2", 0x19}, {&(0x7f0000001440)="f3318479aae823e0b72b42e5671d67b34ad33f899b91b1f167d303afcaba9984c223fead519a36a202e04d855dce9e3210b0c81110f2f77f881fe617f167a284171bbabc02505a6ff81ccd9bb45aa6aa2dd31fd145642bc347f46cfe3ffff24474d4ec15b9faea5bbbee8712f035587e69e0095c8e8a8d3360fb08bab940f65697ba5a2abb8407686e779e0542538b5defae6470beade15c680421f028ecb70b8f26c85675576fd1fec39f548409cc59e1e912a07d4c7d9aebaca4fd2207e0623062889845d8dc8d402e85223d3e669b6db5f7a0315bd95ddf597fc0f7774c06102cb330c21454c6441dfc1aeca6d5bcb53acd9b8e2deaf757e1a2af25d82f8a5443c423c52b312d7aff8df427fea43e9253f964bb06c96b2712c37339bc1fda46f1cba30278552aa28de544551bc7b69f1a2878aa2ec03eb1343448a1f373b3f5fadf8d453e2384097e9d3c3aae8aed2f146ca5de27cd6f5953e6dfad3677ca67cfb797ddc6e1370f32c19963afdc53eac585c32237712e5196090ecadc52b046743c547c541faa319f7c1a0f4f6f95c3d77be7dbc618509346e4d7bec85f038eba47147cdd7d54e5aab59f42ceabc4d97ec8b9c2bbdf8347bb6edbaf51267a0e85ca09b9c825c7f97093bbf4d82ffa888d0d5044a20548d6f7e812b81090c1882476050f1dcbd6940e70488526291768dfe2158d50c56e7c2ed1188e8e693958f8024882802731295543a2f2a7805a78211d23ffee0c133c9cb76139de24aced6123cb016f917433415c248555e622fa494fcd5972afddb2d2d3a732931e8ea7aa770cd7191a7860c62726107c9b75770dd55b1955f72edfb7cb01e03ddc7d1eb38d178e0207859b9b384dfd14e9c29da65852288fb7490a13e28c53fd339f77e872d75e59da740e9f1b66dc690e63610e854d4674d3a7c918b76d81b2d386b17e947e383636116c61e1993165728cd6ae8b8d78a8a0c44951a9f59f34131f98c59382b4ad179a71cecd5e1107cf905b18e2599446fc86c3022a4dfbea2fc7b5e2b8c9d54b0b74c075fc2a66446d7f6fec9434b3f17933dbb5fe98343d32b93e3135576cfc21c4321c8256225be74b236b997f95ff1b13decd5365a9d30ab1bd00ba63fbdc7b4d42c2bef5a0a0799261e4025527dbcd70ceb202539cd25cf74ead7a11e1ad39f4fbaeecbf4d074fd3c974450539c110715a02754cfe3f07efb93c309b874a82722e6cabf300847b6fd11717491e576e2f975f0f71091cee2fb4684a5bcb7eba5ad6ef5737a71bb4d3b99f611c051e978ba943e8bd5a4f1d045d409bcb8b69f8dd266754f21b0c9f029b1d2373a505a58f6452408fcfa92fd95b8d4569535adfb0f60bea0da57b88fde41e89b6b926db68307bdd983b64b81505976d5faeb3f12e263f1c3a9c6a80f29f30ca9390ed9b9fbaa44cbbf2c547fc3ab600111130465fde91554067e0010b3707eaf8124c7f697fa0f831a748d5f6d0ee745247bac715837288473ed9cd923fcb51fe05012452442ad57705316102b7d7ea1172f2b2617e3efa877ac5e9c5d731c30762a71cb522cdc77b4eb741a8cccbbdc78661f33ac79da568f37f9a7f11d75f2f89935ebf0ee6cee5d1243169d1f5e319b8afcca171f48394c7f03ee9790336a3cd7a5b6c2caa968acbc5aa5b7e30ac38361f96f752d069f839f5c59511339bb4218398d794f269342ff88abeb52835b276ad8a412b9c9f3da3b96bcd80b4e06df80ba3e9c3d9983e0ad81bffe657f6e710949ae9084ce2b90149c719248ae5b4d3825bbb46ddad9eed6ff1317034ae03c9c6fe08009c3d7d2065511eaac54479bab2f590b08886f4757aff9ad1cb899fa529e6f1374cff093976d9300fb348099944418a17aebf83316ea18275f895264a1176e4c741553bbb73b0d0ef4c0c9d03ec268d177dd72fc5ad7e28f60d883003836b4fd1a423e9d636026513654b52c7a174d2071a034f3bfd315780cc3a5b0c05e1a182cddb6f864bb7924ed34b0af485209a5473481f6623e88d97f3151751066e561b1969e4911b9973d0c336e5fa4791f1fac71d683841e57fd142ce23ffa4f5c64440e569b9ab675bd5cc725309e5dc22a03a0ea95a92e81f36cb0fabecb3657ad91b113f59beacd59f4774fc05a71f432df0093c091f4d245abf56711dcb6082229bcfc8ab8d728c4f94a754086f56635b412b0d26503fadacef2f98d49a62eb9b9b952b70fd77e4b85a8243c58092176c14e43a6df28cdec87c12f7bd8b7267ca34e95cedb16040b33f8c2514e6b0308913fc48000370eb87f05e1ece494b041e6cbe3e0fc6b9b62fe1059a7c83ecebf0c9d6ca32ac2cd35388b8930d8eb7f8448f61422809907122d2cb3f5d305726cb5744e0a0e74d6e6a38e5befda7e79fd94efbc2e550e8bfbe5afb77bf6ebc9123e394b89bd3c3663f8d8bbd47ed81598fa03010e7d2c1f656317258b65e6304ac1326b68eea143851b9e62a03d6874d1623cfd59a987c62226c6fdd264720922470a6dc05031a2a064b7faa1c9c9f721497e94331cfb45f57f67477f4b6a3f4748bcfffc1354b27b584471e0193b082fffb7fcfc7921dc0618c5d28a3788426c533d9a0048bfd5e3caf4292d75f6a9b634ecee684350bb069ad30e5791846b94477d3d6ccdee2d174624356ec13eeb1cdc7911dad52211ab1cc6a18d0c3d9fc8da56133b80e608a81b980aac463752438efd30f400bdd3b869c9152d74e19cea7041293b0c98b0569b8f91551d3151e672092ff5451b83dbb76d6e8aa2334fe1cb07dc06f6478dfcc478bfffa2abd8e3547cc6bee9d38d6cb8ae0525ebbc0887392ef6b0e192942c3908d7e5d98ffe6d18882ac02457d630c9cc4dbb02371dbc15e4336f9832613563884c1e4949e3bab8e5437f79f77eaee3c317af2ad8d9a3931ff2184164e86a22519741bea7de83559f589ab299120f427d85103deb550bc0ea5d961afb1538b713849db09f25d42d673335eb1619da5b0ab483af7a3978b6d8bd705d2596670c01e4eb1d99a685414407e633e6b32651cb74bc543764af3f9d5b86dedffce0ae0643eb233af759722d0d13130f319e504fc452b567ae2391c2a4102cdeaa5b899934fdd49b5e30290610045110a3f45f5dd0efc01049e3264699303c43c402d1994a532f628526adaee8c86291aa8c0d1e20883e716ad570c11fe181b718c5f841dede115b40518d5d517759e8a4c158ed0ebaeb4becb3d1569239450b4e79bf15ac18297c24a29bc212986e242e56e51af432fa025c21e4046ef0aba05b7787af9786773071c3a6a42e7f4460da5b7147ed0d27fee2afc5c108374c062e2d9da52dc278a2bcb748ce43f72dd12d4c0fb4f5e91fb9b16cee8b2783778dc67e9255bc7e4d969b72f75b0bca6ba32b05ce537120455ce0ff4241401b3ae6620b6ac3ab8df75c5764572c89c4a8bad615a680808b6365a74a871c2d55d2f8e2fc82797d3a595f1de310703af760d7d5352e87f0d672303fa5bd5662ddf28e27ea1884bca21eab3d266c38116e525deed0c973164690bf2b5f7cc0ea79be7b39c61407ca66cf80c4e9d2b1c520af557f828f1d6f53cfae45b092a6886e100a3f4040ea421bfc4d326ecd015bd744c8d6f5d72da05e4b695dffba77d908dffc10f2cf950aa6eed2e5b09ebac358d4391d14258cc583428fb7aaf29d650011e88d1364592db68d266bfb27e0812c8f1236e7f9db602009865ed29b8c2dec298f1680c44bc33f2303747a52220a918af63caa31