last executing test programs: 2m18.689929306s ago: executing program 4 (id=21): unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 2m18.568254638s ago: executing program 4 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44003, 0x0, 0x0) unshare(0x28000600) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 2m17.66684938s ago: executing program 4 (id=32): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x10200000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2012, 0x30002}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m16.84714812s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 2m16.728028763s ago: executing program 4 (id=40): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) 2m16.254805564s ago: executing program 3 (id=46): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000100)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000007c0)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="080100000000000029", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 2m16.204571535s ago: executing program 3 (id=47): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[], 0x0) 2m16.129430517s ago: executing program 3 (id=48): r0 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 2m16.03250616s ago: executing program 3 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000012c0)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000001380)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000013c0)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m15.883895723s ago: executing program 3 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000084513083000000000000109022404010000a00009040000020300000009210000ff0122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x11, "1b8d71f01d13642ef2083b2b3dc4872357"}, 0x0}) 2m15.59877223s ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048851}, 0x4000080) 2m15.403834975s ago: executing program 0 (id=54): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, 0x0) 2m15.179051411s ago: executing program 0 (id=57): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x12}}, 0x2e) 2m15.011865484s ago: executing program 0 (id=58): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[], 0x0) 2m14.900944417s ago: executing program 0 (id=59): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x7, @remote, 0x1}, 0x1c) 2m13.967178819s ago: executing program 4 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048851}, 0x4000080) 2m13.914612331s ago: executing program 0 (id=65): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000800)={@empty}, &(0x7f0000000840)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@arena={0x21, 0x0, 0x0, 0x2f, 0x20000, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x54, r6, 0x222, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3046}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x54}}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r9, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0xc004) 2m13.205353448s ago: executing program 3 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/188, 0xbc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x168, 0x248, 0x168, 0x390, 0x248, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x84, 0x0, 0x0, 0x2}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0x71b681034600913a], 'macsec0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xd8, 0x120, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x5, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x9b80000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa28000, &(0x7f0000000480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xa2) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000340)={0x2b, &(0x7f0000000080)=[{0x11, '\x00', @data=0x6, 0xf}]}) 1m59.349099622s ago: executing program 32 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="110000000400000004000000ff0000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007e9ee79f48bf33d39c355cbbc65255f8e0e3f097abac291c8d17dc63df1d951989e295bba2394d07a0abce07ea50137a1c547dcfc122c47019464677c2c9b987dea3985a48ec74206f02dbc90ab090d8547fb48850b7952af3bbcb2bb3919cb7e06ff656841c8371839ba5a57b60b95e6c1b432e2227d37622ed2c89d9f95060f38fbc47038c42262cc7df787fcbfd8ea812bb3235103cac93705c6fb8f73703109b82d35613780bb1a591f9d0038a7540ffc963119f4669f267b28e927728050020aaf0d5c259000000"], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x3, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000007c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0], 0x48}}, 0x410) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000900)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r6, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="01000000f8040000ffffffff20000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a00)={r0, &(0x7f0000000a40), &(0x7f0000000a80)=@tcp6=r2, 0x2}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000b00)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES16=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x20, r11, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) epoll_pwait(0xffffffffffffffff, &(0x7f0000001180)=[{}], 0x1, 0xdeb, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r12, &(0x7f0000001240)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="5800cc2e", @ANYRES16=r13, @ANYBLOB="000129bd7000ffdbdf251800000008000300", @ANYRES32=r14, @ANYBLOB="0a001a0008021100000000000a001a0008021100000000000a001a0008021100000000000a000600ffffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001380)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000001440)={0x64, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1m59.287674734s ago: executing program 33 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000012c0)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000001380)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000013c0)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m58.346168036s ago: executing program 34 (id=65): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000800)={@empty}, &(0x7f0000000840)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@arena={0x21, 0x0, 0x0, 0x2f, 0x20000, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x54, r6, 0x222, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3046}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x54}}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r9, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0xc004) 1m58.311195487s ago: executing program 35 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048851}, 0x4000080) 1m57.220654933s ago: executing program 36 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/188, 0xbc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x168, 0x248, 0x168, 0x390, 0x248, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x84, 0x0, 0x0, 0x2}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0x71b681034600913a], 'macsec0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xd8, 0x120, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x5, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x9b80000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa28000, &(0x7f0000000480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xa2) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000340)={0x2b, &(0x7f0000000080)=[{0x11, '\x00', @data=0x6, 0xf}]}) 1m27.022054161s ago: executing program 6 (id=83): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x88, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$key(r0, 0x0, 0xc012) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m26.406339446s ago: executing program 6 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000200)=0xfffffffffffffe4b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$tcp_mem(r2, &(0x7f0000000180)={0xfffffffffffff001, 0x20, 0x10001, 0x20, 0xe}, 0x48) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x5]}, 0x8) socket(0x5, 0x2, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m25.162963197s ago: executing program 6 (id=94): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x100400c1, &(0x7f0000001600)={0x11, 0x8100, r1, 0x1, 0x87, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) 1m25.0124371s ago: executing program 6 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000002600)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000002640)='\x00', 0x9801) move_mount(r0, &(0x7f0000002680)='.\x00', 0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000002700)='./file0/../file0\x00', &(0x7f0000002740)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000002780)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000002840)='\x00', 0x89901) move_mount(r1, &(0x7f0000002880)='.\x00', 0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00', 0x0) 1m24.925988362s ago: executing program 6 (id=97): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="84110000100033062cbd7000000000000000000200000000000000ffac1e000100000000000000000000000000000000000000050000fffa000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000000000000000000030000000000000006000000000000000900000000000000010001000000000000000000000000000000000000000000fcffffffffffffff040000000000000000000000000000005f000000000000000a0000000000000001000000000000c00100000000010000000000000a000000230000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c101400736d33"], 0x1184}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 1m24.506820292s ago: executing program 6 (id=98): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 1m24.241043349s ago: executing program 37 (id=98): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 42.067859985s ago: executing program 5 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x100}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 41.806733502s ago: executing program 5 (id=266): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) 41.754873053s ago: executing program 5 (id=268): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 41.544021658s ago: executing program 5 (id=269): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x20a23, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r2, r2, 0x0, 0x8000000f3aa6ea) 41.376715792s ago: executing program 5 (id=270): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000001840)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 38.882642513s ago: executing program 5 (id=288): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, 0x0, 0x0) capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfff]}, 0x8, 0x800) 38.737726506s ago: executing program 38 (id=288): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, 0x0, 0x0) capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfff]}, 0x8, 0x800) 12.791970631s ago: executing program 2 (id=289): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) 10.553550315s ago: executing program 2 (id=289): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) 8.640733351s ago: executing program 1 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="ba40000f06eef390012066b9800000c06635010000000f300f300f01310f32baa0b766b8230000000f23c00f21f86635020001000f23f8660f3880010f32", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.328097009s ago: executing program 8 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001580)={0x3, 0x1, 0x41000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001640)=[@textreal={0x8, &(0x7f0000001680)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.210253852s ago: executing program 1 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.117537804s ago: executing program 8 (id=383): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x8000) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 8.022964377s ago: executing program 2 (id=289): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) 7.986947817s ago: executing program 1 (id=384): syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.972577255s ago: executing program 1 (id=385): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.972348306s ago: executing program 8 (id=386): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000640)="390000001300034700000000c3e4ffff0100000001", 0x15}], 0x1) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 5.710618572s ago: executing program 2 (id=289): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) 3.684253111s ago: executing program 8 (id=388): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.493811095s ago: executing program 9 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x180) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000012c0)='7', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000001300)='./proc\x00', 0x0) 3.493100535s ago: executing program 7 (id=402): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffc}, 0x1c) 3.404103538s ago: executing program 7 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="ba40000f06eef390012066b9800000c06635010000000f300f300f01310f32baa0b766b8230000000f23c00f21f86635020001000f23f8660f3880010f32", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.077966946s ago: executing program 9 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001580)={0x3, 0x1, 0x41000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001640)=[@textreal={0x8, &(0x7f0000001680)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.027038487s ago: executing program 7 (id=395): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x100}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0xa, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x4]}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r3, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0xfffff1e1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x400000000000000, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x10}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.010417037s ago: executing program 2 (id=289): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) 2.968668108s ago: executing program 1 (id=396): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6f, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 814.25462ms ago: executing program 7 (id=397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'gretap0\x00', {0x4004}, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 814.1296ms ago: executing program 1 (id=398): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000640)="390000001300034700000000c3e4ffff0100000001", 0x15}], 0x1) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 813.83437ms ago: executing program 9 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0faa"}}], 0x13}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 799.094091ms ago: executing program 8 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x54) write(r1, &(0x7f00000001c0)='00:03', 0x5) r2 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='00:03', 0x5) 580.844256ms ago: executing program 7 (id=401): r0 = syz_open_dev$usbfs(&(0x7f0000003b40), 0xf, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000003c00)=0x1) 550.570627ms ago: executing program 9 (id=403): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xb, 0x3, 0x2, 0x4, 0x0, 0x70bd26, 0x0, [@sadb_ident={0x2, 0xb, 0x2948, 0x0, 0x5}]}, 0x20}}, 0x0) 497.659558ms ago: executing program 8 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) 416.62735ms ago: executing program 7 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x700, 0x11}, @void, @eth={@random="77e8e9a87b48", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x2b}}}}}}}, 0x26) 416.4769ms ago: executing program 9 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='10', 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 24.934099ms ago: executing program 9 (id=407): mount(&(0x7f0000000140)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001600)='./proc\x00', &(0x7f0000001640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000016c0)='3', 0x4e) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 0s ago: executing program 2 (id=289): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="11", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @desc2}, &(0x7f0000000f40)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000001240)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x36, 0x39]}, &(0x7f00000014c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000001640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f00000016c0)='asymmetric\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\x01\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\xd5LM\x94o\xf4T\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbDfzO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\xff\xff\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf3X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r2\xdd\r%\xfc\xda\x89U\xf5\xdf+A\xcal\xeb\xc83\x1c\x04\xcf\xee\xcb\xa0[\xabo\xfa\xa2\xb0\xc4^_\xb5O:\x85\x8c\x8c\xeep\xc6\xc1\xad\x03M\xbf\x8d\xdb\x88f\x14\xd2pbg\x13\xe0\xaa\x16\xc0z\xb1\xd0kA\xf2\xed\x9d\xc0R\xa79\xe5f4\xdc\xa2m:\xc3\x9e\x19\xbf6\xd0\x03\xbe4 b9\xe7\x8f\xdd\xd2\x03P\x86\xae\xd8\x93`Y\xd7\x9bK\x1e\xed\x7f\xa5%<\x03\xa8\xab\xcafN\x82\xc2Y\xfaz\xab\x13Od\xa1\xa7\xa5Hy\xc6^;\x14#\\\xb8\x88\x9dw$*\x19\xeb\x92\x84X\xb9\xcfx\xc4\xa4dW\x9ctco|cz\xa8\xb3\x0f\x9d\x8e\x04-\x18(\x10\x9f\x99\x8a{\x00\xf9\x90L\xe5\x18\xaa\xa0\x86.\xc7\x94\xa3g\xe8', r0) kernel console output (not intermixed with test programs): [ 120.339271][ T4293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.371174][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.394185][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.404614][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.415275][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.425375][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.436087][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.455149][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.471416][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.499936][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.515179][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.533362][ T4561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.572769][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.580632][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.611579][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.618000][ T4550] device veth0_vlan entered promiscuous mode [ 120.626200][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.636531][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.646434][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.656657][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.666724][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.676008][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.685489][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.705480][ T4293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.726206][ T4561] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.736384][ T4561] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.750598][ T4561] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.759916][ T4561] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.784555][ T4293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.806739][ T4550] device veth1_vlan entered promiscuous mode [ 120.816262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.833214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.842688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.864933][ T4558] device veth0_macvtap entered promiscuous mode [ 120.915806][ T4558] device veth1_macvtap entered promiscuous mode [ 120.923911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.933257][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.941490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.979814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.997220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.012666][ T4293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.070668][ T4552] device veth0_macvtap entered promiscuous mode [ 121.095681][ T4550] device veth0_macvtap entered promiscuous mode [ 121.120346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.133946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.154408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.166532][ T4552] device veth1_macvtap entered promiscuous mode [ 121.178982][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.185539][ T4550] device veth1_macvtap entered promiscuous mode [ 121.194097][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.211174][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.229171][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.239532][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.254647][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.266385][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.285143][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.295630][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.309335][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.319534][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.330305][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.352511][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.364692][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.384027][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.392731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.400946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.428151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.453730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.472764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.490626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.575356][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.596230][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.614272][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.631827][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.641674][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.667664][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.679214][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.689769][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.699908][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.710478][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.720350][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.731022][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.744228][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.754315][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.774854][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.796303][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.819756][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.842306][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.864211][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.886751][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.909122][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.932556][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.952080][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.971125][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.000348][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.021164][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.042561][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.063563][ T4552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.076320][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.100495][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.129889][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.140770][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.152088][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.163902][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.174184][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.186391][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.196637][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.207435][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.217782][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.230591][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.242952][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.260708][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.280657][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.293596][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.311956][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.337074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.354419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.363478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.372769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.383438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.392962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.406005][ T4558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.418327][ T4558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.427538][ T4558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.436622][ T4558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.451009][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.462889][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.474750][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.486119][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.496289][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.507671][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.517793][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.528871][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.539776][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.550890][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.561316][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.572925][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.583718][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.594977][ T3544] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 122.602689][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.615068][ T4552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.624878][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.636543][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.647594][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.659482][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.669651][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.680395][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.692481][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.704347][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.715060][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.726464][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.737003][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.747758][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.758568][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.769308][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.779449][ T4550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.790178][ T4550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.804744][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.831871][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.840588][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.847692][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.858628][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.869139][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.878830][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.892297][ T4552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.902321][ T4552] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.911119][ T4552] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.923169][ T4552] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.959380][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.980398][ T4550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.990731][ T4550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000807][ T4550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.010037][ T4550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.022053][ T3544] usb 8-1: unable to get BOS descriptor or descriptor too short [ 123.062303][ T3544] usb 8-1: not running at top speed; connect to a high speed hub [ 123.079696][ T4293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.144183][ T3544] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 123.207327][ T4293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.306921][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.322008][ T3544] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 123.340347][ T3544] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.348772][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.374619][ T3544] usb 8-1: Product: syz [ 123.386273][ T3544] usb 8-1: Manufacturer: syz [ 123.395565][ T3544] usb 8-1: SerialNumber: syz [ 123.423787][ T4293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.460894][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.526179][ T4293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.570797][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.583664][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.614208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.671062][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.690580][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.727325][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.741246][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.744705][ T3544] usb 8-1: selecting invalid altsetting 1 [ 123.775071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.784994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.831670][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.846317][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.884254][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.943129][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.966185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.035247][ T3544] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 124.693178][ T3544] usb 8-1: USB disconnect, device number 2 [ 124.774565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.836331][ T4293] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.949398][ T4793] FAULT_INJECTION: forcing a failure. [ 124.949398][ T4793] name fail_futex, interval 1, probability 0, space 0, times 1 [ 124.964151][ T4793] CPU: 1 PID: 4793 Comm: syz.9.75 Not tainted syzkaller #0 [ 124.971417][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.981513][ T4793] Call Trace: [ 124.984824][ T4793] [ 124.987783][ T4793] dump_stack_lvl+0x188/0x250 [ 124.992501][ T4793] ? show_regs_print_info+0x20/0x20 [ 124.997738][ T4793] ? load_image+0x410/0x410 [ 125.002280][ T4793] ? cgroup_rstat_updated+0xce/0x350 [ 125.007616][ T4793] should_fail+0x383/0x4b0 [ 125.012081][ T4793] get_futex_key+0x1a1/0x12d0 [ 125.016895][ T4793] ? release_firmware_map_entry+0x190/0x190 [ 125.022826][ T4793] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.028840][ T4793] ? futex_wait_restart+0x250/0x250 [ 125.034083][ T4793] ? lock_chain_count+0x20/0x20 [ 125.038971][ T4793] ? preempt_schedule+0xbc/0xd0 [ 125.043854][ T4793] futex_wait_setup+0x4b/0x520 [ 125.048656][ T4793] ? schedule_preempt_disabled+0x20/0x20 [ 125.054332][ T4793] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 125.060327][ T4793] futex_wait+0x22f/0x680 [ 125.064711][ T4793] ? __lock_acquire+0x13b3/0x7d40 [ 125.069773][ T4793] ? do_futex+0x12b0/0x12b0 [ 125.074331][ T4793] ? verify_lock_unused+0x140/0x140 [ 125.079577][ T4793] ? verify_lock_unused+0x140/0x140 [ 125.084827][ T4793] do_futex+0xdc2/0x12b0 [ 125.089108][ T4793] ? __raw_spin_lock_init+0x41/0x100 [ 125.094435][ T4793] ? percpu_counter_add_batch+0x135/0x150 [ 125.100233][ T4793] ? futex_exit_release+0x1c0/0x1c0 [ 125.105469][ T4793] ? __context_tracking_exit+0x4c/0x80 [ 125.110976][ T4793] __se_sys_futex+0x389/0x420 [ 125.115703][ T4793] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.121739][ T4793] ? __x64_sys_futex+0xf0/0xf0 [ 125.126592][ T4793] ? __x64_sys_futex+0x1d/0xf0 [ 125.131410][ T4793] do_syscall_64+0x4c/0xa0 [ 125.135868][ T4793] ? clear_bhb_loop+0x30/0x80 [ 125.140587][ T4793] ? clear_bhb_loop+0x30/0x80 [ 125.145310][ T4793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.151255][ T4793] RIP: 0033:0x7f2b8e7cd559 [ 125.155706][ T4793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.175446][ T4793] RSP: 002b:00007f2b8ca250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.184028][ T4793] RAX: ffffffffffffffda RBX: 00007f2b8ea54fa8 RCX: 00007f2b8e7cd559 [ 125.192043][ T4793] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2b8ea54fa8 [ 125.200059][ T4793] RBP: 00007f2b8ea54fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.202721][ T4795] tipc: Enabling of bearer rejected, failed to enable media [ 125.208066][ T4793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.208084][ T4793] R13: 00007f2b8ea55038 R14: 00007ffe76e994d0 R15: 00007ffe76e995b8 [ 125.208118][ T4793] [ 125.282980][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.340500][ T4293] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.481437][ T4293] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.631456][ T4293] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.773269][ T4815] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 125.799859][ T4815] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 125.839885][ T4821] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 125.872043][ T4821] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 125.901931][ T4268] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 125.972901][ T4830] FAULT_INJECTION: forcing a failure. [ 125.972901][ T4830] name failslab, interval 1, probability 0, space 0, times 1 [ 126.019702][ T4830] CPU: 1 PID: 4830 Comm: syz.9.79 Not tainted syzkaller #0 [ 126.026975][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.037089][ T4830] Call Trace: [ 126.040400][ T4830] [ 126.043361][ T4830] dump_stack_lvl+0x188/0x250 [ 126.048090][ T4830] ? show_regs_print_info+0x20/0x20 [ 126.053333][ T4830] ? load_image+0x410/0x410 [ 126.057908][ T4830] ? __might_sleep+0xf0/0xf0 [ 126.062533][ T4830] ? __lock_acquire+0x7d40/0x7d40 [ 126.067612][ T4830] should_fail+0x383/0x4b0 [ 126.072098][ T4830] should_failslab+0x5/0x20 [ 126.076642][ T4830] slab_pre_alloc_hook+0x51/0xc0 [ 126.081618][ T4830] ? vm_area_dup+0x1e/0xb0 [ 126.086070][ T4830] kmem_cache_alloc+0x3d/0x280 [ 126.090876][ T4830] vm_area_dup+0x1e/0xb0 [ 126.095163][ T4830] copy_vma+0x42f/0x800 [ 126.099379][ T4830] move_vma+0x3f4/0xbc0 [ 126.103577][ T4830] ? arch_get_unmapped_area+0x640/0x640 [ 126.109172][ T4830] ? vma_expandable+0x110/0x110 [ 126.114069][ T4830] ? cap_mmap_addr+0x153/0x2c0 [ 126.118880][ T4830] ? bpf_lsm_file_free_security+0x10/0x10 [ 126.124633][ T4830] ? security_mmap_addr+0x6e/0x90 [ 126.129679][ T4830] ? get_unmapped_area+0x2f0/0x360 [ 126.134851][ T4830] mremap_to+0x556/0x6b0 [ 126.139120][ T4830] __se_sys_mremap+0x412/0x950 [ 126.143909][ T4830] ? __x64_sys_mremap+0xc0/0xc0 [ 126.148773][ T4830] ? lock_chain_count+0x20/0x20 [ 126.153644][ T4830] ? lockdep_hardirqs_on+0x94/0x140 [ 126.158858][ T4830] ? __x64_sys_mremap+0x1c/0xc0 [ 126.163723][ T4830] do_syscall_64+0x4c/0xa0 [ 126.168163][ T4830] ? clear_bhb_loop+0x30/0x80 [ 126.172896][ T4830] ? clear_bhb_loop+0x30/0x80 [ 126.177627][ T4830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.183556][ T4830] RIP: 0033:0x7f2b8e7cd559 [ 126.188002][ T4830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.207650][ T4830] RSP: 002b:00007f2b8ca25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 126.216091][ T4830] RAX: ffffffffffffffda RBX: 00007f2b8ea54fa0 RCX: 00007f2b8e7cd559 [ 126.224199][ T4830] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000007ff000 [ 126.232214][ T4830] RBP: 00007f2b8e864ab8 R08: 0000200000580000 R09: 0000000000000000 [ 126.240209][ T4830] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 126.248194][ T4830] R13: 00007f2b8ea55038 R14: 00007f2b8ea54fa0 R15: 00007ffe76e995b8 [ 126.256200][ T4830] [ 126.279338][ T4834] binder: 4831:4834 ioctl c018620c 2000000001c0 returned -1 [ 126.461976][ T4268] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.485921][ T4843] ip_tables: iptables: counters copy to user failed while replacing table [ 126.495013][ T4268] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.533829][ T4268] usb 6-1: config 0 interface 0 has no altsetting 0 [ 126.561114][ T4268] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 126.585632][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.602056][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.644700][ T4268] usb 6-1: config 0 descriptor?? [ 126.654084][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.144533][ T4268] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x7 [ 127.166321][ T4268] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x7 [ 127.174041][ T4301] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 127.202315][ T4268] zeroplus 0003:0C12:0030.0003: item fetching failed at offset 23/24 [ 127.241797][ T4268] zeroplus 0003:0C12:0030.0003: parse failed [ 127.247885][ T4268] zeroplus: probe of 0003:0C12:0030.0003 failed with error -22 [ 127.404188][ T4268] usb 6-1: USB disconnect, device number 2 [ 127.451806][ T4301] usb 10-1: Using ep0 maxpacket: 32 [ 127.602261][ T4301] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.621970][ T4301] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.661820][ T4301] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.681433][ T4301] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.741236][ T4301] usb 10-1: config 0 descriptor?? [ 127.813433][ T4301] hub 10-1:0.0: USB hub found [ 128.042090][ T4301] hub 10-1:0.0: 1 port detected [ 128.351880][ T4268] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 128.381915][ T4838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 128.631905][ T4268] usb 6-1: Using ep0 maxpacket: 32 [ 128.692310][ T4299] hub 10-1:0.0: activate --> -90 [ 128.752128][ T4838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.752138][ T4268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.752193][ T4268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.769057][ T4838] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.792319][ T4268] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 128.816457][ T4838] usb 9-1: config 1 has no interface number 0 [ 128.817066][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.831959][ T4838] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 128.851798][ T4838] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 128.878601][ T4268] usb 6-1: config 0 descriptor?? [ 129.032704][ T4838] usb 9-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 129.046454][ T4838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.066115][ T4838] usb 9-1: Product: syz [ 129.070379][ T4838] usb 9-1: Manufacturer: syz [ 129.081886][ T4838] usb 9-1: SerialNumber: syz [ 129.106178][ T4301] usb 10-1: USB disconnect, device number 2 [ 129.365385][ T4268] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 129.372902][ T4299] usb 10-1-port1: config error [ 129.384900][ T4838] usb 9-1: 1:0 : does not exist [ 129.410405][ T4268] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 129.446493][ T4838] snd-usb-audio: probe of 9-1:1.1 failed with error -22 [ 129.451493][ T4268] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 129.478860][ T4838] usb 9-1: USB disconnect, device number 2 [ 129.496280][ T4268] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 129.547316][ T4268] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 129.591262][ T4268] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 129.659538][ T4928] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.733344][ T4926] udevd[4926]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.941364][ T4301] usb 6-1: USB disconnect, device number 3 [ 130.544824][ T4838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 130.641253][ T4928] chnl_net:caif_netlink_parms(): no params data found [ 130.942011][ T4838] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.967800][ T4838] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 130.980171][ T4838] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.993958][ T4838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 131.000627][ T4838] usb 8-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 131.009888][ T4838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.041520][ T4838] usb 8-1: config 0 descriptor?? [ 131.057087][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.057761][ T4968] FAULT_INJECTION: forcing a failure. [ 131.057761][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 131.077280][ T4957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.098200][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.126166][ T4928] device bridge_slave_0 entered promiscuous mode [ 131.144226][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.161795][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.198373][ T4928] device bridge_slave_1 entered promiscuous mode [ 131.221433][ T4968] CPU: 1 PID: 4968 Comm: syz.5.107 Not tainted syzkaller #0 [ 131.228775][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.238867][ T4968] Call Trace: [ 131.242183][ T4968] [ 131.245144][ T4968] dump_stack_lvl+0x188/0x250 [ 131.249869][ T4968] ? show_regs_print_info+0x20/0x20 [ 131.255108][ T4968] ? load_image+0x410/0x410 [ 131.259653][ T4968] ? __lock_acquire+0x7d40/0x7d40 [ 131.264810][ T4968] should_fail+0x383/0x4b0 [ 131.269271][ T4968] should_failslab+0x5/0x20 [ 131.273809][ T4968] slab_pre_alloc_hook+0x51/0xc0 [ 131.278787][ T4968] kmem_cache_alloc_trace+0x47/0x290 [ 131.284110][ T4968] ? legacy_init_fs_context+0x4d/0xb0 [ 131.289529][ T4968] ? __raw_spin_lock_init+0x41/0x100 [ 131.294855][ T4968] legacy_init_fs_context+0x4d/0xb0 [ 131.300095][ T4968] alloc_fs_context+0x628/0x7d0 [ 131.305001][ T4968] do_new_mount+0x10d/0xa40 [ 131.309565][ T4968] __se_sys_mount+0x2e3/0x3d0 [ 131.314283][ T4968] ? __x64_sys_mount+0xc0/0xc0 [ 131.319088][ T4968] ? lockdep_hardirqs_on+0x94/0x140 [ 131.324335][ T4968] ? __x64_sys_mount+0x1c/0xc0 [ 131.329142][ T4968] do_syscall_64+0x4c/0xa0 [ 131.333595][ T4968] ? clear_bhb_loop+0x30/0x80 [ 131.338307][ T4968] ? clear_bhb_loop+0x30/0x80 [ 131.343030][ T4968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.348958][ T4968] RIP: 0033:0x7f3b1f135559 [ 131.353406][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.373063][ T4968] RSP: 002b:00007f3b1d38d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.381536][ T4968] RAX: ffffffffffffffda RBX: 00007f3b1f3bcfa0 RCX: 00007f3b1f135559 [ 131.389540][ T4968] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 131.397539][ T4968] RBP: 00007f3b1f1ccab8 R08: 0000000000000000 R09: 0000000000000000 [ 131.405541][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.413537][ T4968] R13: 00007f3b1f3bd038 R14: 00007f3b1f3bcfa0 R15: 00007ffc3f62e8e8 [ 131.421557][ T4968] [ 131.475674][ T4928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.488206][ T4928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.591897][ T4301] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 131.601644][ T4928] team0: Port device team_slave_0 added [ 131.609822][ T4928] team0: Port device team_slave_1 added [ 131.622399][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 131.690196][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.693585][ T4838] dragonrise 0003:0079:0006.0005: unbalanced collection at end of report description [ 131.708390][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.711981][ T4264] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.738723][ T4928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.759347][ T4293] device hsr_slave_0 left promiscuous mode [ 131.772505][ T4293] device hsr_slave_1 left promiscuous mode [ 131.782232][ T4838] dragonrise 0003:0079:0006.0005: parse failed [ 131.788488][ T4838] dragonrise: probe of 0003:0079:0006.0005 failed with error -22 [ 131.796849][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.811863][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.833495][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.851447][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.882563][ T4293] device bridge_slave_1 left promiscuous mode [ 131.889778][ T4838] usb 8-1: USB disconnect, device number 3 [ 131.896333][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.937105][ T4293] device bridge_slave_0 left promiscuous mode [ 131.954651][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.004327][ T4301] usb 10-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 132.016428][ T4301] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.037286][ T4301] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 132.055568][ T4301] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 132.073559][ T4301] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.095265][ T4293] device hsr_slave_0 left promiscuous mode [ 132.104388][ T4293] device hsr_slave_1 left promiscuous mode [ 132.109134][ T4301] usb 10-1: config 0 descriptor?? [ 132.118715][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.126760][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.135977][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.143753][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.155723][ T4301] usb 10-1: Found UVC 9.00 device (046d:0825) [ 132.163496][ T4293] device bridge_slave_1 left promiscuous mode [ 132.169722][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.182031][ T4264] usb 9-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 132.195796][ T4264] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.197386][ T4293] device bridge_slave_0 left promiscuous mode [ 132.212200][ T4264] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 132.212295][ T4264] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 132.230721][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.240878][ T4264] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.260398][ T4264] usb 9-1: config 0 descriptor?? [ 132.266183][ T4293] device hsr_slave_0 left promiscuous mode [ 132.273311][ T4293] device hsr_slave_1 left promiscuous mode [ 132.279791][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.288476][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.296842][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.304758][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.312065][ T4264] usb 9-1: Found UVC 9.00 device (046d:0825) [ 132.320732][ T4293] device bridge_slave_1 left promiscuous mode [ 132.328934][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.338899][ T4293] device bridge_slave_0 left promiscuous mode [ 132.345597][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.364277][ T4293] device hsr_slave_0 left promiscuous mode [ 132.371497][ T4293] device hsr_slave_1 left promiscuous mode [ 132.378887][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.386972][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.392495][ T4267] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 132.403381][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.416762][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.425962][ T4293] device bridge_slave_1 left promiscuous mode [ 132.433835][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.451905][ T4293] device bridge_slave_0 left promiscuous mode [ 132.458163][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.499593][ T4293] device veth1_macvtap left promiscuous mode [ 132.505953][ T4999] loop7: detected capacity change from 0 to 2048 [ 132.519271][ T4293] device veth0_macvtap left promiscuous mode [ 132.529439][ T4293] device veth1_vlan left promiscuous mode [ 132.535941][ T4293] device veth0_vlan left promiscuous mode [ 132.553460][ T4293] device veth1_macvtap left promiscuous mode [ 132.573136][ T4293] device veth0_macvtap left promiscuous mode [ 132.590214][ T4293] device veth1_vlan left promiscuous mode [ 132.596487][ T4301] usb 10-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.612982][ T4293] device veth0_vlan left promiscuous mode [ 132.621283][ T4999] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 132.658129][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.810287][ T5004] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.114: inode has invalid extent depth: 8 [ 132.862286][ T4264] usb 9-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.882925][ T5004] EXT4-fs (loop7): Remounting filesystem read-only [ 132.893490][ T5004] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.114: inode has invalid extent depth: 8 [ 132.911794][ T5004] EXT4-fs (loop7): Remounting filesystem read-only [ 133.100155][ T5008] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.114: inode has invalid extent depth: 8 [ 133.113807][ T4264] uvcvideo 9-1:0.1: Failed to query (129) UVC probe control : -32 (exp. 48). [ 133.113875][ T4267] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.123765][ T5008] EXT4-fs (loop7): Remounting filesystem read-only [ 133.146297][ T5008] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.114: inode has invalid extent depth: 8 [ 133.162252][ T4264] uvcvideo 9-1:0.1: Failed to initialize the device (-5). [ 133.171473][ T5008] EXT4-fs (loop7): Remounting filesystem read-only [ 133.181048][ T5008] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.114: inode has invalid extent depth: 8 [ 133.212996][ T5002] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 133.308898][ T5008] EXT4-fs (loop7): Remounting filesystem read-only [ 133.361746][ T4301] usb 10-1: USB disconnect, device number 3 [ 133.382252][ T4267] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 133.470012][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.480998][ T4267] usb 6-1: Product: syz [ 133.516687][ T4264] usb 9-1: USB disconnect, device number 3 [ 133.527816][ T4267] usb 6-1: Manufacturer: syz [ 133.538117][ T4267] usb 6-1: SerialNumber: syz [ 133.625006][ T4293] device veth1_macvtap left promiscuous mode [ 133.647179][ T4293] device veth0_macvtap left promiscuous mode [ 133.668104][ T4267] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 133.677146][ T4293] device veth1_vlan left promiscuous mode [ 133.682837][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 133.689122][ T5002] EXT4-fs (loop7): Remounting filesystem read-only [ 133.691850][ T4267] cdc_wdm 6-1:1.0: Unknown control protocol [ 133.702331][ T4293] device veth0_vlan left promiscuous mode [ 133.733586][ T4293] device veth1_macvtap left promiscuous mode [ 133.739745][ T4293] device veth0_macvtap left promiscuous mode [ 133.756490][ T4293] device veth1_vlan left promiscuous mode [ 133.765850][ T4293] device veth0_vlan left promiscuous mode [ 133.845845][ T4838] usb 6-1: USB disconnect, device number 4 [ 134.909022][ T5028] fuse: Bad value for 'fd' [ 135.371733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.381723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.391717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.401711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.411717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.421725][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.431723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 135.441736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 135.451726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 135.461729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 135.953168][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 136.295645][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 136.314746][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 136.347384][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.360096][ T5032] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.368361][ T5032] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.392030][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.576116][ T4293] bond0 (unregistering): Released all slaves [ 136.757440][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 136.776707][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 136.792361][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.809486][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.898031][ T4293] bond0 (unregistering): Released all slaves [ 137.024039][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 137.052554][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 137.068676][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.086243][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.178803][ T4293] bond0 (unregistering): Released all slaves [ 137.307981][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 137.325261][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 137.340489][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.363549][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.445994][ T4293] bond0 (unregistering): Released all slaves [ 137.466211][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.473412][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.500866][ T4928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.725397][ T4928] device hsr_slave_0 entered promiscuous mode [ 137.773351][ T4928] device hsr_slave_1 entered promiscuous mode [ 138.406548][ T5061] fuse: Bad value for 'fd' [ 139.321148][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 139.568482][ T5069] loop5: detected capacity change from 0 to 2048 [ 139.732660][ T5069] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 139.885611][ T5077] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.132: inode has invalid extent depth: 8 [ 139.955204][ T5077] EXT4-fs (loop5): Remounting filesystem read-only [ 139.964305][ T5077] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.132: inode has invalid extent depth: 8 [ 139.981016][ T5077] EXT4-fs (loop5): Remounting filesystem read-only [ 140.076347][ T5079] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.132: inode has invalid extent depth: 8 [ 140.105823][ T5079] EXT4-fs (loop5): Remounting filesystem read-only [ 140.115842][ T5079] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.132: inode has invalid extent depth: 8 [ 140.131392][ T5079] EXT4-fs (loop5): Remounting filesystem read-only [ 140.140442][ T5079] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.132: inode has invalid extent depth: 8 [ 140.178562][ T5079] EXT4-fs (loop5): Remounting filesystem read-only [ 140.381036][ T7] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 140.695231][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 140.841987][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.877189][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.082166][ T7] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.091271][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.102673][ T4928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.132050][ T7] usb 8-1: Product: syz [ 141.136277][ T7] usb 8-1: Manufacturer: syz [ 141.153283][ T7] usb 8-1: SerialNumber: syz [ 141.191655][ T4928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.218824][ T4928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.231177][ T4928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.486248][ T7] usb 8-1: 0:2 : does not exist [ 141.508974][ T5101] device syzkaller0 entered promiscuous mode [ 141.515533][ T7] usb 8-1: USB disconnect, device number 4 [ 141.690615][ T4928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.718133][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.735359][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.757077][ T4928] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.767180][ T4926] udevd[4926]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.811608][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.825395][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.858409][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.865752][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.895425][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.902114][ T4264] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 141.915470][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.930908][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.961991][ T4265] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 141.970317][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.977548][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.018414][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.037099][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.543128][ T5121] fuse: Invalid rootmode [ 143.495656][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.506482][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.546132][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.552051][ T4265] usb 10-1: Using ep0 maxpacket: 16 [ 143.567621][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.581233][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.583054][ T4264] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.601068][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.627639][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.640167][ T4264] usb 9-1: config 0 has no interfaces? [ 143.650306][ T4264] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 143.664495][ T5128] loop7: detected capacity change from 0 to 2048 [ 143.680119][ T4264] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.693973][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.723066][ T4264] usb 9-1: config 0 descriptor?? [ 143.730602][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.790675][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.839856][ T5128] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 143.852470][ T4265] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 143.870783][ T4265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.879437][ T4265] usb 10-1: Product: syz [ 143.884080][ T4265] usb 10-1: Manufacturer: syz [ 143.889474][ T4265] usb 10-1: SerialNumber: syz [ 144.035453][ T5135] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.142: inode has invalid extent depth: 8 [ 144.105249][ T5135] EXT4-fs (loop7): Remounting filesystem read-only [ 144.113762][ T5135] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.142: inode has invalid extent depth: 8 [ 144.148888][ T5135] EXT4-fs (loop7): Remounting filesystem read-only [ 144.245270][ T5136] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.142: inode has invalid extent depth: 8 [ 144.272931][ T5136] EXT4-fs (loop7): Remounting filesystem read-only [ 144.282192][ T5136] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.142: inode has invalid extent depth: 8 [ 144.301485][ T5136] EXT4-fs (loop7): Remounting filesystem read-only [ 144.310514][ T5136] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.142: inode has invalid extent depth: 8 [ 144.334471][ T5136] EXT4-fs (loop7): Remounting filesystem read-only [ 144.855595][ T7] usb 9-1: USB disconnect, device number 4 [ 144.961886][ T4265] snd-usb-audio: probe of 10-1:1.0 failed with error -71 [ 144.989419][ T4265] usb 10-1: USB disconnect, device number 4 [ 145.362938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.371048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.430935][ T4928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.540454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.566031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.628485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.637773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.670488][ T4928] device veth0_vlan entered promiscuous mode [ 145.698931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.717944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.755157][ T4928] device veth1_vlan entered promiscuous mode [ 145.865051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.894257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.951120][ T4928] device veth0_macvtap entered promiscuous mode [ 145.983172][ T4928] device veth1_macvtap entered promiscuous mode [ 146.076771][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.120246][ T5170] FAULT_INJECTION: forcing a failure. [ 146.120246][ T5170] name failslab, interval 1, probability 0, space 0, times 0 [ 146.137627][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.182893][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.192415][ T5170] CPU: 1 PID: 5170 Comm: syz.8.147 Not tainted syzkaller #0 [ 146.200676][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.210769][ T5170] Call Trace: [ 146.214080][ T5170] [ 146.217063][ T5170] dump_stack_lvl+0x188/0x250 [ 146.221785][ T5168] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.221781][ T5170] ? show_regs_print_info+0x20/0x20 [ 146.229476][ T5170] ? load_image+0x410/0x410 [ 146.229506][ T5170] ? __might_sleep+0xf0/0xf0 [ 146.244023][ T5170] ? __lock_acquire+0x7d40/0x7d40 [ 146.249095][ T5170] ? tomoyo_get_local_path+0x62a/0x780 [ 146.253417][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.254599][ T5170] should_fail+0x383/0x4b0 [ 146.254637][ T5170] should_failslab+0x5/0x20 [ 146.273399][ T5170] slab_pre_alloc_hook+0x51/0xc0 [ 146.278450][ T5170] __kmalloc+0x6b/0x340 [ 146.282649][ T5170] ? tomoyo_encode+0x28a/0x550 [ 146.287502][ T5170] tomoyo_encode+0x28a/0x550 [ 146.292141][ T5170] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 146.297836][ T5170] tomoyo_check_open_permission+0x1eb/0x410 [ 146.301598][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.303776][ T5170] ? tomoyo_check_path_number_acl+0x280/0x280 [ 146.303838][ T5170] ? __lock_acquire+0x7d40/0x7d40 [ 146.325393][ T5170] ? __rwlock_init+0x140/0x140 [ 146.330227][ T5170] ? preempt_count_add+0x8d/0x190 [ 146.335306][ T5170] ? hook_file_open+0xf1/0x230 [ 146.340114][ T5170] ? tomoyo_file_open+0xe9/0x170 [ 146.345096][ T5170] security_file_open+0x5e/0xa0 [ 146.350004][ T5170] do_dentry_open+0x321/0xf90 [ 146.354722][ T5170] ? vfs_open+0x2b/0x80 [ 146.358931][ T5170] path_openat+0x2718/0x2fb0 [ 146.363590][ T5170] ? do_filp_open+0x400/0x400 [ 146.368352][ T5170] do_filp_open+0x1df/0x400 [ 146.372901][ T5170] ? vfs_tmpfile+0x300/0x300 [ 146.376665][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.377577][ T5170] ? _raw_spin_unlock+0x24/0x40 [ 146.392204][ T5170] ? alloc_fd+0x59e/0x650 [ 146.396589][ T5170] do_sys_openat2+0x14b/0x500 [ 146.401308][ T5170] ? __lock_acquire+0x7d40/0x7d40 [ 146.406374][ T5170] ? do_sys_open+0xe0/0xe0 [ 146.410823][ T5170] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.416850][ T5170] ? lock_chain_count+0x20/0x20 [ 146.419070][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.421748][ T5170] __x64_sys_openat+0x135/0x160 [ 146.421780][ T5170] do_syscall_64+0x4c/0xa0 [ 146.441501][ T5170] ? clear_bhb_loop+0x30/0x80 [ 146.446223][ T5170] ? clear_bhb_loop+0x30/0x80 [ 146.450950][ T5170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.456886][ T5170] RIP: 0033:0x7fd216aeb559 [ 146.461350][ T5170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.480994][ T5170] RSP: 002b:00007fd214d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.489436][ T5170] RAX: ffffffffffffffda