last executing test programs: 19m20.652711106s ago: executing program 2 (id=719): syz_open_procfs(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19m17.790299196s ago: executing program 2 (id=728): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d", 0x7f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f671f7a4683a945a1f547d2f9b381ef34c62bd754127361576a083cf5a37b03b062076d99189acce7fa1111744e2b07828140640640e933358a56784c3f377b6cbaf4f72aa0d8e993eec8", 0x123}, {&(0x7f0000000900)}, {0x0}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 19m15.043681133s ago: executing program 2 (id=733): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 19m13.504409186s ago: executing program 2 (id=739): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) 19m11.845222912s ago: executing program 2 (id=741): syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0xffff, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0) 19m10.316083455s ago: executing program 2 (id=744): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 18m54.06116779s ago: executing program 32 (id=744): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 10m20.256405988s ago: executing program 4 (id=2041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000006c0)="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", 0x5ab}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 10m19.896148608s ago: executing program 4 (id=2043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xb00, 0x12) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, 0x0, 0x0) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/139}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) 10m19.267929056s ago: executing program 4 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) recvmmsg(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000008c0)=""/26, 0x1a}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4}, 0x2}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000002540)=""/212, 0xd4}, {&(0x7f0000002640)=""/80, 0x50}, {&(0x7f00000026c0)=""/145, 0x91}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/226, 0xe2}, {&(0x7f0000004780)=""/125, 0x7d}], 0x6, &(0x7f0000004880)=""/248, 0xf8}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x40000040, 0x0) 10m19.12633711s ago: executing program 4 (id=2046): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d", 0x7f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="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", 0x123}, {&(0x7f0000000900)}, {0x0}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m18.445133559s ago: executing program 4 (id=2050): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000082c0)={0x60, 0xffffffffffffffda, 0x57a, {{0xf, 0x1840, 0xffffffff, 0x0, 0x7ff, 0x4, 0x6952ec6d, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000008400)={0x78, 0x0, 0xd, {0x3, 0x40000004, 0x0, {0x6, 0x8000000000000000, 0x9, 0x6, 0x0, 0xa, 0x5, 0x1c0, 0xa, 0xc000, 0x5, r3, r4, 0x9, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m17.124348506s ago: executing program 4 (id=2053): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_WEIGHT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) listen(r0, 0xfffffffe) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) write$P9_RLOCK(r6, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 10m1.516460783s ago: executing program 33 (id=2053): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_WEIGHT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) listen(r0, 0xfffffffe) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) write$P9_RLOCK(r6, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 8m6.034253176s ago: executing program 3 (id=2446): socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) 8m5.025596134s ago: executing program 3 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r1, r2, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r1, r2, 0x53fb, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 8m3.954219715s ago: executing program 3 (id=2452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x3500}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) 8m3.562572245s ago: executing program 3 (id=2454): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001b6000/0x2000)=nil) socket$kcm(0x29, 0x7, 0x0) read$hiddev(r1, &(0x7f0000001680)=""/83, 0x53) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740), 0x0, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m1.100921284s ago: executing program 3 (id=2460): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="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", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m0.738583665s ago: executing program 3 (id=2461): unshare(0x42040400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x826) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7m45.228715919s ago: executing program 34 (id=2461): unshare(0x42040400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x826) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5m1.200966952s ago: executing program 1 (id=2881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r2, 0xeed, 0xeed, 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 4m56.30124374s ago: executing program 1 (id=2894): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x8, 'veth0_to_team\x00', {'batadv0\x00'}, 0x7ff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 4m55.397256555s ago: executing program 1 (id=2897): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r0, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 4m55.20733s ago: executing program 1 (id=2899): r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000300)) keyctl$instantiate(0xc, 0x0, &(0x7f0000001940)=ANY=[], 0x2a, 0xfffffffffffffffb) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendto$inet6(r2, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0xc3, 0x6, &(0x7f00000001c0)="639b5977d447b7af7eb6e38b446c281d9c1d84f1cd19dd0f61aa7b03065d8c746bdb0bceef5c797648c17610f1c3bdd3bb0c7100483413fcf39d6d86265782dd0a4b393642117e8a04b6331fe912b7ef2873df15b97911029088c534b62855d45226a466fa4d22ee4fc32bcd1f30d3de56e6c1ba71ce198ea93a62be7eeab8ef3a7119ce8448c7421d0f92931de1945a7657a747ba45dbb19fe3201dbd416e797cb951f6dca3bd63d83881681079fc94e4ed02d678da7cf2ce1bd3c3ea06b0e83d4721", &(0x7f0000000340)=""/6, 0xffffbd79, 0x0, 0x63, 0x0, &(0x7f00000003c0)="883ea73427e44520316ee2f9e7a68edbc55095d306b45deb3897a1456af7b1fe941ba93c1d480c8a10643d4790d68d20164e7919eb6aae1a45df9c08d18d80c03766600fc7c93367dacbe249f09afc1023e227abfea28c532883c3ec7bf0b67b6569ad", &(0x7f00000006c0), 0x2, 0x0, 0xa7d}, 0x4c) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 4m54.281309486s ago: executing program 1 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r2, 0xeed, 0xeed, 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 4m50.55095811s ago: executing program 1 (id=2914): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 4m33.826850119s ago: executing program 35 (id=2914): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 19.143876969s ago: executing program 0 (id=3348): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) io_uring_enter(r2, 0x2000, 0xeed, 0x1, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x4, {{0xa, 0x4e20, 0x6, @loopback}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000040f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2002000000000000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 17.135835943s ago: executing program 6 (id=3351): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1, @ANYBLOB="103318f8df1f41af6b6a1a3399b82570a21d"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 16.761328803s ago: executing program 6 (id=3354): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x77e7, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_setup(0x30aa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), 0x0, 0x0, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.096636699s ago: executing program 6 (id=3355): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40f8ff01", @ANYRES16=0x0, @ANYBLOB="020005000000fddbdf2514000000080001000200000008001d00", @ANYRES32, @ANYBLOB="08000100030000000c000600030000000000000008", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6e696c7465720000000000000400"/28], &(0x7f0000000080)=0x24) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) 14.899871124s ago: executing program 5 (id=3356): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0], 0x0) 13.899138941s ago: executing program 0 (id=3358): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4) 11.094640068s ago: executing program 5 (id=3359): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r2, @ANYBLOB="0201510038f0ee041649322c07797a6a92b54577b58db8d3a699fc8dba82c8a409a5f13817929010b37ccc222115a9f72ea9ea5f3aa487a6fa152b4f2d872a7618a47d227018e657e07ca0702f37473b048506ba7cc0e305495785913f4ea6acb2ce87b4e667fe8119a62615fdc05b5b5f111c702798788f35a480e17d5d2c5ce1ff68e749d52b30b988f3ec52fc9c4a59aa9f6377eb426f50b8e1071c37d3b593c6712f3cfa806bfb6478b415348f0df6fb6ef32fed002c357586038408f175f4a76e02193800857bc61d63fd3730de73481f34d7859da3b5073ac881db03ef0642e425e4805af99cf387a0f3c4b38bc26a8abfe0c1e621aedfa155d1f62e0948780000460ef6084ba373c7e79c98a5a4ab93a0ffb170cb3211de0800408004003a8008001500ac1414aaf27880a5513113d17fe6b454121bc71b55825d0deeab9a7b0446b5f44482eeffa82158d36844ae24fc3923f51ab24f065842d6b6b4fb39319f2645aba984f936df7f8d72de348ad646f5b9fb28ea750f7a4451289b5ac365d49322fe8daff8e8002480f740625d9247b5772a21efdb13cdce28585dcdc30e175c48a769c93395acac4f10a13e2bcabc6d21e89a3ec70766c0fd6ee93e7c8ddcc0a3b25324f3eff6b9bc801879463dffc912a4c71e46d02116d3f45130cdc375f2d46bc16e0329c2e623ab4ff64254c35354b9254f90008333b6a493da3e5835ae3364c44704205bdffad369807e863aaa38b93ecbd976a9c99452bee43efdafb3ebff29276fd78f18322cae088d53b62c5a293542357cc8b28c030acc319eb48a146726050db98b2ca9d23bc1a6421ee68dea0c532ea22b5b0cac425fbad50ff9d7c9a530604910a5e64d0c9f3100efeb73db6b40d0cdeff6e5c157d3a2fe6a599adc7a4e92fef92832b2c13e8b36986194f5a84bf5c27c04b95db337867d4eed303ef6c0d1ed03688ff8d9a6d3c6aa33fe93f6243c"], 0x3c4}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008095) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000e80)={0x1b, "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"}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x7) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x48000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0}}, 0x40408c0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') writev(r7, &(0x7f0000000780)=[{0x0}], 0x1) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 9.409179654s ago: executing program 0 (id=3360): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1db, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x200, 0x2, 0x5, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0xeeeb6000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x100000, 0x0, 0xb, 0x8, 0x9, 0xcb, 0x2, 0x0, 0x8, 0x6}, {0xe000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x3, 0xfc, 0x7, 0x0, 0x2}, {0xeeee0000, 0xeeef0000, 0x10, 0x5, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x2, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x4, 0x2}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0x5dfcffdf, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.293423804s ago: executing program 7 (id=3361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 8.099119489s ago: executing program 5 (id=3362): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x121) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000680)={0xe1, 0x10000002000003, 0x7, 0x4}) 7.930861404s ago: executing program 0 (id=3363): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x77e7, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_setup(0x30aa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), 0x0, 0x0, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.763057995s ago: executing program 6 (id=3364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 6.528639992s ago: executing program 7 (id=3365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 6.401224065s ago: executing program 0 (id=3366): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) io_uring_enter(r2, 0x2000, 0xeed, 0x1, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x4, {{0xa, 0x4e20, 0x6, @loopback}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000040f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2002000000000000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 6.289088979s ago: executing program 5 (id=3367): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = dup(r2) read$FUSE(r3, 0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 5.229880427s ago: executing program 6 (id=3368): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f00000002c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="a8cc8ef9f9253b216b1b0d18fac16bdd73a57826ac4b044ee988b7973d2250d39ebc1ecad595e5d7f9842d81192403ac80f2871fbf276d3aeb7f16ecb08a9161416f6512dbe50d75806bb46b66b14cc1e731effccd47569f9c206d778ae1220d73ee793b6ec3aa711dc84cc47dc497317105fdd4ccfec870ab06fd40c8ef081a1a7ba424a854bc50cd2cfedd", @ANYRESDEC, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x21, 0x1508, &(0x7f0000001f80)="$eJzs3AvUjdX2MPA511oPL0k7yeVlzTUfdrxYJEkuSXJJkuRIkltCkiRJUrnfkpCE3JPcQ3ILyf1+yz1JjiRJQkKS9Q3n6FTnnO/rf/7//sMY3zt/Y6yx19zPnmuvtec79n7W8469v+kwqEq9qhXrMDP8j+Dfb7oCQAoA9AWAawAgAoCS2Upmu3Q8k8au/7MnEX+uB6Ze6RmIK0nqn75J/dM3qX/6JvVP36T+6ZvUP32T+qdvUn8h0rOt03JfKy39Nrn+n57J5///Rw4XHf3F+qLXd/wPUqT+6ZvUP32T+qdvUv/0KcPlW6l/+ib1T9+k/umb1F+I9Oy/f+34P801AHDlr3dL+3270n9/QgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHSh3PhVwYAfulf6XkJIYQQQgghhBDizxMyXukZCCGEEEIIIYQQ4n8fggINBiLIABkhBTJBZrgKssDVkBWugQRcC9ngOsgO10MOyAm5IDekQh7ICxYIHDDEkA/yQxJugAJQENKgEBSGIuChKBSDG6E43AQl4GYoCbdAKbgVSkMZKAvl4DYoD7dDBbgDKsKdUAkqQxWoCndBNbgbqsM9UAPuhZpwH9SC+6E2/AXqwANQFx6EevAQ1IeHoQE0hEbQGJr8t/JfgBfhJegMXaArdIPu0AN6Qi/oDX2gL7wM/SDl8mszEAbBazAYXoch8AYMhWEwHN6EETASRsFoGANjYRy8BePhbZgA78BEmASTYQpMhWkwHd6FGTATZsF7MBvehzkwF+bBfFgAH8BCWASL4UNYAh/BUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+Bi2wXbYATthF+yGPfAJ7IVPYR98Bvvh8/8w/+w/5XdEQECFCg0azIAZMAVTMDNmxiyYBbNiVkxgArNhNsyO2TEH5iiYC3NhKqZiXsyLhISMjPkwHyYxiQWwAKZhGhbGwujRYzEshsXxJiyBJbAklsRSWApLYxksg+WwHJbH8lgBK2BFrIiVsBJWwSp4F96Fd2N1rI41sAbWxJpYC2vh4Ty1sQ7WwbpYF+thPayP9bEBNsBG2AibYBNsik2xGTbDFtgCW2JLbIWtsDW2xjbYBttiW2yH7bA9tscO2AE74vP4PL6AL+BL+BJ2wUqqG3bH7tgTe2Jv7IN98GXsh6/gK/gqDsCBOAhfw9fwdRyCZ3AoDsPhOBzLq5E4Ckcjq7E4DsfheByPE3ACTsRJOAmn4FSchtNxOs7AmTgT38PZ+D6+j3NxLs7HBbgAF+IiXIyLcQmexaW4DJfjClyJq3AlrsG1uAbX4wZcj5twE27BLfgxfozbcTvuxJ24Gw0AfoKf4qc4APfjfjyAB/AgHsRDeAgP42E8gkfwKB7FY3gMj+NxPIEn8RSexNN4Gs/gWTyH5/A8nscL+GzqV3V3F1o3ANQlRhmVQWVQKSpFZVaZVRaVRWVVWVVCJVQ2lU1lV9lVDpVD5VK5VKpKVXnVj4oUKVaxyqfyqaRKqgKqgEpTaaqwKqy88qqYKqaKq+KqhCqhSqpbVCl1qyqtyqjmvpwqp8qrFr6CukNVVBVVJVVZVVFVVVVVTVVT1VV1VUPVUDVVTVVL3a9qq27YGx9QlypTTw3E+moQNlANVSPVWL2Oj6imagg2U81VC/WYGoZDsZVq6lurJ1UbNQrbqqfVaHxGtVdjsYN6TnVUz6tO6gX1omrmO6suaiJ2U93VFOypeqneqo+agZXVpYpVUa+qAWqgGqReU/PxdTVEvaGGqmFquHpTjVAj1Sg1Wo1RY9U49ZYar95WE9Q7aqKapCarKWqqmqamq3fVDDVTzVLvqdnqfTVHzVXz1Hy1QH2gFqpFarH6UC1RH6mlaplarlaolWqVWq3WqLVqnVqvNqiNapParLaorepjtU1tVzvUTrVL7VZ71Cdqr/pU7VOfqf3qc3VA/VUdVF+oQ+pLdVh9pY6or9VR9Y06pr5Vx9V36oQ6qU6p79Vp9YM6o86qc+pHdV79pC6on9VFFRRo1EprbXSkM+iMOkVn0pn1VTqLvlpn1dfohL5WZ9PX6ez6ep1D59S5dG6dqvPovNpq0k6zjnU+nV8n9Q26gC6o03QhXVgX0V4X1cX0jbq4vkmX0DfrkvoWXUrfqkvrMrqsLqdv0+X17bqCvkNX1HfqSrqyrqKr6rt0NX23rq7v0TX0vbqmvk/X0vfr2vovuo5+QNfVD+p6+iFdXz+sG+iGupFurJvoR3RT/ahuppvrFvox3VI/rlvpJ3Rr/aRuo5/SbfXTup1+RrfXz+oO+jndUT+vO+mf9UUddGd9+W1e99A9dS/dW/fRffXLup9+RffXr+oBeqAepF/Tg/Xreoh+Qw/Vw/Rw/aYeoUfqUXq0HqPH6nH6LT1ev60n6Hf0RD1JT9ZT9FQ9Tfe+PNKs/0L+2/8mv3/GS/Paorfqj/U2vV3v0Dv1Lr1b79F79F69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WB/RR/RRfVQf08f0cX1cn9An9Y/6e31a/6DP6LPqlxVfuPwagEGjjDbGRCaDyWhSTCaT2VxlspirTVZzjUmYa002c53Jbq43OUxOk8vkNqkmj8lrrCHjDJvY5DP5TdLcgJfHNoVNEeNNUVPM3Pif5JsCpqBJM4V+l/9H82timpimpqlpZpqZFqaFaWlamlamlWltWps2po1pa9qadqadaW/amw6mg+loOppOppN50bxoOpvOpqvparqbHqan6WV6mz6mr3nZ9DP9TH/T3wwwA8wgM8gMNoPNEDPEDDVDzXAz3IwwI8woM8qMMWPMODPOjDfjzQQzwUw0E81kM9lMNVPNdDPdzDAzzCwzy8w2s80cM8fMM/PMArPALDQLzWKz2CwxS8zSDMvMMrPCrDCrzCqzxqwx68w6s8FsMJvMJrM041az1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO0qN8kR5IxtR5CKO4ihflD9KRjdEBaKCUVpUKCocFYl8VDQqFt0YFY9uikpEN0clo1uiUtGtUemoTFQ2KhfdFpWPbo8qRHdEFaM7o0pR5ahKVDW6K6oW3R1Vj+6JakT3RjWj+6Ja0f1R7egvUZ3ogahu9GBUL3ooqh89HDWIGkaNosZRkz91/BDO5HzUd7ZdbFfbzXa3PWxP28v2tn1sX/uy7Wdfsf3tq3aAHWgH2dfsYPu6HWLfsEPtMDvcvmlH2JF2lB1tx9ixdpx9y463b9sJ9h070U6yk+0UO9VOs9Ptu3aGnWln2ffsbPu+nWPn2nl2vl1gP7AL7SK72H5ol9iP7FK7zC63K+xKu8qutmvsWrvOrrcb7Ea7yW62W+xW+7HdZrfbHXan3WV32z32E7vXfmr32c/sfvu5PWD/ag/aL+wh+6U9bL+yR+zX9qj9xh6z39rj9jt7wp60p+z39rT9wZ6xZ+05+6M9b3+yF+zP9qINl07uL328kyFDGSgDpVAKZabMlIWyUFbKSglKUDbKRtkpO+WgHJSLclEqpVJeykuXMDHlo3yUpCQVoAKURmlUmAqTJ0/FqBgVp+JUgkpQSSpJpagUlabSVJbK0m10G91Ot9MddAfdSXdSZapMVakqVaNqVJ2qUw2qQTWpJtWiWlSbalMdqkN1qS7Vo3pUn+pTA2pAjagRNaEm1JSaUjNqRi2oBbWkltSKWlFrak1tqA21pbbUjtpRe2pPHagDdaSO1Ik60Yv0InWmztSVulJ36k49qSf1pt7Ul/pSP+pH/ak/DaABNIgG0WAaTENoCA2lYTSc3qQRNJJG0WgaQ2NpHI2j8TSeJtAEmkgTaTJNpqk0labTdJpBM2gWzaLZNJvm0ByaR/NoAS2ghbSQFtNiWkJLaCktpeW0nFbSSlpNq2ktraX1tJ420kbaTJtpK22lbbSNdtAO2kW7aA/tob20l/bRPtpP++kAHaCDdJAO0SE6TIfpCB2ho3SUjtExOk7H6QSdoFN0ik7TaTpDZ+gcnaPz9BNdoJ/pIgVKcZlcZneVy+KudlndNe6f41wut0t1eVxeZ10Ol/N3MTnn0lwhV9gVcd4VdcXcjS7t0pbqN3FpV8aVdeXcba68u91V+Je4mrvbVXf3uBruXlfV3fW7uKa7z9VyD7na7mFXxzV0dV1jV8895Oq7h10D19A1co1dS/e4a+WecK3dk66Neyr6p9gtdIvcWrfOrXcb3F73qTvnfnRH3TfuvPvJdXZdXF/3suvnXnH93atugBv4L/Fw96Yb4Ua6UW60G+PG/ks82U1xU900N92962a4mf8SL3AfuNlusZvj5rp5bv7f4ktzWuw+dEvcR26pW+aWuxVupVvlVrs1/5jrCrfJbXZb3B73idvmtrsdbqfb5Xb/Lb60jn3uM7fffe6OuK/dQfeFO+SOucPuq7/Fl9Z3zH3rjrvv3Al30p1y37vT7gd3xp392/ovrf1797O76IIDRlas2XDEGTgjp3AmzsxXcRa+mrPyNZzgazkbX8fZ+XrOwTk5F+fmVM7DedkysWPmmPNxfk7yDVyAC3IaF+LCXIQ9F+VifCMX55u4BN/MJfkWLsW3cmkuw2W5HN/G5fl2rsB3cEW+kytxZa7CVfkursZ3c3W+h2vwvVyT7+NafD/X5r9wHX6A6/KDXI8f4vr8MDfghtyIG3MTfoSb8qPcjJtzC36MW/Lj3Iqf4Nb8JLfhp7gtP83t+Bluz89yB36OO/Lz3Ilf4Bf5Je7MXbgrd+Pu3IN7ci/uzX24L7/M/fgV7s+v8gAeyIP4NR7Mr/MQfoOH8jAezm/yCB7Jo3g0j+GxPI7f4vH8Nk/gd3giT+LJPIWn8jSezu/yDJ7Js/g9ns3v8xyey/N4Pi/gD3ghL+LF/CEv4Y94KS/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8zbeDvv4J28i3fzHv6E9/KnvI8/4/38OR/gv/JB/oIP8Zd8mL/iI/w1H+Vv+Bh/y8f5Oz7BJ/kUf8+n+Qc+w2f5HP/I5/knvsA/80UODDHGKtaxiaM4Q5wxTokzxZnjq+Is8dVx1viaOBFfG2eLr4uzx9fHOeKcca44d5wa54nzxjam2MUcx3G+OH+cjG+IC8QF47S4UFw4LhL7uGhcLL4xLh7fFJeIb45LxrfEpeJb49Jxmfihe8vFt8Xl49vjCvEdccX4zrhSXDmuEleN74qrxXfH1eN74hrxvXGJ+L64Vnx/DJe/r1I3fjCuFz8U148fjhvEDeNGceO4SfxI3DR+NG4WN49bxI/FLePH41bxE3Hr+Mm4TfzUHx7vGneLu8c94h5xCPfoecn5yQXJD5ILk4uSi5MfJpckP0ouTS5LLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk5uSYZQNSN49Mprb3zkM/iMPsVn8pn9VT6Lv9pn9df4hL/WZ/PX+ez+ep/D5/S5fG6f6vP4vN568s6zj30+n98n/Q2+gC/o03whX9gX8d4X9cV8Y9/EN/FN/aO+mW/uW/jH/GP+cf+4f8I/4Z/0bfxTvq1/2rfzz/j2/ln/rH/Od/TP+07+Bf+if8l39l18V9/Vd/fdfU/f0/f2vX1f39f38/18f9/fD/AD/CA/yA/2g/0QP8QP9UP9cD/cj/Aj/Cg/yo/xY/w4P86P9+P9BD/BT/QT/WQ/2U/1U/10P93P8DP8LD/Lz06b7ef4OX6en+cX+AV+oV/oF/vFfolf4pf6pX65X+5X+pV+tV/t1/q1fr1f7zf6jX6z3+y3+q1+m9/md/gdfpff5ff4PX6v3+v3+X1+v9/vD/gD/qA/6A/5L/1h/5U/4r/2R/03/pj/1h/33/kT/qQ/5b/3p/0P/ow/68/5H/15/5O/4H/2F33w4xJvJcYn3k5MSLyTmJiYlJicmJKYmpiWmJ54NzEjMTMxK/FeYnbi/cScxNzEvMT8xILEB4mFiUWJxYkPE0sSHyWWJpYllidWJFYmViVCyLMtDvlC/pAMN4QCoWBIC4VC4VAk+FA0FAs3huLhplAi3BxKhltCqXBrKB3KhLLh4dAgNAyNQuPQJDwSmoZHQ7PQPLQIj4WW4fHQKjwRWocnQ5vwVGgbng7twjOhfXg2dAjPhY6/7LjCS6Fz6BK6hm6he+gReoZeoXfoE/qGl0O/8EroH14NA8LAMCi8FgaH18OQ8EYYGoaF4eHNMCKMDKPC6DAmjA3jwlthfHg7TAjvhIlhUpgcpoSpYVqYHt4NM8LMMCu8F2aH98OcMDfMC/PDgvBBWBgWhcXhw7AkfBSWhmVheVgRVoZVYXVYE9aGdWF92BA2hk1hc9gStoaPw7awPewIO8OusDvsCZ+EveHTsC98FvaHz8OB8NdwMHwRDoUvw+HwVTgSvg5HwzfhWPg2HA/fhRPhZDgVvg+nww/hTDgbzoUfw/nwU7gQfg4X5TtrQgghhBD/JT3+4Hi3f3OfAYBf/pHQHQCu3p778G+PawDYmOPv/V4qtWUCAJ7s0uGBX1qlSl27dr382KUaovxzASDxT09wOV4GLeBxaA3Nofi/nV8v9fx5/oPxk7cAZP5NTgr8Gv9jfPz36++lHnls+MJS8bls/4/x5wKk5f81JxP8Gi+DFpdWA82hxP9l/JxN/2D+mb4YB9DsNzlZ4Nf419enGDwKT0Hr3z1SCCGEEEIIIYT4u16qbLs/2j9f2p+nAvxjh5wRAFLN3/t/tD8XQgghhBBCCCHElffM852eeKR16+btpCMd6UjnH50r/c4khBBCCCGE+LP9etL/632ZruSEhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIdOg3P/qVCQD+V35O7EqvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/k8AAAD//9cUKe8=") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.183332889s ago: executing program 7 (id=3369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000"], 0x24, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a03", 0x2c}], 0x1) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f0000000680)={[{@subsystem='memory'}]}) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 5.041386122s ago: executing program 5 (id=3370): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r2, @ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008095) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000e80)={0x1b, "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"}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x7) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x48000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0}}, 0x40408c0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') writev(r7, &(0x7f0000000780)=[{0x0}], 0x1) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 2.630474718s ago: executing program 7 (id=3371): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b", 0xa5}], 0x1}}], 0x2, 0x2090) epoll_create1(0x0) close(0x3) 1.845192149s ago: executing program 6 (id=3372): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40f8ff01", @ANYRES16=0x0, @ANYBLOB="020005000000fddbdf2514000000080001000200000008001d00", @ANYRES32, @ANYBLOB="08000100030000000c000600030000000000000008", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6e696c7465720000000000000400"/28], &(0x7f0000000080)=0x24) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) 1.774712611s ago: executing program 7 (id=3373): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xf1, 0x2, 0x3, 0x0, 0x7fffffff, 0xf, 0x80, 0x1, 0x81, 0xe, 0x80, 0x5, 0x0, 0x10000, 0x4, 0x32, 0x85, 0x4, 0xbd, '\x00', 0x7, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.567252577s ago: executing program 5 (id=3374): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x77e7, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_setup(0x30aa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), 0x0, 0x0, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 209.148424ms ago: executing program 7 (id=3375): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800718, &(0x7f0000001000)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@resgid}]}, 0x0, 0x4a4, &(0x7f0000000980)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=3376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 3115][T13305] fuse: Unknown parameter 'fd0x0000000000000004' [ 1018.527280][ T5811] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1018.772591][ T5811] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 1018.858725][ T5811] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 1018.970875][ T5811] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 1019.086082][ T5811] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 1019.211004][ T5811] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 1019.298801][ T5811] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 1019.414811][ T5811] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 1019.512775][ T5811] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 1019.619785][ T5811] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 1019.712977][ T5811] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1019.795405][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.813927][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 1019.814013][ T28] audit: type=1326 audit(1777521968.727:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13304 comm="syz.5.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1019.877281][ T5770] Bluetooth: hci1: command tx timeout [ 1019.925512][ T5811] usb 2-1: Product: syz [ 1019.963777][ T5811] usb 2-1: Manufacturer: syz [ 1020.023977][ T5811] usb 2-1: SerialNumber: syz [ 1020.254533][ T5811] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1020.458661][ T789] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1020.895062][T13301] random: crng reseeded on system resumption [ 1021.044299][T13289] chnl_net:caif_netlink_parms(): no params data found [ 1021.291895][T13289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.299553][T13289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.310000][T13289] bridge_slave_0: entered allmulticast mode [ 1021.319985][T13289] bridge_slave_0: entered promiscuous mode [ 1021.333013][T13289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.341445][T13289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.350241][T13289] bridge_slave_1: entered allmulticast mode [ 1021.359678][T13289] bridge_slave_1: entered promiscuous mode [ 1021.394661][T13318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 1021.476410][T13289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.512501][T13289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.547654][ T5811] usb 2-1: USB disconnect, device number 13 [ 1021.627516][T13289] team0: Port device team_slave_0 added [ 1021.637756][T13289] team0: Port device team_slave_1 added [ 1021.674831][T13289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.682437][T13289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.714523][T13289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.732396][T13289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.746432][T13289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.780128][T13289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.849945][T13289] hsr_slave_0: entered promiscuous mode [ 1021.861364][T13289] hsr_slave_1: entered promiscuous mode [ 1021.868746][T13289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.876414][T13289] Cannot create hsr debugfs directory [ 1021.957522][ T5770] Bluetooth: hci1: command tx timeout [ 1021.963901][ T789] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1021.982680][ T789] ath9k_htc: Failed to initialize the device [ 1022.016859][ T5811] usb 2-1: ath9k_htc: USB layer deinitialized [ 1022.183559][T13289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.194904][T13289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.413873][T13289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.425932][T13289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.472776][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1022.491322][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1022.510645][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1022.520253][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1022.637384][T13289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.648434][T13289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.666417][T13332] syzkaller0: entered promiscuous mode [ 1022.674758][T13332] syzkaller0: entered allmulticast mode [ 1023.221972][T13344] fuse: Unknown parameter 'fd0x0000000000000004' [ 1024.000740][T13289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.038087][ T5770] Bluetooth: hci1: command tx timeout [ 1024.136754][T13289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.323194][T13289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1025.350420][T13289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1025.372172][T13289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1025.390717][T13289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1025.399138][ T5809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1025.607198][ T5809] usb 6-1: Using ep0 maxpacket: 32 [ 1025.619994][ T5809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.645359][T13289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.664641][ T5809] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.685116][T13289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.729202][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.736421][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.751840][ T5809] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1025.779426][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.806650][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.814118][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.825591][ T5809] usb 6-1: config 0 descriptor?? [ 1025.842703][ T5809] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1026.117499][ T5770] Bluetooth: hci1: command tx timeout [ 1026.295052][T13289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.419022][T13289] veth0_vlan: entered promiscuous mode [ 1026.456516][T13289] veth1_vlan: entered promiscuous mode [ 1026.536798][T13289] veth0_macvtap: entered promiscuous mode [ 1026.553030][T13289] veth1_macvtap: entered promiscuous mode [ 1026.603328][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.619915][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.631479][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.642614][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.654143][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.666223][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.676715][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.690062][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.704852][T13289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.753027][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.774600][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.795277][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.806705][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.847380][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.873638][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.893958][T13289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.914790][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.935877][T13289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.970792][T13289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.009480][T13289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.037113][T13289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.047204][T13289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.081642][T13371] syzkaller0: entered promiscuous mode [ 1027.092050][T13371] syzkaller0: entered allmulticast mode [ 1027.351466][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.395342][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.434719][T13373] fuse: Unknown parameter 'fd0x0000000000000004' [ 1027.511709][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.512387][ T28] audit: type=1326 audit(1777521976.447:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85df9cdd9 code=0x7ffc0000 [ 1027.556400][ T28] audit: type=1326 audit(1777521976.477:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85df9cdd9 code=0x7ffc0000 [ 1027.570361][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.586377][ T28] audit: type=1326 audit(1777521976.487:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85df9cdd9 code=0x7ffc0000 [ 1027.586435][ T28] audit: type=1326 audit(1777521976.487:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85df9cdd9 code=0x7ffc0000 [ 1027.586480][ T28] audit: type=1326 audit(1777521976.487:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85df9cdd9 code=0x7ffc0000 [ 1027.586524][ T28] audit: type=1326 audit(1777521976.487:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa85df9cdd9 code=0x7ffc0000 [ 1027.682182][ T28] audit: type=1326 audit(1777521976.617:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa85df5d60e code=0x7ffc0000 [ 1027.755370][ T28] audit: type=1326 audit(1777521976.627:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa85df5d60e code=0x7ffc0000 [ 1027.836366][ T28] audit: type=1326 audit(1777521976.647:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa85df5d60e code=0x7ffc0000 [ 1027.895283][ T28] audit: type=1326 audit(1777521976.647:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa85df5d60e code=0x7ffc0000 [ 1028.108985][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 1028.119218][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 1028.159911][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 1028.169170][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 1028.219937][ T5809] usb 6-1: USB disconnect, device number 3 [ 1031.677893][T13393] bridge2: entered promiscuous mode [ 1031.714781][T13393] bridge2: entered allmulticast mode [ 1031.960623][T11538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1031.972115][T11538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1031.983800][T11538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1031.996063][T11538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1032.011337][T11538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1032.022093][T11538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1032.576289][T13398] syzkaller0: entered promiscuous mode [ 1032.595869][T13398] syzkaller0: entered allmulticast mode [ 1032.991964][T13400] trusted_key: encrypted_key: insufficient parameters specified [ 1033.008978][T13400] trusted_key: encrypted_key: insufficient parameters specified [ 1033.329729][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1033.338853][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1033.377896][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1033.387015][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1033.402544][ T5809] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1033.483494][T13395] chnl_net:caif_netlink_parms(): no params data found [ 1033.554508][T13409] overlayfs: failed to clone upperpath [ 1033.565743][T13411] loop5: detected capacity change from 0 to 16 [ 1033.627313][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 