a9f4d757273a3e82f9735d3f540d4d6765953fc813e0468e9aebf2b44cf5a488ffd3d9694c68284ea4c2a4cfcdf39d392b1e312a9949d4a1ca42187becc34e0746fd1ca482d7d4bbcdf0981d073ee13713630e7028c570f9b54ca6b4b5a489a59d3110d9735a6cb3b7bef04e5f3e9cd71d6e49818818ad8c89d40d88f0099a05e86a7fde6da466bc86d1e1ff59b0f91bc40b43ff2dee7ec6a2bae97eb40e9eae21da023c363068a55631881b08dbb88f2180cfc0d0900baea3404baa7a882e10e02d392849b86671beac450fecff1556046ae6ee82d145085404bef8b6b9d5f06304190279da3d41ba19d627dd8bf60d95f389ac2e38fa94ae148c1057e5fb9bc87ecd418f25688eb122b641d66db459d9207c07c8fad0d2a178b7be09bf8e855462cd3ebab3a60796c22808d26a9359b6c25c7c25f3b0e692abe085ed19f3522f143dfadbf6285fd94dc9a6325b5593b3c54ab34005cf3fb7886c3b381d0d34b843a86b512817c239d0779d16c11f5d511b287d30e7a1993d7c67bb1474e51d6798d1bf28d29fb9b9efb6f67bfc9c038312b3defc50c4d6e77e42b9d49eef810c9a8d842ec39bc53980bd67a6ae27135ad3e8bd796c9ca0c6c493e609e9953ba578118efc201cdc891cfeb6d4409c25eb46ecc9ed239b2836df5baa8f6f8e22c5582a95244363fb80b224b937f70ac0328ef05634d8a73ead916e9f0ec36323adf43ee30a2de3626db6e488315aa590a66f6da0374fc4134209f6ef6efa93412f6c72fbcf73fd6e37b18a904b1d13e7a30affe39aa5eb9698b3513a3fca646eb9d6cbd2daf89f3d047ec57f9c6dde4f156e47316f56584a6a7ad8bfd2ec9d0f988b1c71fd7e88c8a314c7c048758462c9f81bcc4ba7a6a2ae3c84b482cb4a1f312a8474e55936565bd23c25aea1be103b98b36af8fd845a0bc25ba3c9b9f3e300afc746a6d10c82d77f9b49f8c5d5f2e41b0aa649afbd5111d035630c2053b4447bbd6c07d610446fc702f314a6c0b299eef9999799bc96b096a5fec06e5674905b255a7e43e011fa18dea55b888b422e19474873931a16a66a30d8c7c6953c9a34cb36869d8dfd7035ac777ab74284a46db51f8315cc86a2a9516f005f7b85bdef87a7689db182cf9719e3de845097ac064b05cd047c5172e6ba314a211d86ebbc0d79cdd7f795a06eeb2ec635c80a623382ea0bc59d4d51908f2d558809a6cde2afc666c7d5097d10ccaf2d973666200482e56cce513a315ad2d17fc70ad8d58736c68fe1af3d74c635672f1624f0d18da6ba78963fc8f24c68193fa1f3dd2469839f61215d5da7c5689dff2f5da7a84b53075c7600c41b33bac35705fa9e369c766bce5161f721897d5c242b8da4df7ce8ee53a96f5db0c772177809b4285b7bae227c27436686679d11eb6c71d997543a11ab332ac7903cd2b3443b0987ecab9d761c1f68439753d1d776eee9f00082e23493133e54b2041bb6510fe2f7fcb5ecb14f9fe25593a16035afac8556dcaaa964daf3c5f8621b31a9536ca725efc69b7f5930f00d03a7aff23844e14015ec124242650695271f0de9f2395975fea1268d17ef380b044618b0880b18b0062b92d7063aeb271374002ba9b0d855c2a30052696a3c88fbbbfb2dee83aeadd3c57ac16c6b8837f0d60075319384ded79d6071b317d33437c7cbf4871de1193b6baaf2f5b96bb7c880854b8a9c2ee622c4cd4085d53ea3e8d2f3f348db68c4864258c20375041023b64df0277e3abecf53f1ce3789ffcb3ffced10c92619ffc10ee6971ff0814f38e20b56dbdf4f72796e9ad0e2b7b5f2472b86db791a3deda2f751d715d9607a23dcc6ee07ca933e7bbdfeea1ab3679e1bb507305d21c28ce6f65f744afc3692ec499030a3f62115b201f517b8bb05b01130c08d21eeaed53f371f1f126357a677447067c8dd718b84e112a8efd05286dad386789144bdfdd3b3b0a992d475eab465a5291ff390d69f9dc2fb74c7bdaabe3d67debffa4", 0x1000, 0x1}, {&(0x7f0000002440)="5bbbf7fb5fd354f0c1a9a69e13f38a964013896dc04d6ab099de7126a877c47405534d4c6e5217c80b4bf0beb3201badac2e8d8853fa2d2b1024efab5aa3a1ed71f6ffebba473ca43a44e5bbd08e8b3b2b288d6692d7d164c7f0c4c761e6a646742e20798162cc2ccf34e6954a", 0x6d, 0x7}, {&(0x7f00000024c0)="1800a762986e7cddc75e756f37bd13601feddd173a8647a1963203887c092039138eb09857f62ab549c42938a0128658ddc7f3a114a1df88518cbab9e62bcfa796b8b9d25cfc869ec1", 0x49}]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000002640)='./file1\x00', 0x4) timerfd_gettime(r0, &(0x7f0000000040)) 16:30:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180)='nl802154\x00', r0) 16:30:30 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:30:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 193.769604][ T35] audit: type=1326 audit(1613838630.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466019 code=0x7ffc0000 16:30:30 executing program 3: unshare(0x400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40505412, 0x0) [ 193.808445][ T35] audit: type=1326 audit(1613838630.672:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=283 compat=0 ip=0x466019 code=0x7ffc0000 [ 193.832765][ T35] audit: type=1326 audit(1613838630.672:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466019 code=0x7ffc0000 16:30:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="d8f5ba5c"], 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/161, 0xa1}], 0x1, 0x0, 0x0) 16:30:30 executing program 4: pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffd, 0x2) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 193.857010][ T35] audit: type=1326 audit(1613838630.672:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x466019 code=0x7ffc0000 16:30:30 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xed, 0xd8, 0x7f, 0x40, 0x41e, 0x4028, 0x822b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0xfd, 0xc2}}]}}]}}, 0x0) [ 193.895576][ T35] audit: type=1326 audit(1613838630.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466019 code=0x7ffc0000 16:30:31 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000540)}, 0x1800, 0x4, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0xedc0) socket$inet6(0xa, 0x6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x100000001}) perf_event_open(&(0x7f0000000600)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x82c, 0x2, 0x6, 0x6, 0xfff8}, 0x0, 0x6, r3, 0x0) 16:30:31 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x65f40}) 16:30:31 executing program 4: pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffd, 0x2) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 194.072995][ T35] audit: type=1326 audit(1613838630.