RBX: 00007fd216d72fa0 RCX: 00007fd216aeb559 [ 146.497431][ T5170] RDX: 0000000000000001 RSI: 0000200000002a00 RDI: 00000000ffffff9c [ 146.505427][ T5170] RBP: 00007fd216b82ab8 R08: 0000000000000000 R09: 0000000000000000 [ 146.513434][ T5170] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 146.521425][ T5170] R13: 00007fd216d73038 R14: 00007fd216d72fa0 R15: 00007ffddcf459a8 [ 146.529450][ T5170] [ 146.544864][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.561898][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.591959][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.613156][ T5170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.621428][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.652981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.665525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.693053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.722429][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.757406][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.801785][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.841716][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.896516][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.916005][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.927142][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.937455][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.990421][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.020949][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.041872][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.089519][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.130856][ T5183] bridge0: port 3(syz_tun) entered blocking state [ 147.148166][ T5183] bridge0: port 3(syz_tun) entered disabled state [ 147.179127][ T5183] FAULT_INJECTION: forcing a failure. [ 147.179127][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 147.230472][ T5183] CPU: 1 PID: 5183 Comm: syz.5.149 Not tainted syzkaller #0 [ 147.237834][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.247932][ T5183] Call Trace: [ 147.251248][ T5183] [ 147.254217][ T5183] dump_stack_lvl+0x188/0x250 [ 147.258942][ T5183] ? show_regs_print_info+0x20/0x20 [ 147.264182][ T5183] ? load_image+0x410/0x410 [ 147.268731][ T5183] ? __might_sleep+0xf0/0xf0 [ 147.273370][ T5183] ? __lock_acquire+0x7d40/0x7d40 [ 147.278452][ T5183] should_fail+0x383/0x4b0 [ 147.282905][ T5183] should_failslab+0x5/0x20 [ 147.287414][ T5183] slab_pre_alloc_hook+0x51/0xc0 [ 147.292361][ T5183] ? __kernfs_new_node+0xe3/0x6b0 [ 147.297390][ T5183] kmem_cache_alloc+0x3d/0x280 [ 147.302272][ T5183] ? __lock_acquire+0x35cf/0x7d40 [ 147.307310][ T5183] __kernfs_new_node+0xe3/0x6b0 [ 147.312176][ T5183] ? kernfs_new_node+0x250/0x250 [ 147.317132][ T5183] ? make_kgid+0x1c4/0x650 [ 147.321554][ T5183] ? from_kuid_munged+0x6e0/0x6e0 [ 147.326619][ T5183] kernfs_new_node+0x148/0x250 [ 147.331432][ T5183] kernfs_create_dir_ns+0x40/0x120 [ 147.336615][ T5183] sysfs_create_dir_ns+0x12c/0x290 [ 147.341771][ T5183] ? mark_lock+0x94/0x320 [ 147.346130][ T5183] ? sysfs_warn_dup+0xa0/0xa0 [ 147.351206][ T5183] ? rcu_is_watching+0x11/0xa0 [ 147.356009][ T5183] ? kobject_set_name_vargs+0xc6/0x110 [ 147.361540][ T5183] kobject_add_internal+0x5ba/0xcd0 [ 147.366782][ T5183] kobject_init_and_add+0x128/0x190 [ 147.372020][ T5183] ? __local_bh_enable_ip+0x136/0x1c0 [ 147.377439][ T5183] ? kobject_add+0x230/0x230 [ 147.382071][ T5183] ? __dev_set_allmulti+0x21b/0x3b0 [ 147.387317][ T5183] br_add_if+0x489/0x1200 [ 147.391695][ T5183] ? bpf_lsm_capable+0x5/0x10 [ 147.396429][ T5183] br_ioctl_stub+0x5d5/0xbe0 [ 147.401089][ T5183] ? rcu_read_unlock+0x90/0x90 [ 147.405927][ T5183] ? sock_ioctl+0x434/0x700 [ 147.410456][ T5183] ? rcu_read_unlock+0x90/0x90 [ 147.415237][ T5183] sock_ioctl+0x453/0x700 [ 147.419603][ T5183] ? sock_poll+0x420/0x420 [ 147.424040][ T5183] ? bpf_lsm_file_ioctl+0x5/0x10 [ 147.428983][ T5183] ? security_file_ioctl+0x7c/0xa0 [ 147.434123][ T5183] ? sock_poll+0x420/0x420 [ 147.438548][ T5183] __se_sys_ioctl+0xfa/0x170 [ 147.443167][ T5183] do_syscall_64+0x4c/0xa0 [ 147.447592][ T5183] ? clear_bhb_loop+0x30/0x80 [ 147.452276][ T5183] ? clear_bhb_loop+0x30/0x80 [ 147.456967][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.462871][ T5183] RIP: 0033:0x7f3b1f135559 [ 147.467292][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.486915][ T5183] RSP: 002b:00007f3b1d38d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.495341][ T5183] RAX: ffffffffffffffda RBX: 00007f3b1f3bcfa0 RCX: 00007f3b1f135559 [ 147.503331][ T5183] RDX: 00002000000001c0 RSI: 00000000000089a2 RDI: 0000000000000004 [ 147.511305][ T5183] RBP: 00007f3b1f1ccab8 R08: 0000000000000000 R09: 0000000000000000 [ 147.519281][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.527274][ T5183] R13: 00007f3b1f3bd038 R14: 00007f3b1f3bcfa0 R15: 00007ffc3f62e8e8 [ 147.535291][ T5183] [ 148.561875][ T5183] kobject_add_internal failed for brport (error: -12 parent: syz_tun) [ 148.668340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.748415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.827280][ T5192] device syzkaller1 entered promiscuous mode [ 149.159276][ T4928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.196902][ T4928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.226218][ T4928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.258728][ T4928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.385635][ T5206] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.523259][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.531125][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.576009][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.633919][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.664482][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.692319][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.845405][ T5252] fuse: Invalid rootmode [ 152.292109][ T4838] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.477540][ T4266] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.534901][ T4838] usb 2-1: Using ep0 maxpacket: 16 [ 152.762058][ T4838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.781857][ T4266] usb 6-1: Using ep0 maxpacket: 32 [ 152.838045][ T4293] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.888779][ T4838] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 152.933576][ T4293] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.944845][ T4266] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 152.972154][ T4266] usb 6-1: config 0 has no interface number 0 [ 153.040706][ T4293] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.093296][ T4838] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 153.111256][ T4838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.128179][ T4838] usb 2-1: Product: syz [ 153.134068][ T4838] usb 2-1: Manufacturer: syz [ 153.138796][ T4838] usb 2-1: SerialNumber: syz [ 153.168661][ T4293] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.181824][ T4266] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.199505][ T4266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.210214][ T4266] usb 6-1: Product: syz [ 153.224061][ T4266] usb 6-1: Manufacturer: syz [ 153.228717][ T4266] usb 6-1: SerialNumber: syz [ 153.250733][ T4266] usb 6-1: config 0 descriptor?? [ 153.308939][ T4266] smsc95xx v2.0.0 [ 153.522753][ T4838] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 153.542057][ T4838] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 153.588918][ T4838] usb 2-1: USB disconnect, device number 3 [ 153.621839][ T4670] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 153.641990][ T13] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 153.656340][ T5315] kvm: pic: non byte read [ 153.759397][ T4266] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 153.788940][ T4266] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.903325][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.982288][ T4670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.003556][ T4670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.109910][ T5329] loop1: detected capacity change from 0 to 2048 [ 154.132072][ T4670] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 154.151889][ T4670] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 154.164381][ T13] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 154.181286][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.201141][ T4670] usb 10-1: Manufacturer: syz [ 154.210115][ T13] usb 8-1: Product: syz [ 154.231444][ T13] usb 8-1: Manufacturer: syz [ 154.237226][ T4670] usb 10-1: config 0 descriptor?? [ 154.242773][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 154.252302][ T13] usb 8-1: SerialNumber: syz [ 154.305769][ T13] r8152-cfgselector 8-1: config 0 descriptor?? [ 154.502959][ T4266] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 154.532166][ T4266] smsc95xx: probe of 6-1:0.67 failed with error -32 [ 154.601923][ T13] r8152-cfgselector 8-1: Unknown version 0x0000 [ 154.854277][ T4293] device hsr_slave_0 left promiscuous mode [ 154.876872][ T13] r8152-cfgselector 8-1: Unknown version 0x0000 [ 154.894005][ T13] r8152-cfgselector 8-1: USB disconnect, device number 5 [ 154.909552][ T5346] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.182: inode has invalid extent depth: 8 [ 154.933227][ T5346] EXT4-fs (loop1): Remounting filesystem read-only [ 154.940277][ T5346] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.182: inode has invalid extent depth: 8 [ 154.975087][ T5346] EXT4-fs (loop1): Remounting filesystem read-only [ 155.100881][ T5347] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.182: inode has invalid extent depth: 8 [ 155.116653][ T5347] EXT4-fs (loop1): Remounting filesystem read-only [ 155.125606][ T5347] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.182: inode has invalid extent depth: 8 [ 155.142615][ T5347] EXT4-fs (loop1): Remounting filesystem read-only [ 155.207686][ T4293] device hsr_slave_1 left promiscuous mode [ 155.287100][ T5333] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 155.406584][ T5333] EXT4-fs (loop1): Remounting filesystem read-only [ 155.665236][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.675215][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.688478][ T4670] input: syz Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0006/input/input6 [ 155.688983][ T4198] usb 6-1: USB disconnect, device number 5 [ 155.766103][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.785051][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.799200][ T4293] device bridge_slave_1 left promiscuous mode [ 155.810870][ T4670] input: syz Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0006/input/input7 [ 155.841932][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.859839][ T4670] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.9-1/input0 [ 155.930885][ T4670] usb 10-1: USB disconnect, device number 5 [ 155.990734][ T4293] device bridge_slave_0 left promiscuous mode [ 156.007639][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.024626][ T4293] device veth1_macvtap left promiscuous mode [ 156.030720][ T4293] device veth0_macvtap left promiscuous mode [ 156.040096][ T4293] device veth1_vlan left promiscuous mode [ 156.049415][ T4293] device veth0_vlan left promiscuous mode [ 156.098890][ T5354] fido_id[5354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 156.544163][ T4264] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 156.651586][ T5376] capability: warning: `syz.5.190' uses deprecated v2 capabilities in a way that may be insecure [ 156.727387][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 156.751292][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 156.767972][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.798341][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.799804][ T5380] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.872047][ T4264] usb 8-1: Using ep0 maxpacket: 16 [ 156.934418][ T4293] bond0 (unregistering): Released all slaves [ 156.974152][ T5078] Bluetooth: hci1: Frame reassembly failed (-84) [ 156.981982][ T4198] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 157.002364][ T4264] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.015551][ T4264] usb 8-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 157.031964][ T4264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.052085][ T4264] usb 8-1: config 0 descriptor?? [ 157.202297][ T9] Bluetooth: hci2: Frame reassembly failed (-84) [ 157.352010][ T4198] usb 10-1: config index 0 descriptor too short (expected 7768, got 18) [ 157.363892][ T4198] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 157.389952][ T4198] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.441627][ T4198] usb 10-1: config 0 descriptor?? [ 157.504330][ T4198] ftdi_sio 10-1:0.0: Ignoring interface reserved for JTAG [ 157.525435][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x2 [ 157.539587][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.547513][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.554914][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.563212][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.570386][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.577994][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.585365][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.593355][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.600462][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.609465][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.616819][ T4264] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 157.644095][ T4264] hid-rmi 0003:17EF:6085.