1033.635464][T13411] erofs: (device loop5): mounted with root inode @ nid 36. [ 1033.646411][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.657281][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.677579][ T5809] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1033.686800][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.703547][ T5809] usb 1-1: config 0 descriptor?? [ 1033.722256][ T5809] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1033.870249][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.893645][T13395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.921761][T13395] bridge_slave_0: entered allmulticast mode [ 1033.938012][T13395] bridge_slave_0: entered promiscuous mode [ 1033.976102][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.986116][T13395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.008882][T13395] bridge_slave_1: entered allmulticast mode [ 1034.016628][T13395] bridge_slave_1: entered promiscuous mode [ 1034.104543][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.118614][ T5770] Bluetooth: hci0: command tx timeout [ 1034.171767][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.202179][T13422] fuse: Bad value for 'fd' [ 1034.216456][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1034.216472][ T28] audit: type=1326 audit(1777521983.147:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7d79cdd9 code=0x7ffc0000 [ 1034.269689][ T28] audit: type=1326 audit(1777521983.197:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7d79cdd9 code=0x7ffc0000 [ 1034.325955][ T28] audit: type=1326 audit(1777521983.197:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7d79cdd9 code=0x7ffc0000 [ 1034.353283][T13395] team0: Port device team_slave_0 added [ 1034.365970][T13395] team0: Port device team_slave_1 added [ 1034.396149][ T28] audit: type=1326 audit(1777521983.197:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbe7d79cdd9 code=0x7ffc0000 [ 1034.450514][ T28] audit: type=1326 audit(1777521983.207:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7d79cdd9 code=0x7ffc0000 [ 1034.463450][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.492487][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.504734][ T28] audit: type=1326 audit(1777521983.307:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe7d75d60e code=0x7ffc0000 [ 1034.535723][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.565595][ T28] audit: type=1326 audit(1777521983.317:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe7d75d60e code=0x7ffc0000 [ 1034.589160][ T28] audit: type=1326 audit(1777521983.327:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe7d75d60e code=0x7ffc0000 [ 1034.611165][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.615473][ T28] audit: type=1326 audit(1777521983.327:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe7d75d60e code=0x7ffc0000 [ 1034.641608][ T28] audit: type=1326 audit(1777521983.327:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.1.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe7d75d60e code=0x7ffc0000 [ 1034.739541][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.792674][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.949251][T13395] hsr_slave_0: entered promiscuous mode [ 1034.965965][T13395] hsr_slave_1: entered promiscuous mode [ 1034.980299][T13395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.010744][T13395] Cannot create hsr debugfs directory [ 1035.736777][T13395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.750927][T13395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.803770][T13433] bridge12: entered promiscuous mode [ 1035.803792][T13433] bridge12: entered allmulticast mode [ 1036.013858][T13437] overlayfs: failed to resolve './file0': -2 [ 1036.165509][ T5809] usb 1-1: USB disconnect, device number 17 [ 1036.176338][T13395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.188156][T13395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.199155][ T5770] Bluetooth: hci0: command tx timeout [ 1036.464960][T13395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.504893][T13395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.738376][T13395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.752198][T13395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.124417][T13395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1037.144778][T13395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1037.172735][T13395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1037.193043][T13395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1037.341242][T13395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.366910][T13395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.386721][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.394025][T12366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.415835][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.423254][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.713035][T13395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.808775][T13395] veth0_vlan: entered promiscuous mode [ 1037.865429][T13395] veth1_vlan: entered promiscuous mode [ 1037.973847][T13395] veth0_macvtap: entered promiscuous mode [ 1037.989948][T13395] veth1_macvtap: entered promiscuous mode [ 1038.046781][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.107859][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.148845][T13469] binder: 13468:13469 ioctl 4018620d 0 returned -22 [ 1038.155732][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.183684][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.217464][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.237310][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.257159][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.276826][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.288824][ T5770] Bluetooth: hci0: command tx timeout [ 1038.307371][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.327705][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.389354][T13395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.406286][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.419302][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.430480][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.444097][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.465182][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.487532][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.509438][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.525318][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.536905][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.549573][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.562843][T13395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.654612][T13395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.688722][T13395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.709074][T13395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.727318][T13395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.958215][T13481] syzkaller0: entered promiscuous mode [ 1038.963800][T13481] syzkaller0: entered allmulticast mode [ 1039.741678][T13497] overlayfs: failed to resolve './file0': -2 [ 1040.357457][ T5770] Bluetooth: hci0: command tx timeout [ 1045.928274][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.936280][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.077328][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.107434][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.341074][T13527] overlayfs: failed to resolve './file0': -2 [ 1046.740549][T13534] loop0: detected capacity change from 0 to 256 [ 1046.806010][T13534] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1046.888810][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1046.898407][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1046.916840][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1046.926398][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1046.989204][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 1046.989231][ T28] audit: type=1800 audit(1777521995.927:1446): pid=13534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2356" name="file1" dev="loop0" ino=1048609 res=0 errno=0 [ 1047.088656][T13534] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 1047.148814][T13534] FAT-fs (loop0): Filesystem has been set read-only [ 1048.345588][T13553] syzkaller0: entered promiscuous mode [ 1048.418507][T13553] syzkaller0: entered allmulticast mode [ 1049.322542][T11538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1049.338274][T11538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1049.348016][T11538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1049.378232][T11538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1049.386353][T11538] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1049.405247][T11538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1049.606246][T13563] loop5: detected capacity change from 0 to 512 [ 1051.477701][ T5770] Bluetooth: hci4: command tx timeout [ 1052.239125][ T48] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.267944][ T48] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.291630][T13585] syzkaller0: entered promiscuous mode [ 1052.297781][T13585] syzkaller0: entered allmulticast mode [ 1052.372467][ T48] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.417338][ T48] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.456264][T13558] chnl_net:caif_netlink_parms(): no params data found [ 1052.577757][ T48] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.588358][ T48] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.715095][ T48] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.767520][ T48] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.891263][T13597] loop5: detected capacity change from 0 to 764 [ 1053.001848][T13558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.047708][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.055515][T13558] bridge_slave_0: entered allmulticast mode [ 1053.072273][T13558] bridge_slave_0: entered promiscuous mode [ 1053.227182][T13558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.234447][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.253852][T13558] bridge_slave_1: entered allmulticast mode [ 1053.284211][T13558] bridge_slave_1: entered promiscuous mode [ 1053.557579][T11538] Bluetooth: hci4: command tx timeout [ 1054.651874][T13558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.061922][T13558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.397480][T11538] Bluetooth: hci0: command tx timeout [ 1055.638838][T11538] Bluetooth: hci4: command tx timeout [ 1057.290979][T13558] team0: Port device team_slave_0 added [ 1057.313405][T13558] team0: Port device team_slave_1 added [ 1057.707531][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 1057.717618][T11538] Bluetooth: hci4: command tx timeout [ 1057.723451][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2382'. [ 1057.749445][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 1057.760156][T13626] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2384'. [ 1057.807339][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2382'. [ 1057.882269][T13558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.977129][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.076811][T13558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.436840][T13558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.445917][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.497781][T13558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.804769][T11538] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1058.817351][T11538] CPU: 1 PID: 11538 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1058.825080][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1058.835217][T11538] Workqueue: hci0 hci_rx_work [ 1058.840021][T11538] Call Trace: [ 1058.843359][T11538] [ 1058.846364][T11538] dump_stack_lvl+0x18c/0x250 [ 1058.851207][T11538] ? show_regs_print_info+0x20/0x20 [ 1058.856488][T11538] ? load_image+0x420/0x420 [ 1058.861057][T11538] sysfs_create_dir_ns+0x26e/0x2a0 [ 1058.866241][T11538] ? sysfs_warn_dup+0xa0/0xa0 [ 1058.870994][T11538] ? do_raw_spin_unlock+0x121/0x230 [ 1058.876258][T11538] kobject_add_internal+0x61c/0xcc0 [ 1058.881516][T11538] kobject_add+0x164/0x240 [ 1058.885972][T11538] ? __rwlock_init+0x150/0x150 [ 1058.890777][T11538] ? kobject_init+0x1e0/0x1e0 [ 1058.895497][T11538] ? _raw_spin_unlock+0x28/0x40 [ 1058.900417][T11538] ? get_device_parent+0x366/0x390 [ 1058.905581][T11538] device_add+0x408/0xc20 [ 1058.909980][T11538] hci_conn_add_sysfs+0xd5/0x1e0 [ 1058.914971][T11538] le_conn_complete_evt+0xf5d/0x1540 [ 1058.920316][T11538] ? hci_event_packet+0x4cb/0x1270 [ 1058.925481][T11538] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1058.931770][T11538] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1058.937461][T11538] ? skb_pull_data+0xfb/0x200 [ 1058.942200][T11538] hci_le_conn_complete_evt+0x187/0x440 [ 1058.947892][T11538] ? hci_remote_host_features_evt+0x150/0x150 [ 1058.954008][T11538] hci_event_packet+0x7ba/0x1270 [ 1058.959028][T11538] ? bis_list+0x290/0x290 [ 1058.963408][T11538] ? lockdep_hardirqs_on+0x98/0x150 [ 1058.968692][T11538] ? hci_send_to_monitor+0xd7/0x4f0 [ 1058.973930][T11538] hci_rx_work+0x43a/0xd60 [ 1058.978403][T11538] ? process_scheduled_works+0x96f/0x15d0 [ 1058.984176][T11538] process_scheduled_works+0xa5d/0x15d0 [ 1058.989784][T11538] ? worker_attach_to_pool+0x380/0x380 [ 1058.995310][T11538] ? assign_work+0x3d2/0x5d0 [ 1058.999964][T11538] worker_thread+0xa55/0xfc0 [ 1059.004610][T11538] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1059.010593][T11538] ? _raw_spin_unlock+0x40/0x40 [ 1059.015584][T11538] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1059.021563][T11538] kthread+0x2fa/0x390 [ 1059.025682][T11538] ? pr_cont_work+0x560/0x560 [ 1059.030415][T11538] ? kthread_blkcg+0xd0/0xd0 [ 1059.035070][T11538] ret_from_fork+0x48/0x80 [ 1059.039591][T11538] ? kthread_blkcg+0xd0/0xd0 [ 1059.044260][T11538] ret_from_fork_asm+0x11/0x20 [ 1059.049095][T11538] [ 1059.333831][T11538] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1059.350405][T11538] Bluetooth: hci0: failed to register connection device [ 1061.434837][ T5770] Bluetooth: hci0: command tx timeout [ 1061.865488][T13558] hsr_slave_0: entered promiscuous mode [ 1061.865941][T13667] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1061.937733][T13558] hsr_slave_1: entered promiscuous mode [ 1062.065667][T13558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.170614][T13558] Cannot create hsr debugfs directory [ 1062.760373][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.766909][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.612238][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 1063.621807][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2394'. [ 1063.671547][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 1063.697813][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2394'. [ 1063.830994][T13684] overlayfs: failed to resolve './file1': -2 [ 1064.496665][T13690] bridge3: entered promiscuous mode [ 1064.502076][T13690] bridge3: entered allmulticast mode [ 1067.237222][T11538] Bluetooth: hci1: command tx timeout [ 1069.956510][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1069.983246][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1070.012918][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1070.036519][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1070.109245][T13735] overlayfs: failed to resolve './file1': -2 [ 1070.307492][ T48] hsr_slave_0: left promiscuous mode [ 1070.345066][ T48] hsr_slave_1: left promiscuous mode [ 1070.453931][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.500697][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.583435][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.619401][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.638405][ T48] bridge_slave_1: left allmulticast mode [ 1070.651808][ T48] bridge_slave_1: left promiscuous mode [ 1070.667363][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.729229][T13734] loop3: detected capacity change from 0 to 8192 [ 1070.754029][ T48] bridge_slave_0: left allmulticast mode [ 1070.802001][ T48] bridge_slave_0: left promiscuous mode [ 1070.814969][T13734] loop3: p1[EZD] p4 [ 1070.828917][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.832911][T13734] loop3: p1 size 32768 extends beyond EOD, truncated [ 1070.883543][T13734] loop3: p4 size 262144 extends beyond EOD, truncated [ 1070.973501][ T48] veth1_macvtap: left promiscuous mode [ 1070.982904][ T48] veth0_macvtap: left promiscuous mode [ 1070.996368][ T48] veth1_vlan: left promiscuous mode [ 1071.012727][ T48] veth0_vlan: left promiscuous mode [ 1071.235023][T12161] udevd[12161]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1071.250770][T12079] udevd[12079]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1072.838046][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1072.924785][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1073.009962][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.088460][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.697681][ T48] bond0 (unregistering): Released all slaves [ 1073.742876][ T48] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 1074.222521][T11538] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1074.232298][T11538] CPU: 0 PID: 11538 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1074.240081][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1074.250209][T11538] Workqueue: hci0 hci_rx_work [ 1074.254974][T11538] Call Trace: [ 1074.258299][T11538] [ 1074.261275][T11538] dump_stack_lvl+0x18c/0x250 [ 1074.266037][T11538] ? show_regs_print_info+0x20/0x20 [ 1074.271312][T11538] ? load_image+0x420/0x420 [ 1074.275903][T11538] sysfs_create_dir_ns+0x26e/0x2a0 [ 1074.281107][T11538] ? sysfs_warn_dup+0xa0/0xa0 [ 1074.285866][T11538] ? do_raw_spin_unlock+0x121/0x230 [ 1074.291230][T11538] kobject_add_internal+0x61c/0xcc0 [ 1074.296933][T11538] kobject_add+0x164/0x240 [ 1074.301423][T11538] ? kobject_init+0x1e0/0x1e0 [ 1074.306692][T11538] ? _raw_spin_unlock+0x3a/0x40 [ 1074.311707][T11538] ? get_device_parent+0x366/0x390 [ 1074.316910][T11538] device_add+0x408/0xc20 [ 1074.321311][T11538] hci_conn_add_sysfs+0xd5/0x1e0 [ 1074.326330][T11538] le_conn_complete_evt+0xf5d/0x1540 [ 1074.331692][T11538] ? trace_irq_disable+0x37/0xe0 [ 1074.336838][T11538] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1074.343151][T11538] ? lockdep_hardirqs_on+0x98/0x150 [ 1074.348417][T11538] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1074.354121][T11538] ? skb_pull_data+0xfb/0x200 [ 1074.358883][T11538] hci_le_conn_complete_evt+0x187/0x440 [ 1074.364507][T11538] ? hci_remote_host_features_evt+0x150/0x150 [ 1074.370644][T11538] hci_event_packet+0x7ba/0x1270 [ 1074.375660][T11538] ? bis_list+0x290/0x290 [ 1074.380061][T11538] ? kcov_remote_start+0x2b/0x7e0 [ 1074.385185][T11538] ? hci_send_to_monitor+0xd7/0x4f0 [ 1074.390452][T11538] hci_rx_work+0x43a/0xd60 [ 1074.394945][T11538] ? process_scheduled_works+0x96f/0x15d0 [ 1074.400731][T11538] process_scheduled_works+0xa5d/0x15d0 [ 1074.406375][T11538] ? worker_attach_to_pool+0x380/0x380 [ 1074.411908][T11538] ? assign_work+0x3d2/0x5d0 [ 1074.416614][T11538] worker_thread+0xa55/0xfc0 [ 1074.421269][T11538] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1074.427256][T11538] ? _raw_spin_unlock+0x40/0x40 [ 1074.432184][T11538] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1074.438175][T11538] kthread+0x2fa/0x390 [ 1074.442313][T11538] ? pr_cont_work+0x560/0x560 [ 1074.447060][T11538] ? kthread_blkcg+0xd0/0xd0 [ 1074.451721][T11538] ret_from_fork+0x48/0x80 [ 1074.456207][T11538] ? kthread_blkcg+0xd0/0xd0 [ 1074.460875][T11538] ret_from_fork_asm+0x11/0x20 [ 1074.465729][T11538] [ 1074.510940][T11538] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1074.525604][T11538] Bluetooth: hci0: failed to register connection device [ 1075.792908][T13558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1076.104017][T13777] trusted_key: encrypted_key: insufficient parameters specified [ 1076.121828][T13777] trusted_key: encrypted_key: insufficient parameters specified [ 1076.693654][T11538] Bluetooth: hci0: command tx timeout [ 1077.465329][T13558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1077.639437][T13558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1077.881398][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1077.890972][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1077.924918][T13785] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1077.934102][T13785] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1077.943066][T13785] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1077.951918][T13785] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.021906][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1078.031186][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1078.074710][T13558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1078.583882][ T48] IPVS: stop unused estimator thread 0... [ 1079.009845][T13558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.108051][T13558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.163770][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.171011][ T7754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.231028][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.238326][ T7754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.404674][T13806] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1080.056388][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.382181][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.626675][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.032941][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1081.043384][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1081.075418][T13849] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.084521][T13849] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.093457][T13849] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.102397][T13849] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.118357][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1081.127602][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1081.691403][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.264154][T13558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.306246][T13869] syzkaller0: entered promiscuous mode [ 1082.312497][T13869] syzkaller0: entered allmulticast mode [ 1083.321259][T13558] veth0_vlan: entered promiscuous mode [ 1083.353561][T13558] veth1_vlan: entered promiscuous mode [ 1084.711680][T13558] veth0_macvtap: entered promiscuous mode [ 1084.746840][T13922] syzkaller0: entered promiscuous mode [ 1084.762855][T13922] syzkaller0: entered allmulticast mode [ 1085.095580][T13558] veth1_macvtap: entered promiscuous mode [ 1085.464877][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.497436][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.527172][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.555019][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.574699][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.585634][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.627167][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.657166][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.681424][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.716943][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.774722][T13558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.533939][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.577417][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.605389][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.619385][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.640773][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.655420][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.676944][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.697091][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.714439][T13558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.725096][T13558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.780438][T13558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.806184][T13558] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.831844][T13558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.840977][T13558] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.861472][T13558] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.298686][ T5811] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1087.486887][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.515384][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.537333][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 1087.566210][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.594494][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.634669][ T5811] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1087.668444][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.692723][T12366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.719642][ T5811] usb 4-1: config 0 descriptor?? [ 1087.727988][T12366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.147397][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 1088.668298][T13984] syzkaller0: entered promiscuous mode [ 1088.729156][T13984] syzkaller0: entered allmulticast mode [ 1089.311173][ T5811] usbhid 4-1:0.0: can't add hid device: -71 [ 1089.340838][ T5811] usbhid: probe of 4-1:0.0 failed with error -71 [ 1089.377448][ T5811] usb 4-1: USB disconnect, device number 20 [ 1090.487473][T14006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1090.668376][T14014] syz.1.2463 (14014): drop_caches: 2 [ 1092.820930][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 1092.927700][ T5770] Bluetooth: hci3: command tx timeout [ 1094.247238][ T5811] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1094.514731][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 1094.559885][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.573450][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.584190][ T5811] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1094.595453][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.649409][ T5811] usb 6-1: config 0 descriptor?? [ 1094.680650][ T13] hsr_slave_0: left promiscuous mode [ 1094.700826][ T13] hsr_slave_1: left promiscuous mode [ 1094.721122][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.736021][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.744787][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.753865][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.764658][ T13] bridge_slave_1: left allmulticast mode [ 1094.770730][ T13] bridge_slave_1: left promiscuous mode [ 1094.776675][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.788457][ T13] bridge_slave_0: left allmulticast mode [ 1094.794227][ T13] bridge_slave_0: left promiscuous mode [ 1094.814591][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.937798][ T13] hsr_slave_0: left promiscuous mode [ 1094.944164][ T13] hsr_slave_1: left promiscuous mode [ 1094.954255][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.962972][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.972948][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.987280][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.995625][ T13] bridge_slave_1: left allmulticast mode [ 1095.005393][ T13] bridge_slave_1: left promiscuous mode [ 1095.013831][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.029683][ T13] bridge_slave_0: left allmulticast mode [ 1095.035429][ T13] bridge_slave_0: left promiscuous mode [ 1095.041990][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.077657][ T13] hsr_slave_0: left promiscuous mode [ 1095.084189][ T13] hsr_slave_1: left promiscuous mode [ 1095.243521][ T13] veth1_macvtap: left promiscuous mode [ 1095.256402][ T13] veth0_macvtap: left promiscuous mode [ 1095.272727][ T13] veth1_vlan: left promiscuous mode [ 1095.286328][ T13] veth0_vlan: left promiscuous mode [ 1095.311869][ T13] veth1_macvtap: left promiscuous mode [ 1095.324417][ T13] veth0_macvtap: left promiscuous mode [ 1095.336792][ T13] veth1_vlan: left promiscuous mode [ 1095.344755][ T13] veth0_vlan: left promiscuous mode [ 1095.382877][ T5811] usbhid 6-1:0.0: can't add hid device: -71 [ 1095.400383][ T13] veth1_macvtap: left promiscuous mode [ 1095.406268][ T5811] usbhid: probe of 6-1:0.0 failed with error -71 [ 1095.422659][ T13] veth0_macvtap: left promiscuous mode [ 1095.429958][ T13] veth1_vlan: left promiscuous mode [ 1095.435367][ T13] veth0_vlan: left promiscuous mode [ 1095.443182][ T5811] usb 6-1: USB disconnect, device number 4 [ 1095.483930][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 1095.952362][T14058] syz.1.2474 (14058): drop_caches: 2 [ 1096.168679][ T13] infiniband syz0: set down [ 1098.767191][ T5770] Bluetooth: hci4: command tx timeout [ 1100.496321][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1100.574800][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1100.654340][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.733893][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.296858][ T13] bond0 (unregistering): Released all slaves [ 1102.924449][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1102.995432][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1103.066070][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.138675][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.211609][ T7294] smc: removing ib device syz0 [ 1103.742816][ T13] bond0 (unregistering): Released all slaves [ 1105.823599][ T13] bond0 (unregistering): Released all slaves [ 1105.831306][T11538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1105.844448][T11538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1105.880857][T11538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1105.908075][T11538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1105.929014][T11538] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1105.937996][T11538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1106.000808][T14043] syzkaller0: entered promiscuous mode [ 1106.006386][T14043] syzkaller0: entered allmulticast mode [ 1106.043883][ T5811] infiniband syz0: ib_query_port failed (-19) [ 1106.697442][T13484] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1106.907164][T13484] usb 2-1: Using ep0 maxpacket: 32 [ 1106.920415][T13484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.953282][T13484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.998334][T13484] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1107.042228][T13484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.089036][T13484] usb 2-1: config 0 descriptor?? [ 1107.774519][T13484] usbhid 2-1:0.0: can't add hid device: -71 [ 1107.800852][T13484] usbhid: probe of 2-1:0.0 failed with error -71 [ 1107.999369][T13484] usb 2-1: USB disconnect, device number 14 [ 1108.039725][T11538] Bluetooth: hci2: command tx timeout [ 1108.126050][T14102] bridge4: entered promiscuous mode [ 1108.134162][T14102] bridge4: entered allmulticast mode [ 1108.167353][T14095] syzkaller0: entered promiscuous mode [ 1109.529329][T14077] chnl_net:caif_netlink_parms(): no params data found [ 1110.119674][T11538] Bluetooth: hci2: command tx timeout [ 1110.392202][T14077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.399898][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.407749][T14077] bridge_slave_0: entered allmulticast mode [ 1110.415783][T14077] bridge_slave_0: entered promiscuous mode [ 1110.429040][T14077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.436459][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.444604][T14077] bridge_slave_1: entered allmulticast mode [ 1110.452728][T14077] bridge_slave_1: entered promiscuous mode [ 1110.481386][ T13] IPVS: stop unused estimator thread 0... [ 1110.531151][ T13] IPVS: stop unused estimator thread 0... [ 1110.579575][T14077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.612043][T14077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.786398][T14077] team0: Port device team_slave_0 added [ 1110.824946][T14077] team0: Port device team_slave_1 added [ 1110.970064][T14077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.996292][T14077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.123953][T14077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.201794][T14077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.243073][T14077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.371124][T14077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.619361][T14077] hsr_slave_0: entered promiscuous mode [ 1111.644545][T14077] hsr_slave_1: entered promiscuous mode [ 1111.657408][T13484] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1111.918095][T13484] usb 1-1: Using ep0 maxpacket: 32 [ 1111.938812][T13484] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1111.981728][T13484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.995563][T13484] usb 1-1: Product: syz [ 1112.022028][T13484] usb 1-1: Manufacturer: syz [ 1112.026730][T13484] usb 1-1: SerialNumber: syz [ 1112.049527][T13484] usb 1-1: config 0 descriptor?? [ 1112.071964][T13484] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1112.112009][T13484] dvb-usb: bulk message failed: -22 (4/0) [ 1112.128760][T13484] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1112.143087][T13484] dvb-usb: bulk message failed: -22 (5/0) [ 