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x466019 code=0x7ffc0000 [ 194.155425][ T35] audit: type=1326 audit(1613838630.672:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=77 compat=0 ip=0x465fd7 code=0x7ffc0000 [ 194.244271][ T35] audit: type=1326 audit(1613838630.672:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x419604 code=0x7ffc0000 [ 194.333896][ T35] audit: type=1326 audit(1613838630.672:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x465dd7 code=0x7ffc0000 [ 194.367248][ T35] audit: type=1326 audit(1613838630.672:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10624 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x465dd7 code=0x7ffc0000 [ 194.391674][ T4880] usb 6-1: new high-speed USB device number 2 using dummy_hcd 16:30:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) 16:30:31 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd4, 0x5c, 0x91, 0x8, 0x1b80, 0xe349, 0xe6b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x59, 0xb7, 0xe3, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0) 16:30:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) dup3(r0, r1, 0x0) io_setup(0x0, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x1) 16:30:31 executing program 4: pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffd, 0x2) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 16:30:31 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x41) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 194.765855][ T4880] usb 6-1: New USB device found, idVendor=041e, idProduct=4028, bcdDevice=82.2b [ 194.785011][ T4880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.804356][ T4880] usb 6-1: config 0 descriptor?? 16:30:31 executing program 4: pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffd, 0x2) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 194.857295][ T4880] gspca_main: pac207-2.14.0 probing 041e:4028 [ 194.877785][T10628] syz-executor.1 (10628) used greatest stack depth: 9736 bytes left 16:30:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) dup3(r0, r1, 0x0) io_setup(0x0, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 194.975517][ T4880] gspca_pac207: Failed to read a register (index 0x0000, error -110) 16:30:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) [ 195.058812][ T4880] usb 6-1: USB disconnect, device number 2 [ 195.195566][ T3070] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 195.445514][ T3070] usb 4-1: Using ep0 maxpacket: 8 [ 195.575526][ T3070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 195.585427][ T3070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 195.620802][ T3070] usb 4-1: New USB device found, idVendor=1b80, idProduct=e349, bcdDevice=e6.b9 [ 195.630583][ T3070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.641963][ T3070] usb 4-1: config 0 descriptor?? [ 195.826993][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.898681][ T8015] usb 4-1: USB disconnect, device number 2 [ 196.185567][ T5] usb 6-1: New USB device found, idVendor=041e, idProduct=4028, bcdDevice=82.2b [ 196.194626][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.204591][ T5] usb 6-1: config 0 descriptor?? [ 196.248643][ T5] gspca_main: pac207-2.14.0 probing 041e:4028 16:30:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6495}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 16:30:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) dup3(r0, r1, 0x0) io_setup(0x0, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x1) 16:30:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) set_mempolicy(0x3, &(0x7f0000000340)=0x20000000000401, 0x5) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) 16:30:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) 16:30:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) [ 196.365498][ T5] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 196.455627][ T9926] usb 6-1: USB disconnect, device number 3 [ 196.525061][T10796] serio: Serial port pts0 [ 196.591781][T10796] serio: Serial port pts0 [ 196.665511][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.907038][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 197.025607][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 197.035271][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 197.047649][ T5] usb 4-1: New USB device found, idVendor=1b80, idProduct=e349, bcdDevice=e6.b9 [ 197.057059][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.068939][ T5] usb 4-1: config 0 descriptor?? 