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.7-1/input0 [ 157.751088][ T4264] usb 8-1: USB disconnect, device number 6 [ 157.763819][ T4266] usb 10-1: USB disconnect, device number 6 [ 157.781786][ T4268] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.156277][ T4268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.176894][ T4268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 158.208475][ T4268] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 158.247525][ T4268] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 158.267921][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.409486][ T5420] FAULT_INJECTION: forcing a failure. [ 158.409486][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 158.441866][ T5420] CPU: 1 PID: 5420 Comm: syz.7.198 Not tainted syzkaller #0 [ 158.449229][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.459323][ T5420] Call Trace: [ 158.462679][ T5420] [ 158.465639][ T5420] dump_stack_lvl+0x188/0x250 [ 158.470356][ T5420] ? show_regs_print_info+0x20/0x20 [ 158.475599][ T5420] ? load_image+0x410/0x410 [ 158.480141][ T5420] ? __lock_acquire+0x7d40/0x7d40 [ 158.485233][ T5420] should_fail+0x383/0x4b0 [ 158.489695][ T5420] should_failslab+0x5/0x20 [ 158.494237][ T5420] slab_pre_alloc_hook+0x51/0xc0 [ 158.499213][ T5420] ? security_inode_alloc+0x30/0x110 [ 158.504538][ T5420] kmem_cache_alloc+0x3d/0x280 [ 158.509343][ T5420] security_inode_alloc+0x30/0x110 [ 158.514487][ T5420] inode_init_always+0x8e5/0xc90 [ 158.519571][ T5420] new_inode_pseudo+0x8e/0x210 [ 158.524377][ T5420] new_inode+0x25/0x1d0 [ 158.528574][ T5420] ? start_creating+0x1f5/0x310 [ 158.533468][ T5420] debugfs_create_dir+0xec/0x4c0 [ 158.538473][ T5420] ? hci_register_dev+0x36f/0x980 [ 158.543580][ T5420] hci_register_dev+0x391/0x980 [ 158.548482][ T5420] hci_uart_tty_ioctl+0x875/0xa80 [ 158.553581][ T5420] ? hci_uart_tty_write+0x10/0x10 [ 158.558654][ T5420] tty_ioctl+0x8e3/0xc30 [ 158.562933][ T5420] ? security_file_ioctl+0x7c/0xa0 [ 158.568079][ T5420] ? tty_get_icount+0xa0/0xa0 [ 158.572805][ T5420] __se_sys_ioctl+0xfa/0x170 [ 158.577429][ T5420] do_syscall_64+0x4c/0xa0 [ 158.581880][ T5420] ? clear_bhb_loop+0x30/0x80 [ 158.586681][ T5420] ? clear_bhb_loop+0x30/0x80 [ 158.591398][ T5420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.592159][ T4268] cxacru 2-1:1.0: invalid response length to cm 0x90: 32 [ 158.597351][ T5420] RIP: 0033:0x7ff6d4d3b559 [ 158.609195][ T5420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.628840][ T5420] RSP: 002b:00007ff6d2f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.636660][ T4670] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 158.637292][ T5420] RAX: ffffffffffffffda RBX: 00007ff6d4fc2fa0 RCX: 00007ff6d4d3b559 [ 158.652846][ T5420] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000005 [ 158.660855][ T5420] RBP: 00007ff6d4dd2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 158.668866][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.676871][ T5420] R13: 00007ff6d4fc3038 R14: 00007ff6d4fc2fa0 R15: 00007ffe0387fc58 [ 158.684892][ T5420] [ 158.717317][ T5423] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 158.731759][ T5423] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 158.835366][ T5420] debugfs: out of free dentries, can not create directory 'hci3' [ 158.874003][ T5078] Bluetooth: hci3: Frame reassembly failed (-84) [ 158.891933][ T4670] usb 10-1: Using ep0 maxpacket: 16 [ 159.012001][ T4670] usb 10-1: config 0 has an invalid interface number: 98 but max is 0 [ 159.020481][ T4670] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.037662][ T4265] Bluetooth: hci1: command 0x1003 tx timeout [ 159.048791][ T4203] Bluetooth: hci1: sending frame failed (-49) [ 159.055451][ T4670] usb 10-1: config 0 has no interface number 0 [ 159.068347][ T4670] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 159.078537][ T4670] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 159.089128][ T4670] usb 10-1: config 0 interface 98 has no altsetting 0 [ 159.251982][ T4670] usb 10-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 159.267699][ T4670] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.282014][ T4670] usb 10-1: Product: syz [ 159.282043][ T4264] Bluetooth: hci2: command 0x1003 tx timeout [ 159.286499][ T4670] usb 10-1: Manufacturer: syz [ 159.298379][ T4670] usb 10-1: SerialNumber: syz [ 159.316203][ T4203] Bluetooth: hci2: sending frame failed (-49) [ 159.323922][ T4670] usb 10-1: config 0 descriptor?? [ 159.342198][ T5418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.353017][ T5418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.591632][ T5418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.610887][ T5418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.793976][ T4265] usb 2-1: USB disconnect, device number 4 [ 160.400611][ T5480] FAULT_INJECTION: forcing a failure. [ 160.400611][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 160.414050][ T5480] CPU: 0 PID: 5480 Comm: syz.1.200 Not tainted syzkaller #0 [ 160.421388][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.431495][ T5480] Call Trace: [ 160.434810][ T5480] [ 160.437775][ T5480] dump_stack_lvl+0x188/0x250 [ 160.442494][ T5480] ? show_regs_print_info+0x20/0x20 [ 160.447732][ T5480] ? load_image+0x410/0x410 [ 160.452298][ T5480] ? __lock_acquire+0x7d40/0x7d40 [ 160.457372][ T5480] should_fail+0x383/0x4b0 [ 160.461842][ T5480] ? transaction_log_open+0x50/0x50 [ 160.467079][ T5480] should_failslab+0x5/0x20 [ 160.471622][ T5480] slab_pre_alloc_hook+0x51/0xc0 [ 160.476618][ T5480] ? transaction_log_open+0x50/0x50 [ 160.481859][ T5480] kmem_cache_alloc_trace+0x47/0x290 [ 160.487176][ T5480] ? single_open+0x56/0x240 [ 160.491717][ T5480] ? transaction_log_open+0x50/0x50 [ 160.496957][ T5480] single_open+0x56/0x240 [ 160.501329][ T5480] ? transactions_show+0xa0/0xa0 [ 160.506310][ T5480] do_dentry_open+0x7f7/0xf90 [ 160.511034][ T5480] ? vfs_open+0x2b/0x80 [ 160.515232][ T5480] path_openat+0x2718/0x2fb0 [ 160.519885][ T5480] ? __kasan_slab_alloc+0xa9/0xc0 [ 160.524959][ T5480] ? do_filp_open+0x400/0x400 [ 160.529695][ T5480] do_filp_open+0x1df/0x400 [ 160.534245][ T5480] ? vfs_tmpfile+0x300/0x300 [ 160.538896][ T5480] ? _raw_spin_unlock+0x24/0x40 [ 160.543779][ T5480] ? alloc_fd+0x59e/0x650 [ 160.548155][ T5480] do_sys_openat2+0x14b/0x500 [ 160.552866][ T5480] ? __lock_acquire+0x7d40/0x7d40 [ 160.557931][ T5480] ? do_sys_open+0xe0/0xe0 [ 160.562384][ T5480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.568514][ T5480] ? lock_chain_count+0x20/0x20 [ 160.573421][ T5480] __x64_sys_openat+0x135/0x160 [ 160.578319][ T5480] do_syscall_64+0x4c/0xa0 [ 160.582767][ T5480] ? clear_bhb_loop+0x30/0x80 [ 160.587482][ T5480] ? clear_bhb_loop+0x30/0x80 [ 160.592293][ T5480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.598224][ T5480] RIP: 0033:0x7f1b2a4f5559 [ 160.602670][ T5480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.622312][ T5480] RSP: 002b:00007f1b2874d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.630761][ T5480] RAX: ffffffffffffffda RBX: 00007f1b2a77cfa0 RCX: 00007f1b2a4f5559 [ 160.638775][ T5480] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 160.646904][ T5480] RBP: 00007f1b2a58cab8 R08: 0000000000000000 R09: 0000000000000000 [ 160.654914][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.662919][ T5480] R13: 00007f1b2a77d038 R14: 00007f1b2a77cfa0 R15: 00007ffc61cad2c8 [ 160.670952][ T5480] [ 160.760910][ T5487] device syzkaller0 entered promiscuous mode [ 160.872579][ T4268] Bluetooth: hci3: command 0x1003 tx timeout [ 160.880178][ T4203] Bluetooth: hci3: sending frame failed (-49) [ 160.891975][ T4670] asix 10-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 160.911407][ T4670] asix: probe of 10-1:0.98 failed with error -71 [ 160.921382][ T4670] usb 10-1: USB disconnect, device number 7 [ 161.111858][ T4268] Bluetooth: hci1: command 0x1001 tx timeout [ 161.117986][ T4203] Bluetooth: hci1: sending frame failed (-49) [ 161.351825][ T4670] Bluetooth: hci2: command 0x1001 tx timeout [ 161.357955][ T4203] Bluetooth: hci2: sending frame failed (-49) [ 161.428972][ T5510] device syzkaller1 entered promiscuous mode [ 161.469131][ T5512] loop9: detected capacity change from 0 to 2048 [ 161.544022][ T5512] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 161.698890][ T5517] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.205: inode has invalid extent depth: 8 [ 161.768197][ T5517] EXT4-fs (loop9): Remounting filesystem read-only [ 161.776483][ T5517] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.205: inode has invalid extent depth: 8 [ 161.804283][ T5517] EXT4-fs (loop9): Remounting filesystem read-only [ 161.899665][ T5518] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.205: inode has invalid extent depth: 8 [ 161.920268][ T5518] EXT4-fs (loop9): Remounting filesystem read-only [ 161.931847][ T5518] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.205: inode has invalid extent depth: 8 [ 161.951729][ T5518] EXT4-fs (loop9): Remounting filesystem read-only [ 162.806799][ T5532] loop8: detected capacity change from 0 to 10 [ 162.901656][ T5532] Dev loop8: unable to read RDB block 10 [ 162.907620][ T5532] loop8: unable to read partition table [ 162.919426][ T5532] loop8: partition table beyond EOD, truncated [ 162.941920][ T5532] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 162.956127][ T4268] Bluetooth: hci3: command 0x1001 tx timeout [ 162.963463][ T4203] Bluetooth: hci3: sending frame failed (-49) [ 162.983299][ T3559] Dev loop8: unable to read RDB block 10 [ 162.999221][ T3559] loop8: unable to read partition table [ 163.019616][ T3559] loop8: partition table beyond EOD, truncated [ 163.178012][ T5537] device syzkaller0 entered promiscuous mode [ 163.193122][ T4319] Bluetooth: hci1: command 0x1009 tx timeout [ 163.292908][ T5539] device syzkaller0 entered promiscuous mode [ 163.431934][ T4670] Bluetooth: hci2: command 0x1009 tx timeout [ 163.731269][ T5555] device syzkaller1 entered promiscuous mode [ 164.043028][ T4198] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 164.291893][ T4198] usb 10-1: Using ep0 maxpacket: 32 [ 164.451892][ T4198] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 164.460215][ T4198] usb 10-1: config 0 has no interface number 0 [ 164.481797][ T4198] usb 10-1: config 0 interface 184 has no altsetting 0 [ 164.657628][ T4198] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 164.674355][ T4198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.696058][ T4198] usb 10-1: Product: syz [ 164.700359][ T4198] usb 10-1: Manufacturer: syz [ 164.718542][ T4198] usb 10-1: SerialNumber: syz [ 164.760197][ T4198] usb 10-1: config 0 descriptor?? [ 164.810519][ T4198] smsc75xx v1.0.0 [ 165.032203][ T4268] Bluetooth: hci3: command 0x1009 tx timeout [ 166.132133][ T4198] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 166.149723][ T4198] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 166.172118][ T4198] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 166.188894][ T4198] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 166.199249][ T4198] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 166.212662][ T4198] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 166.222990][ T4198] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 166.247672][ T4198] usb 10-1: USB disconnect, device number 8 [ 166.866353][ T5690] device syzkaller0 entered promiscuous mode [ 167.029702][ T5700] FAULT_INJECTION: forcing a failure. [ 167.029702][ T5700] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.043492][ T5700] CPU: 0 PID: 5700 Comm: syz.9.223 Not tainted syzkaller #0 [ 167.050825][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.060915][ T5700] Call Trace: [ 167.064226][ T5700] [ 167.067187][ T5700] dump_stack_lvl+0x188/0x250 [ 167.071927][ T5700] ? show_regs_print_info+0x20/0x20 [ 167.077158][ T5700] ? load_image+0x410/0x410 [ 167.081716][ T5700] ? __lock_acquire+0x7d40/0x7d40 [ 167.086785][ T5700] ? rcu_is_watching+0x11/0xa0 [ 167.091585][ T5700] should_fail+0x383/0x4b0 [ 167.096045][ T5700] _copy_from_user+0x2e/0x170 [ 167.100846][ T5700] __se_sys_add_key+0x2a0/0x410 [ 167.105739][ T5700] ? __x64_sys_add_key+0xc0/0xc0 [ 167.110723][ T5700] ? lockdep_hardirqs_on+0x94/0x140 [ 167.115951][ T5700] ? __x64_sys_add_key+0x1c/0xc0 [ 167.120928][ T5700] do_syscall_64+0x4c/0xa0 [ 167.125380][ T5700] ? clear_bhb_loop+0x30/0x80 [ 167.130092][ T5700] ? clear_bhb_loop+0x30/0x80 [ 167.134846][ T5700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.140778][ T5700] RIP: 0033:0x7f2b8e7cd559 [ 167.145226][ T5700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.164862][ T5700] RSP: 002b:00007f2b8ca25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 167.173334][ T5700] RAX: ffffffffffffffda RBX: 00007f2b8ea54fa0 RCX: 00007f2b8e7cd559 [ 167.181351][ T5700] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000200000000180 [ 167.189368][ T5700] RBP: 00007f2b8e864ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 167.197391][ T5700] R10: 000000000000a918 R11: 0000000000000246 R12: 0000000000000000 [ 167.205392][ T5700] R13: 00007f2b8ea55038 R14: 00007f2b8ea54fa0 R15: 00007ffe76e995b8 [ 167.213413][ T5700] [ 167.346215][ T5704] kvm: pic: single mode not supported [ 167.346429][ T5704] kvm: pic: single mode not supported [ 167.362036][ T5707] device syzkaller0 entered promiscuous mode [ 167.978723][ T5730] device syzkaller1 entered promiscuous mode [ 169.088202][ T5762] device syzkaller0 entered promiscuous mode [ 169.221493][ T5764] device syzkaller0 entered promiscuous mode [ 169.385137][ T5770] device syzkaller0 entered promiscuous mode [ 169.759535][ T5804] binder: 5803:5804 ioctl c00c620f 0 returned -14 [ 169.845416][ T5798] kvm: pic: single mode not supported [ 169.845603][ T5798] kvm: pic: single mode not supported [ 169.861855][ T3544] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 169.909292][ T5791] device syzkaller1 entered promiscuous mode [ 170.077843][ T5815] device syzkaller0 entered promiscuous mode [ 170.161917][ T4319] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 170.282161][ T3544] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.295126][ T3544] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.438474][ T5834] device syzkaller0 entered promiscuous mode [ 170.482188][ T3544] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 170.501647][ T3544] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.521052][ T3544] usb 9-1: Product: syz [ 170.531184][ T3544] usb 9-1: Manufacturer: syz [ 170.542132][ T4319] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.552502][ T3544] usb 9-1: SerialNumber: syz [ 170.565288][ T4319] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 170.577648][ T4319] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 170.611123][ T4319] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 170.632002][ T4319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.643353][ T3544] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 170.703317][ T3544] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 170.703317][ T3544] Please send a copy of this message to and [ 170.934055][ T4319] cxacru 10-1:1.0: invalid response length to cm 0x90: 48 [ 171.181284][ T5878] device syzkaller0 entered promiscuous mode [ 171.259106][ T5881] device syzkaller1 entered promiscuous mode [ 171.419852][ T5889] device syzkaller0 entered promiscuous mode [ 171.489126][ T5893] device syzkaller0 entered promiscuous mode [ 171.737970][ T3544] scsi host1: usb-storage 9-1:1.0 [ 171.758784][ T3544] usb 9-1: USB disconnect, device number 5 [ 171.770674][ T5905] kvm: pic: single mode not supported [ 171.770829][ T5905] kvm: pic: single mode not supported [ 172.131293][ T3544] usb 10-1: USB disconnect, device number 9 [ 172.411500][ T5938] device syzkaller0 entered promiscuous mode [ 172.840903][ T5961] device syzkaller0 entered promiscuous mode [ 172.896398][ T5965] FAULT_INJECTION: forcing a failure. [ 172.896398][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 172.955259][ T5965] CPU: 1 PID: 5965 Comm: syz.8.276 Not tainted syzkaller #0 [ 172.962630][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.972716][ T5965] Call Trace: [ 172.976063][ T5965] [ 172.979033][ T5965] dump_stack_lvl+0x188/0x250 [ 172.983754][ T5965] ? show_regs_print_info+0x20/0x20 [ 172.988990][ T5965] ? load_image+0x410/0x410 [ 172.993622][ T5965] ? __might_sleep+0xf0/0xf0 [ 172.998248][ T5965] ? __lock_acquire+0x7d40/0x7d40 [ 173.003415][ T5965] should_fail+0x383/0x4b0 [ 173.007878][ T5965] should_failslab+0x5/0x20 [ 173.012417][ T5965] slab_pre_alloc_hook+0x51/0xc0 [ 173.017417][ T5965] kmem_cache_alloc_node+0x47/0x2c0 [ 173.022656][ T5965] ? alloc_unbound_pwq+0x8a4/0xdf0 [ 173.027813][ T5965] alloc_unbound_pwq+0x8a4/0xdf0 [ 173.032802][ T5965] apply_wqattrs_prepare+0x382/0xad0 [ 173.038151][ T5965] apply_workqueue_attrs+0xd0/0x170 [ 173.043419][ T5965] alloc_workqueue+0xf1e/0x1450 [ 173.048320][ T5965] ? kfree+0x4a/0x2a0 [ 173.052352][ T5965] ? dev_set_name+0xdf/0x130 [ 173.056984][ T5965] ? apply_workqueue_attrs+0x170/0x170 [ 173.062494][ T5965] hci_register_dev+0x259/0x980 [ 173.067399][ T5965] hci_uart_tty_ioctl+0x875/0xa80 [ 173.072468][ T5965] ? hci_uart_tty_write+0x10/0x10 [ 173.077538][ T5965] tty_ioctl+0x8e3/0xc30 [ 173.081826][ T5965] ? security_file_ioctl+0x7c/0xa0 [ 173.086979][ T5965] ? tty_get_icount+0xa0/0xa0 [ 173.091703][ T5965] __se_sys_ioctl+0xfa/0x170 [ 173.096336][ T5965] do_syscall_64+0x4c/0xa0 [ 173.100796][ T5965] ? clear_bhb_loop+0x30/0x80 [ 173.105623][ T5965] ? clear_bhb_loop+0x30/0x80 [ 173.110517][ T5965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.116449][ T5965] RIP: 0033:0x7fd216aeb559 [ 173.120901][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.140721][ T5965] RSP: 002b:00007fd214d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.149186][ T5965] RAX: ffffffffffffffda RBX: 00007fd216d72fa0 RCX: 00007fd216aeb559 [ 173.157202][ T5965] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000005 [ 173.165224][ T5965] RBP: 00007fd216b82ab8 R08: 0000000000000000 R09: 0000000000000000 [ 173.173244][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.181288][ T5965] R13: 00007fd216d73038 R14: 00007fd216d72fa0 R15: 00007ffddcf459a8 [ 173.189402][ T5965] [ 173.206695][ T5965] Bluetooth: Can't register HCI device [ 173.828705][ T5996] device syzkaller0 entered promiscuous mode [ 173.867362][ T5995] device syzkaller0 entered promiscuous mode [ 173.979692][ T4550] EXT4-fs error (device sda1): ext4_lookup:1860: inode #529: comm syz-executor: iget: checksum invalid [ 174.006478][ T4550] EXT4-fs error (device sda1): ext4_lookup:1860: inode #529: comm syz-executor: iget: checksum invalid [ 174.481934][ T4264] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 174.489550][ T6016] device syzkaller0 entered promiscuous mode [ 174.544399][ T5007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.630138][ T5007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.724486][ T5007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.730027][ T6021] FAULT_INJECTION: forcing a failure. [ 174.730027][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 174.755619][ T6021] CPU: 0 PID: 6021 Comm: syz.1.290 Not tainted syzkaller #0 [ 174.762967][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.773060][ T6021] Call Trace: [ 174.776375][ T6021] [ 174.779340][ T6021] dump_stack_lvl+0x188/0x250 [ 174.784060][ T6021] ? show_regs_print_info+0x20/0x20 [ 174.789300][ T6021] ? load_image+0x410/0x410 [ 174.793932][ T6021] ? __might_sleep+0xf0/0xf0 [ 174.798583][ T6021] ? __lock_acquire+0x7d40/0x7d40 [ 174.803661][ T6021] should_fail+0x383/0x4b0 [ 174.808128][ T6021] should_failslab+0x5/0x20 [ 174.812693][ T6021] slab_pre_alloc_hook+0x51/0xc0 [ 174.817670][ T6021] kmem_cache_alloc_node+0x47/0x2c0 [ 174.822921][ T6021] ? alloc_unbound_pwq+0x8a4/0xdf0 [ 174.828080][ T6021] alloc_unbound_pwq+0x8a4/0xdf0 [ 174.833066][ T6021] apply_wqattrs_prepare+0x382/0xad0 [ 174.838431][ T6021] apply_workqueue_attrs+0xd0/0x170 [ 174.843760][ T6021] alloc_workqueue+0xf1e/0x1450 [ 174.848677][ T6021] ? kfree+0x4a/0x2a0 [ 174.852706][ T6021] ? dev_set_name+0xdf/0x130 [ 174.857419][ T6021] ? apply_workqueue_attrs+0x170/0x170 [ 174.862953][ T6021] hci_register_dev+0x259/0x980 [ 174.867895][ T6021] hci_uart_tty_ioctl+0x875/0xa80 [ 174.872960][ T6021] ? hci_uart_tty_write+0x10/0x10 [ 174.878053][ T6021] tty_ioctl+0x8e3/0xc30 [ 174.882330][ T6021] ? security_file_ioctl+0x7c/0xa0 [ 174.887507][ T6021] ? tty_get_icount+0xa0/0xa0 [ 174.892237][ T6021] __se_sys_ioctl+0xfa/0x170 [ 174.896986][ T6021] do_syscall_64+0x4c/0xa0 [ 174.901442][ T6021] ? clear_bhb_loop+0x30/0x80 [ 174.906158][ T6021] ? clear_bhb_loop+0x30/0x80 [ 174.910872][ T6021] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.916801][ T6021] RIP: 0033:0x7f1b2a4f5559 [ 174.921253][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.940886][ T6021] RSP: 002b:00007f1b2874d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.949343][ T6021] RAX: ffffffffffffffda RBX: 00007f1b2a77cfa0 RCX: 00007f1b2a4f5559 [ 174.957348][ T6021] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000005 [ 174.965365][ T6021] RBP: 00007f1b2a58cab8 R08: 0000000000000000 R09: 0000000000000000 [ 174.973372][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.981528][ T6021] R13: 00007f1b2a77d038 R14: 00007f1b2a77cfa0 R15: 00007ffc61cad2c8 [ 174.989549][ T6021] [ 175.009267][ T6021] Bluetooth: Can't register HCI device [ 175.009301][ T6023] loop7: detected capacity change from 0 to 2048 [ 175.033539][ T5007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.051837][ T4264] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.069683][ T4264] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 175.103522][ T4264] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 175.131618][ T4264] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 175.147542][ T4264] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.173381][ T6023] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 175.504349][ T4264] cxacru 9-1:1.0: invalid response length to cm 0x90: 48 [ 175.895694][ T6044] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.299: inode has invalid extent depth: 8 [ 175.913354][ T6044] EXT4-fs (loop7): Remounting filesystem read-only [ 175.936403][ T6044] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.299: inode has invalid extent depth: 8 [ 175.970988][ T6044] EXT4-fs (loop7): Remounting filesystem read-only [ 176.004518][ T6023] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.299: inode has invalid extent depth: 8 [ 176.032196][ T6023] EXT4-fs (loop7): Remounting filesystem read-only [ 176.052605][ T6045] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.299: inode has invalid extent depth: 8 [ 176.066294][ T6045] EXT4-fs (loop7): Remounting filesystem read-only [ 176.091294][ T6023] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.299: inode has invalid extent depth: 8 [ 176.113597][ T6023] EXT4-fs (loop7): Remounting filesystem read-only [ 176.713795][ T1108] usb 9-1: USB disconnect, device number 6 [ 177.073036][ T5007] device hsr_slave_0 left promiscuous mode [ 177.084780][ T5007] device hsr_slave_1 left promiscuous mode [ 177.102039][ T5007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.119768][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.130592][ T5007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.150163][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.171152][ T5007] device bridge_slave_1 left promiscuous mode [ 177.181297][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.200189][ T5007] device bridge_slave_0 left promiscuous mode [ 177.209558][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.243118][ T5007] device veth1_macvtap left promiscuous mode [ 177.261783][ T4268] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 177.262291][ T5007] device veth0_macvtap left promiscuous mode [ 177.284392][ T5007] device veth1_vlan left promiscuous mode [ 177.290721][ T5007] device veth0_vlan left promiscuous mode [ 177.521943][ T4268] usb 8-1: Using ep0 maxpacket: 16 [ 177.687443][ T5007] team0 (unregistering): Port device team_slave_1 removed [ 177.705722][ T5007] team0 (unregistering): Port device team_slave_0 removed [ 177.718832][ T5007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.762057][ T5007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.813252][ T4268] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 177.832240][ T4268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.840288][ T4268] usb 8-1: Product: syz [ 177.851724][ T4268] usb 8-1: Manufacturer: syz [ 177.856366][ T4268] usb 8-1: SerialNumber: syz [ 177.907027][ T5007] bond0 (unregistering): Released all slaves [ 178.525066][ T6136] device syzkaller0 entered promiscuous mode [ 178.602246][ T4293] Bluetooth: hci1: Frame reassembly failed (-84) [ 179.348893][ T6168] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 179.523090][ T6172] loop1: detected capacity change from 0 to 2048 [ 179.628589][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 179.785359][ T6183] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.305: inode has invalid extent depth: 8 [ 179.855225][ T6183] EXT4-fs (loop1): Remounting filesystem read-only [ 179.863473][ T6182] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.305: inode has invalid extent depth: 8 [ 179.890032][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 179.949248][ T6183] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.305: inode has invalid extent depth: 8 [ 180.003564][ T6183] EXT4-fs (loop1): Remounting filesystem read-only [ 180.025072][ T6182] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.305: inode has invalid extent depth: 8 [ 180.073473][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 180.122846][ T4268] usb 8-1: MIDIStreaming interface descriptor not found [ 180.418039][ T6184] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 180.562278][ T6184] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.632461][ T4264] Bluetooth: hci1: command 0x1003 tx timeout [ 180.638620][ T4204] Bluetooth: hci1: sending frame failed (-49) [ 180.655408][ T4268] usb 8-1: USB disconnect, device number 7 [ 180.963824][ T4476] udevd[4476]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.030105][ T6208] device syzkaller0 entered promiscuous mode [ 181.839092][ T6218] device syzkaller1 entered promiscuous mode [ 181.932797][ T6220] device syzkaller0 entered promiscuous mode [ 182.108187][ T6227] device syzkaller0 entered promiscuous mode [ 182.712051][ T4268] Bluetooth: hci1: command 0x1001 tx timeout [ 182.718143][ T4203] Bluetooth: hci1: sending frame failed (-49) [ 183.046334][ T6245] overlayfs: unrecognized mount option "verity=on" or missing value [ 183.075105][ T6244] loop9: detected capacity change from 0 to 2048 [ 183.159299][ T6251] serial 00:03: in use; can't configure [ 183.242607][ T6244] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 183.410057][ T6263] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.317: inode has invalid extent depth: 8 [ 183.480087][ T6263] EXT4-fs (loop9): Remounting filesystem read-only [ 183.537257][ T6262] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.317: inode has invalid extent depth: 8 [ 183.553465][ T6262] EXT4-fs (loop9): Remounting filesystem read-only [ 183.562047][ T6263] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.317: inode has invalid extent depth: 8 [ 183.576885][ T6263] EXT4-fs (loop9): Remounting filesystem read-only [ 183.617561][ T6264] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.317: inode has invalid extent depth: 8 [ 183.787180][ T6264] EXT4-fs (loop9): Remounting filesystem read-only [ 183.798070][ T6262] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.317: inode has invalid extent depth: 8 [ 183.815685][ T6262] EXT4-fs (loop9): Remounting filesystem read-only [ 183.876620][ T6258] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 184.155684][ T6258] EXT4-fs (loop9): Remounting filesystem read-only [ 184.381440][ T6282] device syzkaller1 entered promiscuous mode [ 184.791963][ T4737] Bluetooth: hci1: command 0x1009 tx timeout [ 185.419206][ T6320] device syzkaller0 entered promiscuous mode [ 185.757579][ T6335] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 185.766778][ T6335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.832814][ T6356] loop9: detected capacity change from 0 to 2048 [ 186.965280][ T6356] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 187.128155][ T6364] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.332: inode has invalid extent depth: 8 [ 187.178156][ T6364] EXT4-fs (loop9): Remounting filesystem read-only [ 187.257007][ T6363] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.332: inode has invalid extent depth: 8 [ 187.274535][ T6363] EXT4-fs (loop9): Remounting filesystem read-only [ 187.282288][ T6364] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.332: inode has invalid extent depth: 8 [ 187.299021][ T6364] EXT4-fs (loop9): Remounting filesystem read-only [ 187.307790][ T6365] EXT4-fs error (device loop9): ext4_find_extent:893: inode #2: comm syz.9.332: inode has invalid extent depth: 8 [ 187.476448][ T6365] EXT4-fs (loop9): Remounting filesystem read-only [ 187.981285][ T6372] device syzkaller1 entered promiscuous mode [ 188.071516][ T6370] device syzkaller0 entered promiscuous mode [ 189.235925][ T6386] device syzkaller0 entered promiscuous mode [ 189.326370][ T6387] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 189.341301][ T6387] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 189.636525][ T6407] loop1: detected capacity change from 0 to 2048 [ 189.747728][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 189.915818][ T6412] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.344: inode has invalid extent depth: 8 [ 189.985149][ T6412] EXT4-fs (loop1): Remounting filesystem read-only [ 189.993477][ T6412] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.344: inode has invalid extent depth: 8 [ 190.017135][ T6412] EXT4-fs (loop1): Remounting filesystem read-only [ 190.111224][ T6413] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.344: inode has invalid extent depth: 8 [ 190.318362][ T6413] EXT4-fs (loop1): Remounting filesystem read-only [ 190.326630][ T6414] EXT4-fs error (device loop1): ext4_find_extent:893: inode #2: comm syz.1.344: inode has invalid extent depth: 8 [ 190.373423][ T6414] EXT4-fs (loop1): Remounting filesystem read-only [ 190.978431][ T6437] kvm: MWAIT instruction emulated as NOP! [ 191.061522][ T6430] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 191.074388][ T6430] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 192.684092][ T6462] device syzkaller1 entered promiscuous mode [ 192.782919][ T6465] ip_tables: iptables: counters copy to user failed while replacing table [ 192.851203][ T6467] device syzkaller0 entered promiscuous mode [ 192.938149][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.970879][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.084256][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.656079][ T6507] device syzkaller0 entered promiscuous mode [ 197.721315][ T6513] ODEBUG: Out of memory. ODEBUG disabled [ 198.614403][ T6519] FAULT_INJECTION: forcing a failure. [ 198.614403][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 198.629239][ T6522] device syzkaller1 entered promiscuous mode [ 199.116098][ T6523] fuse: Bad value for 'fd' [ 200.053905][ T6519] CPU: 1 PID: 6519 Comm: syz.7.361 Not tainted syzkaller #0 [ 200.061274][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.071376][ T6519] Call Trace: [ 200.074692][ T6519] [ 200.077652][ T6519] dump_stack_lvl+0x188/0x250 [ 200.082387][ T6519] ? show_regs_print_info+0x20/0x20 [ 200.087623][ T6519] ? load_image+0x410/0x410 [ 200.092193][ T6519] ? __might_sleep+0xf0/0xf0 [ 200.096820][ T6519] ? __lock_acquire+0x7d40/0x7d40 [ 200.101891][ T6519] should_fail+0x383/0x4b0 [ 200.106351][ T6519] should_failslab+0x5/0x20 [ 200.110896][ T6519] slab_pre_alloc_hook+0x51/0xc0 [ 200.115873][ T6519] ? prepare_creds+0x3c/0x610 [ 200.120589][ T6519] kmem_cache_alloc+0x3d/0x280 [ 200.125499][ T6519] prepare_creds+0x3c/0x610 [ 200.130043][ T6519] __sys_setregid+0xf6/0x650 [ 200.134678][ T6519] ? lockdep_hardirqs_on+0x94/0x140 [ 200.139922][ T6519] do_syscall_64+0x4c/0xa0 [ 200.144376][ T6519] ? clear_bhb_loop+0x30/0x80 [ 200.149118][ T6519] ? clear_bhb_loop+0x30/0x80 [ 200.153846][ T6519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.159781][ T6519] RIP: 0033:0x7ff6d4d3b559 [ 200.164231][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.183899][ T6519] RSP: 002b:00007ff6d2f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 200.192387][ T6519] RAX: ffffffffffffffda RBX: 00007ff6d4fc2fa0 RCX: 00007ff6d4d3b559 [ 200.200400][ T6519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.208402][ T6519] RBP: 00007ff6d4dd2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 200.216424][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.224457][ T6519] R13: 00007ff6d4fc3038 R14: 00007ff6d4fc2fa0 R15: 00007ffe0387fc58 [ 200.232481][ T6519] [ 200.468461][ T6528] device syzkaller0 entered promiscuous mode [ 202.501209][ T6547] device syzkaller0 entered promiscuous mode [ 202.532734][ T6546] capability: warning: `syz.7.369' uses 32-bit capabilities (legacy support in use) [ 202.556831][ T6546] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 202.602121][ T6546] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 202.622292][ T6546] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 202.641097][ T6546] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 202.666376][ T6546] pit: kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 