1112.149089][T13484] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1112.173060][T13484] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1112.193837][T13484] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1112.207149][T11538] Bluetooth: hci2: command tx timeout [ 1112.235261][T13484] usb 1-1: media controller created [ 1112.266377][T13484] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1112.286618][T14141] dvb-usb: bulk message failed: -22 (7/0) [ 1112.307228][T14141] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1112.329984][T13484] usb 1-1: selecting invalid altsetting 3 [ 1112.345602][T14141] ttusb2: i2c transfer failed. [ 1112.350685][T13484] ttusb2: set interface to alts=3 failed [ 1112.418301][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.445798][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.668101][T13484] DVB: Unable to find symbol tda10086_attach() [ 1112.715134][ T28] audit: type=1400 audit(1777522061.647:1447): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1112.856995][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.904497][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.931898][T14159] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 1112.948990][T14159] netlink: 'syz.0.2489': attribute type 4 has an invalid length. [ 1113.194682][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.245016][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.264683][T13484] dvb-usb: bulk message failed: -22 (4/0) [ 1113.296449][T13484] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1113.368907][T13484] dvb-usb: bulk message failed: -22 (5/0) [ 1113.387213][T13484] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1113.417752][T13484] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1113.648549][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.716022][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.011817][T14168] binder: 14167:14168 ioctl c0306201 0 returned -14 [ 1114.277490][T11538] Bluetooth: hci2: command tx timeout [ 1114.299873][T14077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1114.483298][T14077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1114.717213][T14077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1114.743033][T14077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1115.803168][ T8] usb 1-1: USB disconnect, device number 18 [ 1115.985881][T14186] bridge7: entered promiscuous mode [ 1116.001264][T14186] bridge7: entered allmulticast mode [ 1116.099943][ T8] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1116.713896][T14077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.818444][T14197] tipc: Started in network mode [ 1116.823458][T14197] tipc: Node identity ac14140f, cluster identity 4711 [ 1116.945294][T14197] tipc: New replicast peer: 255.255.255.255 [ 1116.954413][ T28] audit: type=1326 audit(1777522065.887:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.2498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa93799cdd9 code=0x0 [ 1116.997347][T14197] tipc: Enabled bearer , priority 10 [ 1117.090656][ T8] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1117.300124][ T8] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1117.311734][ T8] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1117.329865][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1117.340689][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1117.341564][T14077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.356709][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1117.366086][ T8] usb 2-1: Product: syz [ 1117.371040][ T8] usb 2-1: Manufacturer: syz [ 1117.375852][ T8] usb 2-1: SerialNumber: syz [ 1117.462033][ T8] usb 2-1: config 0 descriptor?? [ 1117.492875][T13713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.500179][T13713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.544093][ T8] usb 2-1: selecting invalid altsetting 0 [ 1117.685065][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.692477][T13713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.016125][T14195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.044626][T14195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.094194][ T5813] usb 2-1: USB disconnect, device number 15 [ 1118.255697][ T7213] tipc: Node number set to 2886997007 [ 1118.351708][ T48] hsr_slave_0: left promiscuous mode [ 1118.389975][ T48] hsr_slave_1: left promiscuous mode [ 1118.481360][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.494088][T14220] binder: 14218:14220 ioctl c0306201 0 returned -14 [ 1118.502954][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.518716][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.526266][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.542592][ T48] bridge_slave_1: left allmulticast mode [ 1118.551394][ T48] bridge_slave_1: left promiscuous mode [ 1118.565522][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.580527][ T48] bridge_slave_0: left allmulticast mode [ 1118.586374][ T48] bridge_slave_0: left promiscuous mode [ 1118.602144][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.646860][ T48] veth1_macvtap: left promiscuous mode [ 1118.654253][ T48] veth0_macvtap: left promiscuous mode [ 1118.660369][ T48] veth1_vlan: left promiscuous mode [ 1118.665936][ T48] veth0_vlan: left promiscuous mode [ 1120.808431][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1120.978412][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1121.121531][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.408386][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.731374][ T48] bond0 (unregistering): Released all slaves [ 1123.019999][T14240] bridge1: entered promiscuous mode [ 1123.087176][T14240] bridge1: entered allmulticast mode [ 1124.157783][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1124.164271][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.334239][T14253] binder: 14251:14253 ioctl c0306201 0 returned -14 [ 1124.715341][T14264] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2511'. [ 1124.952624][T14077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.226704][T14290] bridge2: entered promiscuous mode [ 1126.232348][T14290] bridge2: entered allmulticast mode [ 1126.440114][T14295] trusted_key: encrypted_key: insufficient parameters specified [ 1126.487714][T14295] trusted_key: encrypted_key: insufficient parameters specified [ 1126.939640][T14294] bridge8: entered promiscuous mode [ 1126.945145][T14294] bridge8: entered allmulticast mode [ 1127.391255][T14077] veth0_vlan: entered promiscuous mode [ 1127.569683][T14077] veth1_vlan: entered promiscuous mode [ 1127.709684][T14077] veth0_macvtap: entered promiscuous mode [ 1127.811177][T14077] veth1_macvtap: entered promiscuous mode [ 1127.918961][T14077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.948447][T14077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.961390][T14077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.973636][T14077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.004107][T14077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.025409][T14077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.049417][T14077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.094380][T14077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.116221][T14077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.140874][T14077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.169854][T14077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.205854][T14077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.243647][T14077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.270548][T14077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.368052][T14077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.417276][T14077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.436357][T14077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.466339][T14077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.732208][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.777386][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.863801][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.880908][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.178083][T14320] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2521'. [ 1129.218533][T14322] syzkaller0: entered promiscuous mode [ 1129.236431][T14322] syzkaller0: entered allmulticast mode [ 1130.841010][T14358] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2531'. [ 1130.897068][T14357] bridge5: entered promiscuous mode [ 1130.926964][T14357] bridge5: entered allmulticast mode [ 1132.219075][T14377] syzkaller0: entered promiscuous mode [ 1132.243080][T14377] syzkaller0: entered allmulticast mode [ 1133.479906][T14396] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2541'. [ 1135.527254][T14423] syzkaller0: entered promiscuous mode [ 1135.554482][T14423] syzkaller0: entered allmulticast mode [ 1138.445727][T14455] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1141.501351][T14435] bridge3: entered promiscuous mode [ 1141.506636][T14435] bridge3: entered allmulticast mode [ 1141.558012][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 1141.604582][T14464] bridge9: entered promiscuous mode [ 1141.618132][T14464] bridge9: entered allmulticast mode [ 1143.851799][T14498] syzkaller0: entered promiscuous mode [ 1143.878961][T14498] syzkaller0: entered allmulticast mode [ 1145.850128][T14509] bridge10: entered promiscuous mode [ 1145.907741][T14509] bridge10: entered allmulticast mode [ 1145.919157][T14512] bridge6: entered promiscuous mode [ 1145.924420][T14512] bridge6: entered allmulticast mode [ 1148.446480][T14555] syzkaller0: entered promiscuous mode [ 1148.462554][T14555] syzkaller0: entered allmulticast mode [ 1148.589914][T14558] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.611579][T14558] binder: 14556:14558 ioctl 4018620d 200000004a80 returned -16 [ 1149.279751][T14573] bridge11: entered promiscuous mode [ 1149.305216][T14573] bridge11: entered allmulticast mode [ 1149.475447][T14575] bridge7: entered promiscuous mode [ 1149.481545][T14575] bridge7: entered allmulticast mode [ 1151.932145][T14615] syzkaller0: entered promiscuous mode [ 1151.940521][T14615] syzkaller0: entered allmulticast mode [ 1152.076339][T14619] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2592'. [ 1152.270541][T14624] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2593'. [ 1152.291377][T14625] binder: 14623:14625 ioctl c0306201 0 returned -14 [ 1152.854392][T14642] fuse: Unknown parameter '00000000000000000000' [ 1152.888917][T14643] bridge8: entered promiscuous mode [ 1152.894477][T14643] bridge8: entered allmulticast mode [ 1153.787579][T14654] bridge1: entered promiscuous mode [ 1153.793027][T14654] bridge1: entered allmulticast mode [ 1154.521866][T14665] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1154.542315][T14664] syzkaller0: entered promiscuous mode [ 1154.572492][T14664] syzkaller0: entered allmulticast mode [ 1154.788835][T14671] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1154.815078][T14673] binder: 14672:14673 ioctl c0306201 0 returned -14 [ 1156.095187][T14698] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1156.748268][T14707] bridge4: entered promiscuous mode [ 1156.777164][T14705] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2613'. [ 1156.788679][T14707] bridge4: entered allmulticast mode [ 1157.494223][T14716] syzkaller0: entered promiscuous mode [ 1157.503932][T14716] syzkaller0: entered allmulticast mode [ 1158.293086][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2620'. [ 1158.315333][T14737] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2620'. [ 1159.801773][T14749] bridge2: entered promiscuous mode [ 1159.813255][T14749] bridge2: entered allmulticast mode [ 1160.471198][T14769] syzkaller0: entered promiscuous mode [ 1160.487379][T14769] syzkaller0: entered allmulticast mode [ 1161.707863][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1161.799986][T14788] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1162.253311][T14797] bridge12: entered promiscuous mode [ 1162.260184][T14797] bridge12: entered allmulticast mode [ 1163.350347][T14812] syzkaller0: entered promiscuous mode [ 1163.364451][T14812] syzkaller0: entered allmulticast mode [ 1164.348198][T14827] bridge9: entered promiscuous mode [ 1164.353747][T14827] bridge9: entered allmulticast mode [ 1166.217201][T14861] syzkaller0: entered promiscuous mode [ 1166.241590][T14861] syzkaller0: entered allmulticast mode [ 1166.481157][T14865] syzkaller0: entered promiscuous mode [ 1166.491896][T14865] syzkaller0: entered allmulticast mode [ 1167.096311][T14880] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1167.215667][T14875] bridge10: entered promiscuous mode [ 1167.238268][T14875] bridge10: entered allmulticast mode [ 1168.054832][T14890] bridge3: entered promiscuous mode [ 1168.079782][T14890] bridge3: entered allmulticast mode [ 1168.474944][T14895] syzkaller0: entered promiscuous mode [ 1168.495053][T14895] syzkaller0: entered allmulticast mode [ 1169.261210][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1169.270361][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1169.286889][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1169.296105][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1170.379329][T14920] binder: BINDER_SET_CONTEXT_MGR already set [ 1170.391984][T14920] binder: 14919:14920 ioctl 4018620d 200000000040 returned -16 [ 1170.858722][T14936] syzkaller0: entered promiscuous mode [ 1170.885812][T14936] syzkaller0: entered allmulticast mode [ 1171.961489][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'. [ 1171.971938][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2664'. [ 1171.985740][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'. [ 1171.994854][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2664'. [ 1172.842365][T14959] bridge4: entered promiscuous mode [ 1172.871994][T14959] bridge4: entered allmulticast mode [ 1172.962543][ T5770] Bluetooth: hci4: command 0x0406 tx timeout [ 1174.282930][T14983] bridge5: entered promiscuous mode [ 1174.306260][T14983] bridge5: entered allmulticast mode [ 1174.549109][T14986] tipc: Started in network mode [ 1174.557287][T14986] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 1174.592487][T14986] tipc: Enabled bearer , priority 10 [ 1175.018660][T14993] syzkaller0: entered promiscuous mode [ 1175.024229][T14993] syzkaller0: entered allmulticast mode [ 1175.496286][T14998] syzkaller0: entered promiscuous mode [ 1175.537300][T14998] syzkaller0: entered allmulticast mode [ 1176.589094][T13484] tipc: Node number set to 4269801492 [ 1176.666464][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1176.701415][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1176.761954][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1176.812190][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1176.975110][T15025] syzkaller0: entered promiscuous mode [ 1177.883894][T15044] bridge11: entered promiscuous mode [ 1177.931217][T15044] bridge11: entered allmulticast mode [ 1178.689588][T15048] syzkaller0: entered promiscuous mode [ 1178.695143][T15048] syzkaller0: entered allmulticast mode [ 1179.404656][T15060] bridge13: entered promiscuous mode [ 1179.432254][T15060] bridge13: entered allmulticast mode [ 1181.317955][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'. [ 1181.327172][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2686'. [ 1181.357882][T15076] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.366789][T15076] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.375689][T15076] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.384558][T15076] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.414794][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'. [ 1181.424001][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2686'. [ 1183.607489][T15083] syzkaller0: entered promiscuous mode [ 1185.562337][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.573460][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.634052][T15104] netlink: 'syz.1.2692': attribute type 1 has an invalid length. [ 1187.644298][T15104] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1192.001363][T15156] bridge12: entered promiscuous mode [ 1192.016136][T15156] bridge12: entered allmulticast mode [ 1192.189538][T15162] syzkaller0: entered promiscuous mode [ 1192.195286][T15162] syzkaller0: entered allmulticast mode [ 1193.267894][T15179] syzkaller0: entered promiscuous mode [ 1196.899275][ T7213] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1197.197202][ T7213] usb 6-1: Using ep0 maxpacket: 32 [ 1197.220474][ T7213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.231838][ T7213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.241849][ T7213] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1197.253693][ T7213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.268313][ T7213] usb 6-1: config 0 descriptor?? [ 1197.760363][ T7213] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1197.994852][ T8] usb 6-1: USB disconnect, device number 5 [ 1204.462257][T15224] bridge13: entered promiscuous mode [ 1204.467942][T15224] bridge13: entered allmulticast mode [ 1204.477233][T15262] netlink: 'syz.5.2726': attribute type 10 has an invalid length. [ 1204.614292][T15262] team0: Port device dummy0 added [ 1204.648158][T15263] netlink: 'syz.5.2726': attribute type 10 has an invalid length. [ 1204.798637][T15263] team0: Port device dummy0 removed [ 1204.849127][T15263] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1205.030751][T15270] ip6erspan0: entered allmulticast mode [ 1207.425791][T15302] syzkaller0: entered promiscuous mode [ 1211.611641][T15316] bridge14: entered promiscuous mode [ 1211.628280][T15316] bridge14: entered allmulticast mode [ 1211.647549][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2728'. [ 1211.682976][T15267] geneve0: entered promiscuous mode [ 1212.126680][T15331] fuse: Unknown parameter '0x0000000000000005' [ 1214.970028][T15364] bridge15: entered promiscuous mode [ 1214.976567][T15364] bridge15: entered allmulticast mode [ 1214.997484][T15367] ªªªªªª: renamed from vlan0 (while UP) [ 1215.827768][T15377] bridge6: entered promiscuous mode [ 1215.858805][T15377] bridge6: entered allmulticast mode [ 1218.019090][T15397] syzkaller0: entered promiscuous mode [ 1218.024677][T15397] syzkaller0: entered allmulticast mode [ 1222.662599][T15443] bridge7: entered promiscuous mode [ 1222.670056][T15443] bridge7: entered allmulticast mode [ 1224.026875][T15454] bridge16: entered promiscuous mode [ 1224.032837][T15454] bridge16: entered allmulticast mode [ 1228.678248][T11538] Bluetooth: hci2: command 0x0406 tx timeout [ 1232.780708][T15517] bridge14: entered promiscuous mode [ 1232.796829][T15517] bridge14: entered allmulticast mode [ 1237.406926][T15567] syzkaller0: entered promiscuous mode [ 1237.428830][T15567] syzkaller0: entered allmulticast mode [ 1237.936138][T15570] bridge15: entered promiscuous mode [ 1237.942295][T15570] bridge15: entered allmulticast mode [ 1244.027075][T15615] bridge16: entered promiscuous mode [ 1244.033902][T15615] bridge16: entered allmulticast mode [ 1244.133404][T15616] syzkaller0: entered promiscuous mode [ 1244.278955][T15616] syzkaller0: entered allmulticast mode [ 1244.473482][T15624] syzkaller0: entered promiscuous mode [ 1244.499540][T15624] syzkaller0: entered allmulticast mode [ 1247.010372][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.016795][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.232786][T15675] syzkaller0: entered promiscuous mode [ 1249.255129][T15675] syzkaller0: entered allmulticast mode [ 1249.752558][T15685] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1250.346231][T15693] bridge17: entered promiscuous mode [ 1250.387166][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1250.418013][T15693] bridge17: entered allmulticast mode [ 1250.617133][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1250.668053][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.694696][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.720795][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1250.748612][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.796676][ T23] usb 1-1: config 0 descriptor?? [ 1250.851727][ T23] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 1250.884642][ T23] usbhid 1-1:0.0: can't add hid device: -22 [ 1250.899416][ T23] usbhid: probe of 1-1:0.0 failed with error -22 [ 1252.638142][T15726] syzkaller0: entered promiscuous mode [ 1252.654908][T15726] syzkaller0: entered allmulticast mode [ 1255.052731][ T5840] usb 1-1: USB disconnect, device number 19 [ 1255.185315][T15769] bridge5: entered promiscuous mode [ 1255.211591][T15769] bridge5: entered allmulticast mode [ 1255.737311][ T5840] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1255.946694][ T5840] usb 1-1: too many configurations: 51, using maximum allowed: 8 [ 1256.055990][ T5840] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1256.095417][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.136383][ T5840] usb 1-1: Product: syz [ 1256.141460][ T5840] usb 1-1: Manufacturer: syz [ 1256.146128][ T5840] usb 1-1: SerialNumber: syz [ 1256.407648][T15785] syzkaller0: entered promiscuous mode [ 1256.444857][T15785] syzkaller0: entered allmulticast mode [ 1256.452275][ T5840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1256.567514][ T5840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1256.640992][ T5840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1256.694782][ T5840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1256.745631][ T5840] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1256.820186][ T5840] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1256.845849][ T5840] usb 1-1: USB disconnect, device number 20 [ 1258.599699][T15819] bridge8: entered promiscuous mode [ 1258.605305][T15819] bridge8: entered allmulticast mode [ 1263.032343][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1263.041426][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1263.072298][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1263.081420][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1263.525635][T15871] bridge6: entered promiscuous mode [ 1263.556073][T15871] bridge6: entered allmulticast mode [ 1267.523671][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2876'. [ 1267.532863][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2876'. [ 1267.547881][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2876'. [ 1267.557292][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2876'. [ 1267.629709][ T5811] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1267.987265][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 1268.403527][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.435761][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.477093][ T5811] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1268.495205][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.536586][ T5811] usb 6-1: config 0 descriptor?? [ 1269.008888][ T5811] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1269.270666][ T5840] usb 6-1: USB disconnect, device number 6 [ 1270.032475][T15916] syz.1.2881 (15916): drop_caches: 2 [ 1271.029939][T15930] bridge18: entered promiscuous mode [ 1271.051719][T15930] bridge18: entered allmulticast mode [ 1272.345452][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1272.354967][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1272.408649][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1272.418191][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1273.466212][T15946] trusted_key: encrypted_key: insufficient parameters specified [ 1273.497004][T15946] trusted_key: encrypted_key: insufficient parameters specified [ 1274.447208][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1274.637983][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 1274.658731][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.687225][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.707325][ T23] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1274.733322][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.761059][ T23] usb 7-1: config 0 descriptor?? [ 1275.212747][ T23] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1275.465754][ T23] usb 7-1: USB disconnect, device number 2 [ 1276.075107][T15974] trusted_key: encrypted_key: insufficient parameters specified [ 1276.151026][T15972] trusted_key: encrypted_key: insufficient parameters specified [ 1276.873219][T15984] syz.1.2902 (15984): drop_caches: 2 [ 1276.954598][T15986] bridge9: entered promiscuous mode [ 1276.960325][T15986] bridge9: entered allmulticast mode [ 1278.847473][T16002] tipc: Started in network mode [ 1278.858250][T16002] tipc: Node identity 22f47a5bd0f8, cluster identity 4711 [ 1278.865977][T16002] tipc: Enabled bearer , priority 0 [ 1278.898002][T16002] syzkaller0: entered promiscuous mode [ 1278.903681][T16002] syzkaller0: entered allmulticast mode [ 1279.038545][T16005] tipc: Resetting bearer [ 1279.059734][T16001] tipc: Resetting bearer [ 1279.199492][T16008] trusted_key: encrypted_key: insufficient parameters specified [ 1279.227410][T16008] trusted_key: encrypted_key: insufficient parameters specified [ 1279.634696][T16001] tipc: Disabling bearer [ 1280.435641][T16012] syzkaller0: entered promiscuous mode [ 1280.475979][T16012] syzkaller0: entered allmulticast mode [ 1287.526282][T16049] syz.5.2922 (16049): drop_caches: 2 [ 1290.841689][T16061] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2924'. [ 1291.030137][T16030] bridge17: entered promiscuous mode [ 1291.035711][T16030] bridge17: entered allmulticast mode [ 1291.618219][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2927'. [ 1296.987069][ T5840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1297.063302][T16083] syz.0.2931 (16083): drop_caches: 2 [ 1298.385320][T11538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.397076][T11538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.406446][T11538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.414508][T11538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.421872][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 1298.429700][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1298.440511][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1298.453033][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1298.469665][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1298.486692][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1298.495905][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.518239][T11538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1298.526561][T11538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.718038][ T5840] usb 6-1: GET_CAPABILITIES returned 0 [ 1298.723635][ T5840] usbtmc 6-1:16.0: can't read capabilities [ 1298.819035][T16091] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2933'. [ 1299.226792][T16095] bridge10: entered promiscuous mode [ 1299.253458][T16095] bridge10: entered allmulticast mode [ 1299.591284][T16098] syzkaller0: entered promiscuous mode [ 1299.687069][T16098] syzkaller0: entered allmulticast mode [ 1300.115654][ T5811] usb 6-1: USB disconnect, device number 7 [ 1300.602900][ T5770] Bluetooth: hci0: command tx timeout [ 1302.677146][ T5770] Bluetooth: hci0: command tx timeout [ 1303.949184][T16124] syz.6.2940 (16124): drop_caches: 2 [ 1304.761756][ T5770] Bluetooth: hci0: command tx timeout [ 1305.233945][T16132] netlink: 'syz.6.2942': attribute type 72 has an invalid length. [ 1306.843161][ T5770] Bluetooth: hci0: command tx timeout [ 1307.735546][T16084] chnl_net:caif_netlink_parms(): no params data found [ 1307.885778][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.240990][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.359978][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.445265][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.451883][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.526782][T16144] bridge19: entered promiscuous mode [ 1308.532487][T16144] bridge19: entered allmulticast mode [ 1308.611446][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.954878][T16084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.977447][T16084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.995510][T16084] bridge_slave_0: entered allmulticast mode [ 1309.005784][T16084] bridge_slave_0: entered promiscuous mode [ 1309.052101][T16084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.077300][T16084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.085691][T16084] bridge_slave_1: entered allmulticast mode [ 1309.116785][T16084] bridge_slave_1: entered promiscuous mode [ 1311.866275][T16084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.931019][T16084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.065105][T16084] team0: Port device team_slave_0 added [ 1312.106811][T16084] team0: Port device team_slave_1 added [ 1312.193317][ T59] tipc: Disabling bearer [ 1312.223072][ T59] tipc: Left network mode [ 1312.276440][T16084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.310078][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.427415][T16084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.481374][T16084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.580133][T16162] syz.6.2948 (16162): drop_caches: 2 [ 1313.754153][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.133047][T16084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.547669][T16166] netlink: 'syz.5.2950': attribute type 72 has an invalid length. [ 1315.105687][T16173] syzkaller0: entered promiscuous mode [ 1315.147383][T16173] syzkaller0: entered allmulticast mode [ 1315.265651][T16084] hsr_slave_0: entered promiscuous mode [ 1315.282805][T16084] hsr_slave_1: entered promiscuous mode [ 1315.295571][T16084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.312241][T16084] Cannot create hsr debugfs directory [ 1321.987338][T16189] warning: `syz.5.2955' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1322.099777][T16202] bridge18: entered promiscuous mode [ 1322.105148][T16202] bridge18: entered allmulticast mode [ 1326.695649][T16084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1326.725673][T16084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1326.941647][T16084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1327.247107][ T59] hsr_slave_0: left promiscuous mode [ 1327.275526][ T59] hsr_slave_1: left promiscuous mode [ 1327.286168][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.296357][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.316306][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.362054][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.419023][ T59] bridge_slave_1: left allmulticast mode [ 1327.425024][ T59] bridge_slave_1: left promiscuous mode [ 1327.431430][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.468295][ T59] bridge_slave_0: left allmulticast mode [ 1327.475200][ T59] bridge_slave_0: left promiscuous mode [ 1327.485015][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.681280][ T59] veth1_macvtap: left promiscuous mode [ 1327.697311][ T59] veth0_macvtap: left promiscuous mode [ 1327.703123][ T59] veth1_vlan: left promiscuous mode [ 1327.741842][ T59] veth0_vlan: left promiscuous mode [ 1328.059608][T16265] binder: 16264:16265 ioctl 4018620d 0 returned -22 [ 1329.298917][ T5809] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1329.444201][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1329.504959][ T5809] usb 6-1: Using ep0 maxpacket: 8 [ 1329.524328][ T5809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1329.537455][ T5809] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1329.538326][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1329.553211][ T5809] usb 6-1: string descriptor 0 read error: -22 [ 1329.567204][ T5809] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1329.582501][ T5809] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1329.624907][ T5809] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1329.647816][ T5809] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1329.679901][ T5809] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1329.707385][ T5809] usb 6-1: media controller created [ 1329.715087][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.776297][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1329.830739][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.533807][ T59] bond0 (unregistering): Released all slaves [ 1330.664642][ T5809] zl10353_read_register: readreg error (reg=127, ret==0) [ 1330.694187][T16084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1330.794725][ T5809] usb 6-1: USB disconnect, device number 8 [ 1330.831021][T16256] syzkaller0: entered promiscuous mode [ 1330.836615][T16256] syzkaller0: entered allmulticast mode [ 1330.861497][T16257] bridge11: entered promiscuous mode [ 1330.871179][T16257] bridge11: entered allmulticast mode [ 1338.706708][T16084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.822299][T16084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.877106][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1338.933337][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1338.949344][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1338.966104][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1339.049341][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.056587][ T7754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.131283][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.138582][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.991791][T16084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.638698][T16345] syzkaller0: entered promiscuous mode [ 1345.644279][T16345] syzkaller0: entered allmulticast mode [ 1345.995241][T16084] veth0_vlan: entered promiscuous mode [ 1346.056123][T16084] veth1_vlan: entered promiscuous mode [ 1346.152519][T16356] overlayfs: failed to resolve './file1': -2 [ 1347.373127][T16084] veth0_macvtap: entered promiscuous mode [ 1347.666436][T16084] veth1_macvtap: entered promiscuous mode [ 1348.300551][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.311532][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.321672][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.334799][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.347218][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.358080][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.370137][T16084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.382023][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.393177][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.403351][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.414046][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.434604][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.456979][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.493106][T16084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.583429][T16084] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.610464][T16084] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.647007][T16084] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.667778][T16084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.074861][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.106694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.183769][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.221373][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.352752][T16397] trusted_key: encrypted_key: insufficient parameters specified [ 1352.387075][T16397] trusted_key: encrypted_key: insufficient parameters specified [ 1353.103600][T16405] syzkaller0: entered promiscuous mode [ 1353.147353][T16405] syzkaller0: entered allmulticast mode [ 1353.558405][T16415] syzkaller0: entered promiscuous mode [ 1353.565965][T16415] syzkaller0: entered allmulticast mode [ 1354.013884][T16426] overlayfs: failed to resolve './file1': -2 [ 1359.954544][T16467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1360.056245][T16472] syzkaller0: entered promiscuous mode [ 1360.062803][T16472] syzkaller0: entered allmulticast mode [ 1360.460188][T16478] overlayfs: failed to resolve './file1': -2 [ 1363.119246][T16490] bridge12: entered promiscuous mode [ 1363.124915][T16490] bridge12: entered allmulticast mode [ 1366.974485][T16517] syzkaller0: entered promiscuous mode [ 1366.993488][T16517] syzkaller0: entered allmulticast mode [ 1369.885815][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.526307][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.573933][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3028'. [ 1373.361997][T16560] syzkaller0: entered promiscuous mode [ 1373.385265][T16560] syzkaller0: entered allmulticast mode [ 1379.407410][T16588] trusted_key: encrypted_key: insufficient parameters specified [ 1379.447969][T16588] trusted_key: encrypted_key: insufficient parameters specified [ 1382.203959][T16599] loop9: detected capacity change from 0 to 524287936 [ 1385.037781][T16599] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1385.928245][T16640] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 1387.448544][T16652] trusted_key: encrypted_key: insufficient parameters specified [ 1387.457097][T16652] trusted_key: encrypted_key: insufficient parameters specified [ 1390.718670][ T28] audit: type=1326 audit(1777522339.647:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1390.818311][ T28] audit: type=1326 audit(1777522339.647:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1390.895739][ T28] audit: type=1326 audit(1777522339.717:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1390.995473][ T28] audit: type=1326 audit(1777522339.717:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1391.024007][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1391.136294][ T28] audit: type=1326 audit(1777522339.717:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f578515d60e code=0x7ffc0000 [ 1391.191822][ T28] audit: type=1326 audit(1777522339.717:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1391.235879][ T28] audit: type=1326 audit(1777522339.737:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1391.271013][ T28] audit: type=1326 audit(1777522339.737:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1391.313566][ T28] audit: type=1326 audit(1777522339.747:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1391.342097][ T28] audit: type=1326 audit(1777522339.807:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.5.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f578519cdd9 code=0x7ffc0000 [ 1392.144169][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1392.153372][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1392.193130][T16696] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1392.202317][T16696] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1392.211326][T16696] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1392.220173][T16696] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1392.260542][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1392.277303][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1397.007543][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3071'. [ 1397.016784][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3071'. [ 1397.034636][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3071'. [ 1397.044004][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3071'. [ 1398.784996][T16767] binder: 16766:16767 ioctl c0306201 0 returned -14 [ 1401.652142][T16773] bridge19: entered promiscuous mode [ 1401.674555][T16773] bridge19: entered allmulticast mode [ 1402.151993][T16787] syz.7.3080 (16787): drop_caches: 2 [ 1404.263761][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1404.272869][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1404.345411][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1404.354664][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1406.077258][T13484] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1406.327129][T13484] usb 1-1: Using ep0 maxpacket: 8 [ 1409.242897][T16848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3091'. [ 1409.281258][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.290203][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.376791][T16829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.385811][T16829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.398118][T16829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.407682][T16829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.457072][T13484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1409.484418][T13484] usb 1-1: too many configurations: 244, using maximum allowed: 8 [ 1409.534645][T13484] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1409.597405][T13484] usb 1-1: can't read configurations, error -71 [ 1409.621185][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1409.632199][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1409.643346][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1409.652599][T16855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1411.187261][T16876] bridge20: entered promiscuous mode [ 1411.219402][T16876] bridge20: entered allmulticast mode [ 1415.249253][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1415.249272][ T28] audit: type=1326 audit(1777522364.187:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.7.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750d9cdd9 code=0x7ffc0000 [ 1415.377063][ T28] audit: type=1326 audit(1777522364.187:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.7.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750d9cdd9 code=0x7ffc0000 [ 1415.567688][ T28] audit: type=1326 audit(1777522364.187:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.7.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3750d9cdd9 code=0x7ffc0000 [ 1415.651946][ T28] audit: type=1326 audit(1777522364.187:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.7.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750d9cdd9 code=0x7ffc0000 [ 1415.867022][ T28] audit: type=1326 audit(1777522364.187:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.7.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750d9cdd9 code=0x7ffc0000 [ 1416.047510][ T28] audit: type=1326 audit(1777522364.257:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.7.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3750d9cdd9 code=0x7ffc0000 [ 1416.542639][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3106'. [ 1416.552138][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3106'. [ 1416.566019][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3106'. [ 1416.575282][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3106'. [ 1418.284940][T16959] bridge21: entered promiscuous mode [ 1418.313784][T16959] bridge21: entered allmulticast mode [ 1425.181792][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3118'. [ 1425.191570][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3118'. [ 1425.205110][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3118'. [ 1425.214279][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3118'. [ 1426.483565][T17018] overlayfs: missing 'lowerdir' [ 1427.252008][T17015] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1427.575884][T17015] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1427.834481][T17015] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1429.133001][T17032] bridge13: entered promiscuous mode [ 1429.156766][T17032] bridge13: entered allmulticast mode [ 1431.334460][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1431.925515][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.765825][T17050] bridge22: entered promiscuous mode [ 1432.815524][T17050] bridge22: entered allmulticast mode [ 1436.942316][T17086] overlayfs: missing 'lowerdir' [ 1441.902472][T17102] bridge1: entered promiscuous mode [ 1441.929664][T17102] bridge1: entered allmulticast mode [ 1447.218813][T17139] bridge20: entered promiscuous mode [ 1447.224634][T17139] bridge20: entered allmulticast mode [ 1447.495820][T17143] binder: BINDER_SET_CONTEXT_MGR already set [ 1447.527152][T17143] binder: 17142:17143 ioctl 4018620d 200000004a80 returned -16 [ 1451.097991][T17165] bridge21: entered promiscuous mode [ 1451.103658][T17165] bridge21: entered allmulticast mode [ 1455.243134][T17196] bridge22: entered promiscuous mode [ 1455.258567][T17196] bridge22: entered allmulticast mode [ 1455.506504][T17203] binder: 17202:17203 ioctl c0306201 0 returned -14 [ 1459.678125][T17232] bridge14: entered promiscuous mode [ 1459.691480][T17232] bridge14: entered allmulticast mode [ 1460.572556][T17243] binder: 17242:17243 ioctl c0306201 0 returned -14 [ 1464.631898][T17256] bridge2: entered promiscuous mode [ 1464.658438][T17256] bridge2: entered allmulticast mode [ 1464.857355][T17260] trusted_key: encrypted_key: insufficient parameters specified [ 1468.628061][T17276] bridge15: entered promiscuous mode [ 1468.661196][T17276] bridge15: entered allmulticast mode [ 1469.002386][T17281] binder: 17280:17281 ioctl c0306201 0 returned -14 [ 1476.020795][T17322] bridge23: entered promiscuous mode [ 1476.044503][T17322] bridge23: entered allmulticast mode [ 1480.112102][T17348] syzkaller0: entered promiscuous mode [ 1480.120328][T17348] syzkaller0: entered allmulticast mode [ 1483.556821][T17368] bridge16: entered promiscuous mode [ 1483.566682][T17368] bridge16: entered allmulticast mode [ 1488.432476][T17407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1488.912258][T17421] bridge17: entered promiscuous mode [ 1488.942038][T17421] bridge17: entered allmulticast mode [ 1493.429844][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1493.438287][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.132259][T17453] syzkaller0: entered promiscuous mode [ 1494.157609][T17453] syzkaller0: entered allmulticast mode [ 1495.034872][T17465] bridge23: entered promiscuous mode [ 1495.065062][T17465] bridge23: entered allmulticast mode [ 1497.172589][T17491] bridge24: entered promiscuous mode [ 1497.189192][T17491] bridge24: entered allmulticast mode [ 1501.416667][T17515] bridge24: entered promiscuous mode [ 1501.450298][T17515] bridge24: entered allmulticast mode [ 1503.190407][T17537] loop7: detected capacity change from 0 to 1024 [ 1503.225608][T17537] ext4: Unknown parameter 'noacl' [ 1504.677212][T17551] binder: 17546:17551 ioctl c0306201 0 returned -14 [ 1506.814850][T17561] bridge3: entered promiscuous mode [ 1506.855667][T17561] bridge3: entered allmulticast mode [ 1507.736491][T17574] trusted_key: encrypted_key: insufficient parameters specified [ 1507.750291][T17574] trusted_key: encrypted_key: insufficient parameters specified [ 1509.678495][T17585] binder: 17583:17585 ioctl c0306201 0 returned -14 [ 1513.285759][T17608] trusted_key: encrypted_key: insufficient parameters specified [ 1513.377223][T17608] trusted_key: encrypted_key: insufficient parameters specified [ 1514.753628][T17624] bridge25: entered promiscuous mode [ 1514.785901][T17624] bridge25: entered allmulticast mode [ 1515.159252][T17632] binder: 17631:17632 ioctl c0306201 0 returned -14 [ 1519.421836][T17652] trusted_key: encrypted_key: insufficient parameters specified [ 1519.471862][T17652] trusted_key: encrypted_key: insufficient parameters specified [ 1523.189403][T17681] loop7: detected capacity change from 0 to 128 [ 1525.123134][T17679] bridge26: entered promiscuous mode [ 1525.129059][T17679] bridge26: entered allmulticast mode [ 1525.447121][T13484] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1525.663368][T13484] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 1525.685952][T13484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.723762][T13484] usb 6-1: Product: syz [ 1525.734094][T13484] usb 6-1: Manufacturer: syz [ 1525.910130][T13484] usb 6-1: SerialNumber: syz [ 1526.214434][T17703] bridge4: entered promiscuous mode [ 1526.237496][T17703] bridge4: entered allmulticast mode [ 1527.214366][T13484] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1527.352178][T13484] usb 6-1: MIDIStreaming interface descriptor not found [ 1527.550945][T13484] usb 6-1: USB disconnect, device number 9 [ 1527.641126][T16832] udevd[16832]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1528.136471][T17701] loop0: detected capacity change from 0 to 40427 [ 1528.234559][T17701] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 1528.258460][T17701] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 1528.267544][T17701] F2FS-fs (loop0): Image doesn't support compression [ 1528.284660][T17701] F2FS-fs (loop0): invalid crc value [ 1528.322553][T17701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1529.581753][T17701] F2FS-fs (loop0): Start checkpoint disabled! [ 1530.010437][T17701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1532.948489][T17744] loop5: detected capacity change from 0 to 256 [ 1534.095338][T17749] loop0: detected capacity change from 0 to 4096 [ 1534.103089][T17749] EXT4-fs: Ignoring removed bh option [ 1536.883438][T17749] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1536.884028][T17749] EXT4-fs: failed to create workqueue [ 1536.900324][T17749] EXT4-fs (loop0): mount failed [ 1539.965612][T17764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1540.384111][T17779] loop0: detected capacity change from 0 to 512 [ 1540.423282][T17779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1540.443963][T17779] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1540.458555][T17779] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1540.470211][T17779] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1540.523621][T17779] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1540.556288][T17779] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1540.576380][T17779] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3321: bg 0: block 34: padding at end of block bitmap is not set [ 1540.616084][T17779] Quota error (device loop0): write_blk: dquota write failed [ 1540.626414][T17779] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1540.637305][T17779] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.3321: Failed to acquire dquot type 1 [ 1540.677181][T17779] EXT4-fs (loop0): 1 truncate cleaned up [ 1540.715253][T17779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1540.851516][T17779] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.3321: deleted inode referenced: 12 [ 1541.159325][T13289] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.524339][T17790] loop0: detected capacity change from 0 to 512 [ 1542.869602][T17803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1543.777601][ T5840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1545.601534][ T5840] usb 8-1: Using ep0 maxpacket: 8 [ 1546.975221][ T5840] usb 8-1: device descriptor read/all, error -71 [ 1547.378716][T17843] loop5: detected capacity change from 0 to 512 [ 1547.660533][ T5840] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1547.874392][ T5840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1547.909829][ T5840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.959940][ T5840] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1548.009887][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.045411][ T5840] usb 8-1: config 0 descriptor?? [ 1548.481532][T17840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.505168][T17840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.523248][ T5840] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 1548.578690][ T5840] cypress 0003:04B4:DE64.000F: item fetching failed at offset 1/3 [ 1548.600156][ T5840] cypress 0003:04B4:DE64.000F: parse failed [ 1548.640509][ T5840] cypress: probe of 0003:04B4:DE64.000F failed with error -22 [ 1548.760014][ T5840] usb 8-1: USB disconnect, device number 3 [ 1551.900782][T17868] loop7: detected capacity change from 0 to 512 [ 1552.088230][T17868] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1552.213023][T17868] EXT4-fs (loop7): 1 truncate cleaned up [ 1552.239361][T17868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1552.278272][T17874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1552.412435][ T28] audit: type=1800 audit(1777522501.347:1470): pid=17879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3347" name="file1" dev="loop7" ino=13 res=0 errno=0 [ 1552.452612][T17868] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.3347: bg 0: block 465: padding at end of block bitmap is not set [ 1553.359719][T17868] EXT4-fs (loop7): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 1553.420824][T17868] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1553.420824][T17868] [ 1553.513933][T17868] EXT4-fs (loop7): Total free blocks count 0 [ 1553.566637][T17868] EXT4-fs (loop7): Free/Dirty block details [ 1553.597528][T17868] EXT4-fs (loop7): free_blocks=0 [ 1553.602722][T17868] EXT4-fs (loop7): dirty_blocks=10 [ 1553.644290][T17868] EXT4-fs (loop7): Block reservation details [ 1553.687434][T17868] EXT4-fs (loop7): i_reserved_data_blocks=10 [ 1553.794669][T16084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.101926][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1554.111092][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1554.123149][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1554.132507][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3354'. [ 1554.545250][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1554.774007][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.245297][T17901] loop5: detected capacity change from 0 to 4096 [ 1556.358911][T17902] bridge18: entered promiscuous mode [ 1556.375049][T17902] bridge18: entered allmulticast mode [ 1556.481459][T17901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.461825][T12761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.244488][T17918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1562.477656][T17930] syzkaller0: entered promiscuous mode [ 1562.483188][T17930] syzkaller0: entered allmulticast mode [ 1562.573430][T17932] loop5: detected capacity change from 0 to 1024 [ 1562.593673][T17932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1562.605161][T17932] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1563.664721][T17932] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.3362: lblock 2 mapped to illegal pblock 2 (length 1) [ 1563.815823][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1563.836083][T17932] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1563.845240][T17932] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.3362: lblock 0 mapped to illegal pblock 48 (length 1) [ 1563.861157][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1563.881477][T17932] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1563.908572][T17932] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.3362: Failed to acquire dquot type 0 [ 1563.917365][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1563.932110][T17932] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1563.948135][T17940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1563.955843][T17932] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3362: mark_inode_dirty error [ 1564.016451][T17932] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1564.031560][T17932] EXT4-fs (loop5): 1 orphan inode deleted [ 1564.038707][T17932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.051318][T12510] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1564.099090][T17943] syzkaller0: entered promiscuous mode [ 1564.104856][T12510] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1564.148179][T12510] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 1564.429861][T12761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.439238][T12761] EXT4-fs error (device loop5): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1564.482100][T12761] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1564.496659][T12761] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1564.514425][T17950] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1565.462561][T17957] loop6: detected capacity change from 0 to 256 [ 1565.490456][T17957] exfat: Deprecated parameter 'utf8' [ 1565.530102][T17957] exfat: Deprecated parameter 'namecase' [ 1565.535939][T17957] exfat: Deprecated parameter 'namecase' [ 1565.601315][T17957] exfat: Deprecated parameter 'utf8' [ 1567.052472][T17957] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1569.295801][T17979] bridge19: entered promiscuous mode [ 1569.333592][T17979] bridge19: entered allmulticast mode [ 1569.453106][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1569.462842][T17981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1570.541397][T17986] loop7: detected capacity change from 0 to 512 [ 1570.557117][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1570.597541][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1570.715675][T17986] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #11: block 2: comm syz.7.3375: lblock 9 mapped to illegal pblock 2 (length 1) [ 1570.758306][T17986] ------------[ cut here ]------------ [ 1570.764483][T17986] EA inode 11 i_nlink=2 [ 1570.767480][T17986] WARNING: CPU: 1 PID: 17986 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 1570.782893][T17986] Modules linked in: [ 1570.786991][T17986] CPU: 1 PID: 17986 Comm: syz.7.3375 Not tainted syzkaller #0 [ 1570.794571][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1570.804736][T17986] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 1570.811896][T17986] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 35 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 74 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 be f5 3f 08 [ 1570.832575][T17986] RSP: 0018:ffffc900041bf2e0 EFLAGS: 00010246 [ 1570.839322][T17986] RAX: 3e11f3f130d55600 RBX: 0000000000000002 RCX: 0000000000080000 [ 1570.847940][T17986] RDX: ffffc9000f5cc000 RSI: 0000000000044a89 RDI: 0000000000044a8a [ 1570.856051][T17986] RBP: ffffc900041bf3d0 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1570.864878][T17986] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 1570.873508][T17986] R13: ffff88802ed3dea8 R14: ffff88802ed3dcb0 R15: ffff88802ed3dd00 [ 1570.882450][T17986] FS: 00007f3751cea6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1570.891938][T17986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1570.899151][T17986] CR2: 00007fa937c17dac CR3: 000000002d8eb000 CR4: 00000000003506e0 [ 1570.907805][T17986] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1570.916105][T17986] DR3: 0000000000000030 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1570.924847][T17986] Call Trace: [ 1570.928894][T17986] [ 1570.931904][T17986] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1570.938289][T17986] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1570.944575][T17986] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 1570.951267][T17986] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 1570.957630][T17986] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1570.963912][T17986] ext4_xattr_delete_inode+0xb3e/0xd10 [ 1570.970114][T17986] ? up_write+0x1c3/0x410 [ 1570.974585][T17986] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 1570.981496][T17986] ext4_evict_inode+0xaaf/0xea0 [ 1570.986482][T17986] ? _raw_spin_unlock+0x28/0x40 [ 1570.992056][T17986] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1570.998717][T17986] ? do_raw_spin_unlock+0x121/0x230 [ 1571.004084][T17986] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1571.010715][T17986] evict+0x4ca/0x8d0 [ 1571.014807][T17986] ? proc_nr_inodes+0x230/0x230 [ 1571.020662][T17986] ? do_raw_spin_unlock+0x121/0x230 [ 1571.025971][T17986] ? _raw_spin_unlock+0x28/0x40 [ 1571.031615][T17986] ? iput+0x706/0x920 [ 1571.035694][T17986] ext4_orphan_cleanup+0xbec/0x1420 [ 1571.041581][T17986] ? ext4_orphan_del+0xbf0/0xbf0 [ 1571.046616][T17986] ? ext4_register_li_request+0x183/0x940 [ 1571.053183][T17986] ? errseq_check_and_advance+0x66/0x120 [ 1571.059781][T17986] ext4_fill_super+0x5eea/0x67b0 [ 1571.064848][T17986] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1571.071901][T17986] ? __might_sleep+0xe0/0xe0 [ 1571.076692][T17986] ? read_lock_is_recursive+0x20/0x20 [ 1571.082721][T17986] ? snprintf+0xe9/0x140 [ 1571.087688][T17986] ? down_read_killable+0x340/0x340 [ 1571.092989][T17986] ? setup_bdev_super+0x56b/0x660 [ 1571.098692][T17986] get_tree_bdev+0x3f3/0x520 [ 1571.103369][T17986] ? vfs_parse_fs_string+0x170/0x170 [ 1571.109034][T17986] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1571.115370][T17986] ? setup_bdev_super+0x660/0x660 [ 1571.120777][T17986] ? apparmor_capable+0x137/0x1a0 [ 1571.126048][T17986] ? bpf_lsm_capable+0x9/0x10 [ 1571.131658][T17986] ? security_capable+0x89/0xb0 [ 1571.136732][T17986] vfs_get_tree+0x8c/0x280 [ 1571.141831][T17986] do_new_mount+0x24b/0xa40 [ 1571.146409][T17986] __se_sys_mount+0x2e7/0x3d0 [ 1571.151627][T17986] ? __x64_sys_mount+0xc0/0xc0 [ 1571.156430][T17986] ? lockdep_hardirqs_on+0x98/0x150 [ 1571.162323][T17986] ? __x64_sys_mount+0x20/0xc0 [ 1571.167686][T17986] do_syscall_64+0x55/0xa0 [ 1571.172142][T17986] ? clear_bhb_loop+0x40/0x90 [ 1571.177376][T17986] ? clear_bhb_loop+0x40/0x90 [ 1571.182110][T17986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.188563][T17986] RIP: 0033:0x7f3750d9e04a [ 1571.193035][T17986] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.213180][T17986] RSP: 002b:00007f3751ce9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1571.222383][T17986] RAX: ffffffffffffffda RBX: 00007f3751ce9ee0 RCX: 00007f3750d9e04a [ 1571.230910][T17986] RDX: 0000200000000180 RSI: 0000200000000280 RDI: 00007f3751ce9ea0 [ 1571.239499][T17986] RBP: 0000200000000180 R08: 00007f3751ce9ee0 R09: 0000000000800718 [ 1571.248086][T17986] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000280 [ 1571.256089][T17986] R13: 00007f3751ce9ea0 R14: 00000000000004a4 R15: 0000200000001000 [ 1571.264726][T17986] [ 1571.268387][T17986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1571.275992][T17986] CPU: 1 PID: 17986 Comm: syz.7.3375 Not tainted syzkaller #0 [ 1571.283496][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1571.293574][T17986] Call Trace: [ 1571.296881][T17986] [ 1571.299851][T17986] dump_stack_lvl+0x18c/0x250 [ 1571.304604][T17986] ? show_regs_print_info+0x20/0x20 [ 1571.309839][T17986] ? load_image+0x420/0x420 [ 1571.314458][T17986] panic+0x2dc/0x730 [ 1571.318434][T17986] ? bpf_jit_dump+0xd0/0xd0 [ 1571.322982][T17986] __warn+0x2e0/0x470 [ 1571.326991][T17986] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1571.333033][T17986] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1571.339065][T17986] report_bug+0x2be/0x4f0 [ 1571.343504][T17986] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1571.349524][T17986] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1571.355553][T17986] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 1571.361585][T17986] handle_bug+0xcf/0x120 [ 1571.366075][T17986] exc_invalid_op+0x1a/0x50 [ 1571.370622][T17986] asm_exc_invalid_op+0x1a/0x20 [ 1571.375783][T17986] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 1571.382529][T17986] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 35 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 74 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 be f5 3f 08 [ 1571.402168][T17986] RSP: 0018:ffffc900041bf2e0 EFLAGS: 00010246 [ 1571.408258][T17986] RAX: 3e11f3f130d55600 RBX: 0000000000000002 RCX: 0000000000080000 [ 1571.416256][T17986] RDX: ffffc9000f5cc000 RSI: 0000000000044a89 RDI: 0000000000044a8a [ 1571.424259][T17986] RBP: ffffc900041bf3d0 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1571.432297][T17986] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 1571.440294][T17986] R13: ffff88802ed3dea8 R14: ffff88802ed3dcb0 R15: ffff88802ed3dd00 [ 1571.448313][T17986] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1571.454014][T17986] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1571.460139][T17986] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 1571.466203][T17986] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 1571.471899][T17986] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1571.478095][T17986] ext4_xattr_delete_inode+0xb3e/0xd10 [ 1571.483584][T17986] ? up_write+0x1c3/0x410 [ 1571.487936][T17986] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 1571.494034][T17986] ext4_evict_inode+0xaaf/0xea0 [ 1571.498904][T17986] ? _raw_spin_unlock+0x28/0x40 [ 1571.503777][T17986] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1571.509691][T17986] ? do_raw_spin_unlock+0x121/0x230 [ 1571.514913][T17986] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1571.520843][T17986] evict+0x4ca/0x8d0 [ 1571.524770][T17986] ? proc_nr_inodes+0x230/0x230 [ 1571.529648][T17986] ? do_raw_spin_unlock+0x121/0x230 [ 1571.534878][T17986] ? _raw_spin_unlock+0x28/0x40 [ 1571.539741][T17986] ? iput+0x706/0x920 [ 1571.543755][T17986] ext4_orphan_cleanup+0xbec/0x1420 [ 1571.549021][T17986] ? ext4_orphan_del+0xbf0/0xbf0 [ 1571.553995][T17986] ? ext4_register_li_request+0x183/0x940 [ 1571.559766][T17986] ? errseq_check_and_advance+0x66/0x120 [ 1571.565484][T17986] ext4_fill_super+0x5eea/0x67b0 [ 1571.570469][T17986] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1571.576732][T17986] ? __might_sleep+0xe0/0xe0 [ 1571.581460][T17986] ? read_lock_is_recursive+0x20/0x20 [ 1571.586961][T17986] ? snprintf+0xe9/0x140 [ 1571.591265][T17986] ? down_read_killable+0x340/0x340 [ 1571.596514][T17986] ? setup_bdev_super+0x56b/0x660 [ 1571.601594][T17986] get_tree_bdev+0x3f3/0x520 [ 1571.606211][T17986] ? vfs_parse_fs_string+0x170/0x170 [ 1571.611539][T17986] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1571.617822][T17986] ? setup_bdev_super+0x660/0x660 [ 1571.622863][T17986] ? apparmor_capable+0x137/0x1a0 [ 1571.627962][T17986] ? bpf_lsm_capable+0x9/0x10 [ 1571.632679][T17986] ? security_capable+0x89/0xb0 [ 1571.637565][T17986] vfs_get_tree+0x8c/0x280 [ 1571.642015][T17986] do_new_mount+0x24b/0xa40 [ 1571.646572][T17986] __se_sys_mount+0x2e7/0x3d0 [ 1571.651324][T17986] ? __x64_sys_mount+0xc0/0xc0 [ 1571.656131][T17986] ? lockdep_hardirqs_on+0x98/0x150 [ 1571.661370][T17986] ? __x64_sys_mount+0x20/0xc0 [ 1571.666253][T17986] do_syscall_64+0x55/0xa0 [ 1571.670689][T17986] ? clear_bhb_loop+0x40/0x90 [ 1571.675421][T17986] ? clear_bhb_loop+0x40/0x90 [ 1571.680121][T17986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.686051][T17986] RIP: 0033:0x7f3750d9e04a [ 1571.690500][T17986] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.710144][T17986] RSP: 002b:00007f3751ce9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1571.718578][T17986] RAX: ffffffffffffffda RBX: 00007f3751ce9ee0 RCX: 00007f3750d9e04a [ 1571.726593][T17986] RDX: 0000200000000180 RSI: 0000200000000280 RDI: 00007f3751ce9ea0 [ 1571.734611][T17986] RBP: 0000200000000180 R08: 00007f3751ce9ee0 R09: 0000000000800718 [ 1571.742618][T17986] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000280 [ 1571.750625][T17986] R13: 00007f3751ce9ea0 R14: 00000000000004a4 R15: 0000200000001000 [ 1571.758650][T17986] [ 1571.762440][T17986] Kernel Offset: disabled [ 1571.766929][T17986] Rebooting in 86400 seconds..