16:30:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x85097, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0x4, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0x1d, 0x1, 0x9, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000e80)='syzkaller\x00', 0x202000, 0xd6, &(0x7f0000001000)=""/214, 0x41000, 0xb, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x0, r0}, 0x78) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r2 = syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010000)="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", 0x400}], 0x0, &(0x7f0000000900)=ANY=[]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x444000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={0xd4, r1, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x56, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1945}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x61}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x524}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x4}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r4 = openat(r2, &(0x7f0000000240)='./file0/file0\x00', 0x140, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000f80)={0xac, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x0, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x80800}, 0x8000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x83c, r1, 0x224, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5ea22a080fc4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x290, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x554, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x458, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "eb4dc3a759b107407df32c25ed44ec73a06311dd299959f33cc1a2e7d4ed7d8a53c34fa0077f59bae0de36110474461435e8c5f25f8992b09d7a6eecbffa67da78ef766824524257481de54d021885c8688e90c5694ebe7c8df15242d400fdd1859599e8f1c2a58fd7acdabf7d17efd1dccf85694497269abe216d40cd9b6ea7db3bd49ac058f7ec31205a6cc238cd44f64c638f42cb75f9cc6da4ed84b9e0cee40c3c77260dfdd22fd35d7a8e471ca441938e9fd2aedaa77024c5ea4da9dac796bd9b9915fe1581b97a02a764bbd89fc3b713b22ef6d824c0f5a972511612440b9d65d6ddeae62bafe6042313aa7c87db3bae3930ff01f93022f3c8448c93"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "6f0e4f53ce47f39a4d699f87e570f6ff780d2dd63ebb90edd5aa40386f3fd65ea3e95e2a1a6c7c6a7048c796581d200477da184dcffb10515a3a69b5f6a559ea58a7248400bb4b748ca2d8875ba658fd5cf7f7c11c888110103aedb657c9aa8bfa461eaadfee89808cfec100794a5f00b67773f5f9ad28c8be729dd6ea90572915f3d2207be0546ddb1a6836d0b5ab465c0d68528dd3a107f9421d21f0e632c814ec7a6147c3b8490d7d3c7063c2f26911164c49fb2852e68680ed2aa17ccc64574648836700764b0c65f5ec999a4d8369eae2184bd770199e371161eb486c58108f50c6d2f62d691183540f8347c97da1df46b8d49bb2042b0efea28e83c7"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "5ecc5288041b8bd133b657ad9a7685f40fc88aa5c8d9697d3cb9b2124882fb3a646a9b2a98f0c6386588fff1e30cfea6ff8d756228dcf529ac1792d72e96dae4ea455df80a36612a54a468c8637a6f3094d687b0ba47612408dbcaf01924c85c3ef09f302fe39c3e781c312a792fed3844c7da2e67e95e1dff6b1f07908224eca9ddf27e8162e6e42e12ea690cbb78a5b5a817e2a2023b7e964696d0eef8e06dfd219af0bb00cb8b5adee3cc9eaab0305e6110ec5120e4bb814ad3b7a1489764b49aa94d93ac12aacceb44d9d399d91d532d524ef61f9071e56decce0a6edc7a8f89fd5222df65a5a5081182a81af9d0f0a445379de252e999c886e488004a"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x20}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xec, 0xb, "06f1b01ba12bb46d41038ec107f2b88315be68d744ac88ae34b002dda455a54ac4e4ddaa12d33b0864ebab1d7eb38b49d94df6e258c8d8abb10b1c4fa87ed53dfa2dbab1ac8ff0753fabc4efce8d25c3c809560c72ee2182b5a1a8d94805be774c9ab21ecad0706092860131d41f976b13c334f9904c64ac72d5c184183d6097f6a62ac25a5605e4929859979aa950a2007b9928979c37d967713d1155d4ba5039d70b43406d4068ce78a3484ef3b27881cb7f480ede54f3bb79031012688749042d7b91debddb0288780faf9f01cf695130de9531787ff5fcfcd27f24f9a23b3b4d4aee0bb26554"}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "4d2e4f0824aa7a5d094bd87759abb9067f9de6613d2ca8b3e2151bb3b569dd7459b38757d161b81108c2963fc90f17e9704b125df4ed7ed2a5a5f136ee7b31df", 0x20}, 0x1a, 0xfffffffffffffffc) nanosleep(&(0x7f00000002c0), 0x0) 16:30:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) dup3(r0, r1, 0x0) io_setup(0x0, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x1) 16:30:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6495}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 16:30:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x3, 0x0, 0x0, 0x0, 0x401}}) 16:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) 16:30:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1ca) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="c403292116deb8010000000f01c1480fc71ec4a1d1ec3500000000470f00d2440f785b5a660fc734c3c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4a}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x9, 0x7, 0x0, 0x7fffffff, 0x20408, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xffffffffffffff08, 0x40}, 0x24, 0x5, 0x2, 0x2, 0x0, 0x4}, r5, 0xffffffffffffffff, r1, 0x8) 16:30:34 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 16:30:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6495}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 16:30:34 executing program 2: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) [ 197.307518][ T5] usb 4-1: USB disconnect, device number 3 16:30:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6495}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 16:30:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x9804872c85e35f6e) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 16:30:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x85097, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0x4, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0x1d, 0x1, 0x9, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000e80)='syzkaller\x00', 0x202000, 0xd6, &(0x7f0000001000)=""/214, 0x41000, 0xb, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x0, r0}, 0x78) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r2 = syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010000)="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", 0x400}], 0x0, &(0x7f0000000900)=ANY=[]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x444000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={0xd4, r1, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x56, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1945}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x61}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x524}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x4}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r4 = openat(r2, &(0x7f0000000240)='./file0/file0\x00', 0x140, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000f80)={0xac, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x0, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x80800}, 0x8000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x83c, r1, 0x224, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5ea22a080fc4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x290, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "1b03cb00498170121fa549aa6b101e852b2bc11c02b939fd5d4416b681d22b22dbb36b351571b310ab4b23cd0f2b8a8fa2837a6cf0e6555086589008c45a2ea24af432a78a0be6b516f8ddaf33447d723ed5e084a72d07f8126cd8c00be73f215c1b722a850b3de35bfa6a5415285cf9263b87ee991f4d955edeaaefea0ee3574cce0f68203cf5d7274257dc1f331a08cc1abed88d07667bb0a4c935ea67dd258e2a2f7cc52a0fa56e696311bdc1a22c996d809729e1eb454af11d88b739cdcfd620b43518775ea295ff3efc071b673b84b33d8db9d1886b6c71277a24009b6ea9c0b0ecc31c158dd02ca3f0da3152d79d0dae72993cb451e5b20543484565"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x554, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x458, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "5ecc5288041b8bd133b657ad9a7685f40fc88aa5c8d9697d3cb9b2124882fb3a646a9b2a98f0c6386588fff1e30cfea6ff8d756228dcf529ac1792d72e96dae4ea455df80a36612a54a468c8637a6f3094d687b0ba47612408dbcaf01924c85c3ef09f302fe39c3e781c312a792fed3844c7da2e67e95e1dff6b1f07908224eca9ddf27e8162e6e42e12ea690cbb78a5b5a817e2a2023b7e964696d0eef8e06dfd219af0bb00cb8b5adee3cc9eaab0305e6110ec5120e4bb814ad3b7a1489764b49aa94d93ac12aacceb44d9d399d91d532d524ef61f9071e56decce0a6edc7a8f89fd5222df65a5a5081182a81af9d0f0a445379de252e999c886e488004a"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "69f269bb19e206949f9a989f8c5065e17713997c3db2e3353b4b40c7f8fef3b41381abd6cfa6b317c6fcd104ff80127938bd9f3c981c3099387a81a45a54ad4cd97d55c4a20d085049ea65300ce3b586f803f211dd860b2988639ebae2dafe5a4a5019a9e865f8c0d14d0d3cbba1f37b37e56e6f59a689bd87287dd601851602821d3159bbb5c2f16761d0a2129f0fa3bf8abc8fa681848746c28bf9f868b99a9bef550ce7dca5cd18f4103014d984e14ace0d8440bd708e8bd8ee8dca8d7b6e0e8c6718a706ad0fa44e8464af3bbaa083f23179deb009effb540e43a47578b46aa21deeb2854ef20bddec3901ba9181980ba5d02048730e2a7d175795e6fb"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x20}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xec, 0xb, "06f1b01ba12bb46d41038ec107f2b88315be68d744ac88ae34b002dda455a54ac4e4ddaa12d33b0864ebab1d7eb38b49d94df6e258c8d8abb10b1c4fa87ed53dfa2dbab1ac8ff0753fabc4efce8d25c3c809560c72ee2182b5a1a8d94805be774c9ab21ecad0706092860131d41f976b13c334f9904c64ac72d5c184183d6097f6a62ac25a5605e4929859979aa950a2007b9928979c37d967713d1155d4ba5039d70b43406d4068ce78a3484ef3b27881cb7f480ede54f3bb79031012688749042d7b91debddb0288780faf9f01cf695130de9531787ff5fcfcd27f24f9a23b3b4d4aee0bb26554"}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "4d2e4f0824aa7a5d094bd87759abb9067f9de6613d2ca8b3e2151bb3b569dd7459b38757d161b81108c2963fc90f17e9704b125df4ed7ed2a5a5f136ee7b31df", 0x20}, 0x1a, 0xfffffffffffffffc) nanosleep(&(0x7f00000002c0), 0x0) 16:30:34 executing program 0: r0 = epoll_create1(0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_pwait(r0, &(0x7f00008c9fc4), 0x1641, 0x0, 0x0, 0x200014) 16:30:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x7) 16:30:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x10e, 0x4, &(0x7f0000000000), 0x400000) [ 197.455007][T10851] loop3: detected capacity change from 2 to 0 [ 197.468975][T10851] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 197.483776][T10851] romfs: Mounting image 'rom 5f663c08' through the block layer 16:30:34 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) [ 197.729025][T10887] loop3: detected capacity change from 2 to 0 [ 197.749967][T10887] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 197.780091][T10887] romfs: Mounting image 'rom 5f663c08' through the block layer 16:30:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) [ 198.261378][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.282293][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) 16:30:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x85097, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0x4, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0x1d, 0x1, 0x9, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000e80)='syzkaller\x00', 0x202000, 0xd6, &(0x7f0000001000)=""/214, 0x41000, 0xb, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x0, r0}, 0x78) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r2 = syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010000)="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", 0x400}], 0x0, &(0x7f0000000900)=ANY=[]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x444000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={0xd4, r1, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x56, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1945}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x61}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x524}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x4}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r4 = openat(r2, &(0x7f0000000240)='./file0/file0\x00', 0x140, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000f80)={0xac, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x0, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x80800}, 0x8000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x83c, r1, 0x224, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5ea22a080fc4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x290, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x554, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x458, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "eb4dc3a759b107407df32c25ed44ec73a06311dd299959f33cc1a2e7d4ed7d8a53c34fa0077f59bae0de36110474461435e8c5f25f8992b09d7a6eecbffa67da78ef766824524257481de54d021885c8688e90c5694ebe7c8df15242d400fdd1859599e8f1c2a58fd7acdabf7d17efd1dccf85694497269abe216d40cd9b6ea7db3bd49ac058f7ec31205a6cc238cd44f64c638f42cb75f9cc6da4ed84b9e0cee40c3c77260dfdd22fd35d7a8e471ca441938e9fd2aedaa77024c5ea4da9dac796bd9b9915fe1581b97a02a764bbd89fc3b713b22ef6d824c0f5a972511612440b9d65d6ddeae62bafe6042313aa7c87db3bae3930ff01f93022f3c8448c93"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x20}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xec, 0xb, "06f1b01ba12bb46d41038ec107f2b88315be68d744ac88ae34b002dda455a54ac4e4ddaa12d33b0864ebab1d7eb38b49d94df6e258c8d8abb10b1c4fa87ed53dfa2dbab1ac8ff0753fabc4efce8d25c3c809560c72ee2182b5a1a8d94805be774c9ab21ecad0706092860131d41f976b13c334f9904c64ac72d5c184183d6097f6a62ac25a5605e4929859979aa950a2007b9928979c37d967713d1155d4ba5039d70b43406d4068ce78a3484ef3b27881cb7f480ede54f3bb79031012688749042d7b91debddb0288780faf9f01cf695130de9531787ff5fcfcd27f24f9a23b3b4d4aee0bb26554"}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "4d2e4f0824aa7a5d094bd87759abb9067f9de6613d2ca8b3e2151bb3b569dd7459b38757d161b81108c2963fc90f17e9704b125df4ed7ed2a5a5f136ee7b31df", 0x20}, 0x1a, 0xfffffffffffffffc) nanosleep(&(0x7f00000002c0), 0x0) 16:30:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) 16:30:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) 16:30:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) 16:30:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x9804872c85e35f6e) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 16:30:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x85097, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0x4, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0x1d, 0x1, 0x9, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000e80)='syzkaller\x00', 0x202000, 0xd6, &(0x7f0000001000)=""/214, 0x41000, 0xb, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0x5, 0x0, 0x7}, 0x10, 0x0, r0}, 0x78) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r2 = syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010000)="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", 0x400}], 0x0, &(0x7f0000000900)=ANY=[]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x444000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={0xd4, r1, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x56, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1945}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x61}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x524}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x4}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r4 = openat(r2, &(0x7f0000000240)='./file0/file0\x00', 0x140, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000f80)={0xac, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x0, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x80800}, 0x8000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x83c, r1, 0x224, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5ea22a080fc4"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x290, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x554, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x458, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x20}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xec, 0xb, "06f1b01ba12bb46d41038ec107f2b88315be68d744ac88ae34b002dda455a54ac4e4ddaa12d33b0864ebab1d7eb38b49d94df6e258c8d8abb10b1c4fa87ed53dfa2dbab1ac8ff0753fabc4efce8d25c3c809560c72ee2182b5a1a8d94805be774c9ab21ecad0706092860131d41f976b13c334f9904c64ac72d5c184183d6097f6a62ac25a5605e4929859979aa950a2007b9928979c37d967713d1155d4ba5039d70b43406d4068ce78a3484ef3b27881cb7f480ede54f3bb79031012688749042d7b91debddb0288780faf9f01cf695130de9531787ff5fcfcd27f24f9a23b3b4d4aee0bb26554"}]}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "4d2e4f0824aa7a5d094bd87759abb9067f9de6613d2ca8b3e2151bb3b569dd7459b38757d161b81108c2963fc90f17e9704b125df4ed7ed2a5a5f136ee7b31df", 0x20}, 0x1a, 0xfffffffffffffffc) nanosleep(&(0x7f00000002c0), 0x0) [ 198.511836][T10920] loop3: detected capacity change from 2 to 0 [ 198.531903][T10920] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 198.550352][T10920] romfs: Mounting image 'rom 5f663c08' through the block layer [ 198.624612][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.658160][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) 16:30:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) 16:30:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) [ 198.675227][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.691383][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) [ 198.814002][T10945] loop3: detected capacity change from 2 to 0 [ 198.827039][T10945] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 198.834353][T10945] romfs: Mounting image 'rom 5f663c08' through the block layer [ 198.864070][ T35] kauditd_printk_skb: 51 callbacks suppressed [ 198.864081][ T35] audit: type=1800 audit(1613838635.762:67): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=128 res=0 errno=0 16:30:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x9804872c85e35f6e) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 16:30:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) [ 199.025594][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.025974][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.034381][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) 16:30:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x19c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xdb, 0x5d}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x101, 0x0, "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"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8f6}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000811}, 0x40004) 16:30:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c711", 0x6a) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff1, 0xb}, {0x6, 0xa}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004025}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) [ 199.084884][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.340142][ T35] audit: type=1804 audit(1613838636.242:68): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir185957899/syzkaller.jBkKIM/30/bus" dev="sda1" ino=14219 res=1 errno=0 [ 199.380081][ T3051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 16:30:36 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = dup(r7) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) dup3(r8, r1, 0x0) [ 199.459680][ T3051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.478412][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.520337][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:30:36 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xfd, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x300a}}) 16:30:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1ff, 0x4, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x2, 0x0, r0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='Meb\xddo>+\x00'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 16:30:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x9804872c85e35f6e) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 16:30:36 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000140)={@local, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2b8e84378792b786d317315e0a55153215d85e3cd7a00b698dc5372ff4d2eb52", "8b953a66fcad7d6366e15983dee01fa6d25bbc3bff2a51054c187e314a2ef482baebbe123ef1527ff9235d8989e5d73f", "424b58a933ab6c19857ba12ad74d807e48de302cfe153ab85f797489", {"3e3213003576a99f567b740df1ece895", "c6c980d9632468c0ff60334a61d5b039"}}}}}}}, 0x0) 16:30:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 16:30:36 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xfd, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x300a}}) 16:30:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x9804872c85e35f6e) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 16:30:37 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000399fa1084f17316ae2ca010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:30:37 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000140)={@local, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2b8e84378792b786d317315e0a55153215d85e3cd7a00b698dc5372ff4d2eb52", "8b953a66fcad7d6366e15983dee01fa6d25bbc3bff2a51054c187e314a2ef482baebbe123ef1527ff9235d8989e5d73f", "424b58a933ab6c19857ba12ad74d807e48de302cfe153ab85f797489", {"3e3213003576a99f567b740df1ece895", "c6c980d9632468c0ff60334a61d5b039"}}}}}}}, 0x0) 16:30:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 16:30:37 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xfd, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x300a}}) 16:30:37 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xfd, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x300a}}) [ 200.098712][ T35] audit: type=1804 audit(1613838637.002:69): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir369692698/syzkaller.kfpSvC/25/bus" dev="sda1" ino=14202 res=1 errno=0 [ 200.450830][ T35] audit: type=1804 audit(1613838637.352:70): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir185957899/syzkaller.jBkKIM/31/bus" dev="sda1" ino=14199 res=1 errno=0 [ 200.505441][ T9491] usb 5-1: new high-speed USB device number 2 using dummy_hcd 16:30:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x9804872c85e35f6e) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 16:30:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 16:30:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x80024, 0x4, 0x1, 0x0, r0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000200), 0x0}, 0x20) 16:30:37 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000140)={@local, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2b8e84378792b786d317315e0a55153215d85e3cd7a00b698dc5372ff4d2eb52", "8b953a66fcad7d6366e15983dee01fa6d25bbc3bff2a51054c187e314a2ef482baebbe123ef1527ff9235d8989e5d73f", "424b58a933ab6c19857ba12ad74d807e48de302cfe153ab85f797489", {"3e3213003576a99f567b740df1ece895", "c6c980d9632468c0ff60334a61d5b039"}}}}}}}, 0x0) [ 200.785460][ T9491] usb 5-1: Using ep0 maxpacket: 8 [ 200.928299][T11041] ================================================================== [ 200.936412][T11041] BUG: KCSAN: data-race in ext4_handle_inode_extension / generic_file_buffered_read [ 200.945781][T11041] [ 200.948088][T11041] write to 0xffff888012686630 of 8 bytes by task 11038 on cpu 0: [ 200.955780][T11041] ext4_handle_inode_extension+0x226/0x550 [ 200.961584][T11041] ext4_file_write_iter+0xeaa/0x1060 [ 200.966872][T11041] do_iter_readv_writev+0x2cb/0x360 [ 200.972152][T11041] do_iter_write+0x112/0x4c0 [ 200.976763][T11041] vfs_iter_write+0x4c/0x70 [ 200.981254][T11041] iter_file_splice_write+0x41a/0x770 [ 200.986633][T11041] direct_splice_actor+0x80/0xa0 [ 200.991560][T11041] splice_direct_to_actor+0x345/0x650 [ 200.996915][T11041] do_splice_direct+0xf5/0x170 [ 201.001674][T11041] do_sendfile+0x5e0/0xcf0 [ 201.006089][T11041] __x64_sys_sendfile64+0xf2/0x130 [ 201.011279][T11041] do_syscall_64+0x39/0x80 [ 201.015689][T11041] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.021570][T11041] [ 201.023873][T11041] read to 0xffff888012686630 of 8 bytes by task 11041 on cpu 1: [ 201.031476][T11041] generic_file_buffered_read+0x290/0x9c0 [ 201.037182][T11041] generic_file_read_iter+0x82/0x3e0 [ 201.042468][T11041] ext4_file_read_iter+0x2e0/0x430 [ 201.047584][T11041] generic_file_splice_read+0x22a/0x310 [ 201.053134][T11041] splice_direct_to_actor+0x2aa/0x650 [ 201.058489][T11041] do_splice_direct+0xf5/0x170 [ 201.063238][T11041] do_sendfile+0x5e0/0xcf0 [ 201.067650][T11041] __x64_sys_sendfile64+0xa9/0x130 [ 201.072742][T11041] do_syscall_64+0x39/0x80 [ 201.077151][T11041] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.083041][T11041] [ 201.085349][T11041] Reported by Kernel Concurrency Sanitizer on: [ 201.091491][T11041] CPU: 1 PID: 11041 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 201.099888][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.109926][T11041] ================================================================== [ 201.118485][T11041] Kernel panic - not syncing: panic_on_warn set ... [ 201.125064][T11041] CPU: 1 PID: 11041 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 201.133467][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.143501][T11041] Call Trace: [ 201.146763][T11041] dump_stack+0x116/0x15d [ 201.151085][T11041] panic+0x1e7/0x5fa [ 201.154963][T11041] ? vprintk_emit+0x2e2/0x360 [ 201.159625][T11041] kcsan_report+0x67b/0x680 [ 201.164118][T11041] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 201.169673][T11041] ? generic_file_buffered_read+0x290/0x9c0 [ 201.175599][T11041] ? generic_file_read_iter+0x82/0x3e0 [ 201.181065][T11041] ? ext4_file_read_iter+0x2e0/0x430 [ 201.186364][T11041] ? generic_file_splice_read+0x22a/0x310 [ 201.192096][T11041] ? splice_direct_to_actor+0x2aa/0x650 [ 201.197650][T11041] ? do_splice_direct+0xf5/0x170 [ 201.202766][T11041] ? do_sendfile+0x5e0/0xcf0 [ 201.207357][T11041] ? __x64_sys_sendfile64+0xa9/0x130 [ 201.212752][T11041] ? do_syscall_64+0x39/0x80 [ 201.217934][T11041] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.223988][T11041] ? generic_file_buffered_read_get_pages+0xa9e/0xaf0 [ 201.230743][T11041] kcsan_setup_watchpoint+0x472/0x4d0 [ 201.236100][T11041] generic_file_buffered_read+0x290/0x9c0 [ 201.241803][T11041] ? ___cache_free+0x3c/0x2f0 [ 201.246653][T11041] generic_file_read_iter+0x82/0x3e0 [ 201.251926][T11041] ? aa_file_perm+0x132/0xde0 [ 201.256585][T11041] ? iter_file_splice_write+0x6e8/0x770 [ 201.262167][T11041] ext4_file_read_iter+0x2e0/0x430 [ 201.267266][T11041] generic_file_splice_read+0x22a/0x310 [ 201.272799][T11041] ? splice_shrink_spd+0x60/0x60 [ 201.277720][T11041] splice_direct_to_actor+0x2aa/0x650 [ 201.283079][T11041] ? do_splice_direct+0x170/0x170 [ 201.288336][T11041] do_splice_direct+0xf5/0x170 [ 201.293157][T11041] do_sendfile+0x5e0/0xcf0 [ 201.297734][T11041] __x64_sys_sendfile64+0xa9/0x130 [ 201.302831][T11041] do_syscall_64+0x39/0x80 [ 201.307252][T11041] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.313133][T11041] RIP: 0033:0x466019 [ 201.317139][T11041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 201.337060][T11041] RSP: 002b:00007f4160c40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 201.345466][T11041] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466019 [ 201.353597][T11041] RDX: 0000000020000100 RSI: 0000000000000006 RDI: 0000000000000006 [ 201.361641][T11041] RBP: 00000000004bd067 R08: 0000000000000000 R09: 0000000000000000 [ 201.369604][T11041] R10: 00008080ffffff7e R11: 0000000000000246 R12: 000000000056c158 [ 201.377606][T11041] R13: 00007ffe8eacf05f R14: 00007f4160c40300 R15: 0000000000022000 [ 201.385653][T11041] Kernel Offset: disabled [ 201.389961][T11041] Rebooting in 86400 seconds..