202.685398][ T6546] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 202.705615][ T6546] pit: kvm: requested 34361 ns i8254 timer period limited to 200000 ns [ 202.740729][ T6546] pit: kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 202.761538][ T6546] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 202.780297][ T6546] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 204.796518][ T6569] FAULT_INJECTION: forcing a failure. [ 204.796518][ T6569] name failslab, interval 1, probability 0, space 0, times 0 [ 204.837185][ T6569] CPU: 0 PID: 6569 Comm: syz.7.375 Not tainted syzkaller #0 [ 204.844549][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.854647][ T6569] Call Trace: [ 204.857967][ T6569] [ 204.860944][ T6569] dump_stack_lvl+0x188/0x250 [ 204.865678][ T6569] ? show_regs_print_info+0x20/0x20 [ 204.870928][ T6569] ? load_image+0x410/0x410 [ 204.875485][ T6569] ? __might_sleep+0xf0/0xf0 [ 204.880141][ T6569] ? __lock_acquire+0x7d40/0x7d40 [ 204.885223][ T6569] ? verify_lock_unused+0x140/0x140 [ 204.890610][ T6569] should_fail+0x383/0x4b0 [ 204.895101][ T6569] should_failslab+0x5/0x20 [ 204.899646][ T6569] slab_pre_alloc_hook+0x51/0xc0 [ 204.904634][ T6569] ? __d_alloc+0x27/0x6d0 [ 204.909030][ T6569] kmem_cache_alloc+0x3d/0x280 [ 204.914013][ T6569] __d_alloc+0x27/0x6d0 [ 204.918217][ T6569] ? d_alloc_pseudo+0xe/0x70 [ 204.922857][ T6569] d_alloc_pseudo+0x19/0x70 [ 204.927406][ T6569] alloc_file_pseudo+0xe0/0x200 [ 204.932327][ T6569] ? alloc_empty_file_noaccount+0x80/0x80 [ 204.938087][ T6569] ? _raw_spin_unlock+0x24/0x40 [ 204.942981][ T6569] ? alloc_fd+0x59e/0x650 [ 204.947394][ T6569] __anon_inode_getfd+0x26b/0x3d0 [ 204.952468][ T6569] ? anon_inode_getfd+0x40/0x40 [ 204.957357][ T6569] ? vfs_submount+0xb0/0xb0 [ 204.961901][ T6569] fscontext_create_fd+0x27/0x50 [ 204.966894][ T6569] __se_sys_fspick+0x364/0x410 [ 204.971719][ T6569] ? __x64_sys_fspick+0x80/0x80 [ 204.976608][ T6569] ? lockdep_hardirqs_on+0x94/0x140 [ 204.981863][ T6569] do_syscall_64+0x4c/0xa0 [ 204.986332][ T6569] ? clear_bhb_loop+0x30/0x80 [ 204.991046][ T6569] ? clear_bhb_loop+0x30/0x80 [ 204.995767][ T6569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.001704][ T6569] RIP: 0033:0x7ff6d4d3b559 [ 205.006161][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.026043][ T6569] RSP: 002b:00007ff6d2f93028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 205.034504][ T6569] RAX: ffffffffffffffda RBX: 00007ff6d4fc2fa0 RCX: 00007ff6d4d3b559 [ 205.042516][ T6569] RDX: 0000000000000000 RSI: 0000200000001300 RDI: ffffffffffffff9c [ 205.050538][ T6569] RBP: 00007ff6d4dd2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 205.058548][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.066566][ T6569] R13: 00007ff6d4fc3038 R14: 00007ff6d4fc2fa0 R15: 00007ffe0387fc58 [ 205.074591][ T6569] [ 205.280763][ T6584] device syzkaller0 entered promiscuous mode [ 209.966735][ T6636] FAULT_INJECTION: forcing a failure. [ 209.966735][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 209.995610][ T6636] CPU: 1 PID: 6636 Comm: syz.9.392 Not tainted syzkaller #0 [ 210.003048][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.013144][ T6636] Call Trace: [ 210.016554][ T6636] [ 210.019513][ T6636] dump_stack_lvl+0x188/0x250 [ 210.024231][ T6636] ? show_regs_print_info+0x20/0x20 [ 210.029457][ T6636] ? load_image+0x410/0x410 [ 210.033993][ T6636] ? __might_sleep+0xf0/0xf0 [ 210.038629][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 210.043705][ T6636] should_fail+0x383/0x4b0 [ 210.048174][ T6636] should_failslab+0x5/0x20 [ 210.052717][ T6636] slab_pre_alloc_hook+0x51/0xc0 [ 210.057687][ T6636] kmem_cache_alloc_trace+0x47/0x290 [ 210.062999][ T6636] ? __se_sys_fspick+0x264/0x410 [ 210.067980][ T6636] __se_sys_fspick+0x264/0x410 [ 210.072781][ T6636] ? __x64_sys_fspick+0x80/0x80 [ 210.077666][ T6636] ? lockdep_hardirqs_on+0x94/0x140 [ 210.082900][ T6636] do_syscall_64+0x4c/0xa0 [ 210.087346][ T6636] ? clear_bhb_loop+0x30/0x80 [ 210.092054][ T6636] ? clear_bhb_loop+0x30/0x80 [ 210.096765][ T6636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.102697][ T6636] RIP: 0033:0x7f2b8e7cd559 [ 210.107139][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.126778][ T6636] RSP: 002b:00007f2b8ca25028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 210.135254][ T6636] RAX: ffffffffffffffda RBX: 00007f2b8ea54fa0 RCX: 00007f2b8e7cd559 [ 210.143263][ T6636] RDX: 0000000000000000 RSI: 0000200000001300 RDI: ffffffffffffff9c [ 210.151265][ T6636] RBP: 00007f2b8e864ab8 R08: 0000000000000000 R09: 0000000000000000 [ 210.159268][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.167276][ T6636] R13: 00007f2b8ea55038 R14: 00007f2b8ea54fa0 R15: 00007ffe76e995b8 [ 210.175572][ T6636] [ 210.533635][ T6645] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 210.571562][ T6645] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 212.696368][ T6659] printk: console [ttyS0] disabled [ 212.789925][ T6664] printk: console [ttyS0] enabled [ 212.873726][ T6668] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.401' sets config #1 [ 213.002614][ T6675] device syzkaller0 entered promiscuous mode [ 213.027886][ T6678] FAULT_INJECTION: forcing a failure. [ 213.027886][ T6678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.042610][ T6678] CPU: 1 PID: 6678 Comm: syz.9.406 Not tainted syzkaller #0 [ 213.049942][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.060036][ T6678] Call Trace: [ 213.063365][ T6678] [ 213.066322][ T6678] dump_stack_lvl+0x188/0x250 [ 213.071043][ T6678] ? show_regs_print_info+0x20/0x20 [ 213.076281][ T6678] ? load_image+0x410/0x410 [ 213.080834][ T6678] ? mark_lock+0x94/0x320 [ 213.085199][ T6678] should_fail+0x383/0x4b0 [ 213.089664][ T6678] prepare_alloc_pages+0x1e3/0x5b0 [ 213.094815][ T6678] __alloc_pages+0x11b/0x480 [ 213.099450][ T6678] ? zone_statistics+0x170/0x170 [ 213.104608][ T6678] ? rcu_lock_acquire+0x30/0x30 [ 213.109504][ T6678] ? alloc_pages+0x452/0x560 [ 213.114137][ T6678] __get_free_pages+0x8/0x30 [ 213.118783][ T6678] __tlb_remove_page_size+0x1f2/0x3f0 [ 213.124203][ T6678] unmap_page_range+0xfcf/0x2410 [ 213.129218][ T6678] unmap_vmas+0x131/0x250 [ 213.133608][ T6678] ? unmap_page_range+0x2410/0x2410 [ 213.138922][ T6678] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 213.145061][ T6678] ? lock_chain_count+0x20/0x20 [ 213.149962][ T6678] exit_mmap+0x3b9/0x640 [ 213.154247][ T6678] ? vm_brk+0x20/0x20 [ 213.158287][ T6678] ? __khugepaged_exit+0x2bc/0x330 [ 213.163441][ T6678] __mmput+0x115/0x390 [ 213.167553][ T6678] exit_mm+0x632/0x7b0 [ 213.171657][ T6678] ? perf_pmu_migrate_context+0xb70/0xb70 [ 213.177420][ T6678] ? do_exit+0x2110/0x2110 [ 213.181901][ T6678] ? __ia32_sys_timer_delete+0x40/0x40 [ 213.187485][ T6678] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 213.193014][ T6678] ? tty_audit_exit+0x149/0x1f0 [ 213.197913][ T6678] do_exit+0x5b8/0x2110 [ 213.202117][ T6678] ? put_task_struct+0x80/0x80 [ 213.206919][ T6678] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 213.212977][ T6678] ? _raw_spin_lock_irq+0xb7/0xf0 [ 213.218395][ T6678] do_group_exit+0x12c/0x2f0 [ 213.223063][ T6678] ? lockdep_hardirqs_on+0x94/0x140 [ 213.228586][ T6678] get_signal+0x7eb/0x12e0 [ 213.233257][ T6678] arch_do_signal_or_restart+0xe6/0x12a0 [ 213.238966][ T6678] ? futex_exit_release+0x1c0/0x1c0 [ 213.244205][ T6678] ? get_sigframe_size+0x10/0x10 [ 213.249218][ T6678] ? __context_tracking_exit+0x4c/0x80 [ 213.254720][ T6678] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 213.260752][ T6678] ? exit_to_user_mode_loop+0x3b/0x130 [ 213.266781][ T6678] exit_to_user_mode_loop+0x9e/0x130 [ 213.272110][ T6678] exit_to_user_mode_prepare+0xee/0x180 [ 213.277775][ T6678] syscall_exit_to_user_mode+0x16/0x40 [ 213.283269][ T6678] do_syscall_64+0x58/0xa0 [ 213.287721][ T6678] ? clear_bhb_loop+0x30/0x80 [ 213.292434][ T6678] ? clear_bhb_loop+0x30/0x80 [ 213.297148][ T6678] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.303092][ T6678] RIP: 0033:0x7f2b8e7cd559 [ 213.307536][ T6678] Code: Unable to access opcode bytes at RIP 0x7f2b8e7cd52f. [ 213.314926][ T6678] RSP: 002b:00007f2b8ca250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 213.323377][ T6678] RAX: 0000000000000001 RBX: 00007f2b8ea54fa8 RCX: 00007f2b8e7cd559 [ 213.331381][ T6678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b8ea54fac [ 213.339817][ T6678] RBP: 00007f2b8ea54fa0 R08: 0039b53a7f569622 R09: 0000000000000000 [ 213.347824][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.355832][ T6678] R13: 00007f2b8ea55038 R14: 00007ffe76e994d0 R15: 00007ffe76e995b8 [ 213.363856][ T6678] [ 213.437924][ T6682] FAULT_INJECTION: forcing a failure. [ 213.437924][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 213.466236][ T6682] CPU: 1 PID: 6682 Comm: syz.9.407 Not tainted syzkaller #0 [ 213.473703][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.483800][ T6682] Call Trace: [ 213.487116][ T6682] [ 213.490073][ T6682] dump_stack_lvl+0x188/0x250 [ 213.494795][ T6682] ? show_regs_print_info+0x20/0x20 [ 213.500029][ T6682] ? load_image+0x410/0x410 [ 213.504571][ T6682] ? __might_sleep+0xf0/0xf0 [ 213.509191][ T6682] ? __lock_acquire+0x7d40/0x7d40 [ 213.514261][ T6682] should_fail+0x383/0x4b0 [ 213.518719][ T6682] should_failslab+0x5/0x20 [ 213.523256][ T6682] slab_pre_alloc_hook+0x51/0xc0 [ 213.528260][ T6682] ? vm_area_dup+0x1e/0xb0 [ 213.532738][ T6682] kmem_cache_alloc+0x3d/0x280 [ 213.537637][ T6682] ? hugepage_vma_check+0x3f9/0x440 [ 213.542874][ T6682] vm_area_dup+0x1e/0xb0 [ 213.547149][ T6682] __split_vma+0xb1/0x410 [ 213.551516][ T6682] do_madvise+0x1d3a/0x2aa0 [ 213.556073][ T6682] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 213.561588][ T6682] ? verify_lock_unused+0x140/0x140 [ 213.566823][ T6682] ? verify_lock_unused+0x140/0x140 [ 213.572063][ T6682] ? do_futex+0xdc2/0x12b0 [ 213.576517][ T6682] ? vfs_write+0xaa6/0xd70 [ 213.581336][ T6682] ? __context_tracking_exit+0x4c/0x80 [ 213.586843][ T6682] ? __lock_acquire+0x7d40/0x7d40 [ 213.591924][ T6682] ? lock_chain_count+0x20/0x20 [ 213.596821][ T6682] __x64_sys_madvise+0xa2/0xb0 [ 213.601634][ T6682] do_syscall_64+0x4c/0xa0 [ 213.606091][ T6682] ? clear_bhb_loop+0x30/0x80 [ 213.610802][ T6682] ? clear_bhb_loop+0x30/0x80 [ 213.615539][ T6682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.621470][ T6682] RIP: 0033:0x7f2b8e7cd559 [ 213.625919][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.645561][ T6682] RSP: 002b:00007f2b8ca25028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 213.654009][ T6682] RAX: ffffffffffffffda RBX: 00007f2b8ea54fa0 RCX: 00007f2b8e7cd559 [ 213.662021][ T6682] RDX: 000000000000000e RSI: 0000000000400000 RDI: 0000200000c00000 [ 213.670009][ T6682] RBP: 00007f2b8e864ab8 R08: 0000000000000000 R09: 0000000000000000 [ 213.678001][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.685994][ T6682] R13: 00007f2b8ea55038 R14: 00007f2b8ea54fa0 R15: 00007ffe76e995b8 [ 213.694008][ T6682] SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=289 state=3 status=67 (errno 9: Bad file descriptor) [ 214.329745][ T4276] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.396463][ T4276] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.468604][ T4276] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.536972][ T4276] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.477480][ T4276] device hsr_slave_0 left promiscuous mode [ 215.484009][ T4276] device hsr_slave_1 left promiscuous mode [ 215.490311][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.497944][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.505931][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.513571][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.521198][ T4276] device bridge_slave_1 left promiscuous mode [ 215.527523][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.539480][ T4276] device bridge_slave_0 left promiscuous mode [ 215.546145][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.560734][ T4276] device veth1_macvtap left promiscuous mode [ 215.567269][ T4276] device veth0_macvtap left promiscuous mode [ 215.574526][ T4276] device veth1_vlan left promiscuous mode [ 215.580358][ T4276] device veth0_vlan left promiscuous mode [ 215.769394][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 215.786909][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 215.801215][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.820999][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.886932][ T4276] bond0 (unregistering): Released all slaves [ 217.071086][ T4276] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.118823][ T4276] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.198420][ T4276] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.246903][ T4276] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.346453][ T4276] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.408440][ T4276] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.473184][ T4276] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.528073][ T4276] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.659371][ T4276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.706729][ T4276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.759858][ T4276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.829752][ T4276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.240556][ T4276] device hsr_slave_0 left promiscuous mode [ 219.247841][ T4276] device hsr_slave_1 left promiscuous mode [ 219.254719][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.262513][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.270219][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.278104][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.286100][ T4276] device bridge_slave_1 left promiscuous mode [ 219.292696][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.301013][ T4276] device bridge_slave_0 left promiscuous mode [ 219.307990][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.320505][ T4276] device hsr_slave_0 left promiscuous mode [ 219.328214][ T4276] device hsr_slave_1 left promiscuous mode [ 219.334973][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.342856][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.350577][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.359278][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.367424][ T4276] device bridge_slave_1 left promiscuous mode [ 219.373727][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.382528][ T4276] device bridge_slave_0 left promiscuous mode [ 219.388924][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.400385][ T4276] device hsr_slave_0 left promiscuous mode [ 219.411363][ T4276] device hsr_slave_1 left promiscuous mode [ 219.418381][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.426204][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.435338][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.443169][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.450890][ T4276] device bridge_slave_1 left promiscuous mode [ 219.458686][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.468920][ T4276] device bridge_slave_0 left promiscuous mode [ 219.475464][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.490972][ T4276] device veth1_macvtap left promiscuous mode [ 219.497836][ T4276] device veth0_macvtap left promiscuous mode [ 219.504279][ T4276] device veth1_vlan left promiscuous mode [ 219.510099][ T4276] device veth0_vlan left promiscuous mode [ 219.517244][ T4276] device veth1_macvtap left promiscuous mode [ 219.523461][ T4276] device veth0_macvtap left promiscuous mode [ 219.529544][ T4276] device veth1_vlan left promiscuous mode [ 219.535475][ T4276] device veth0_vlan left promiscuous mode [ 219.544845][ T4276] device veth1_macvtap left promiscuous mode [ 219.550918][ T4276] device veth0_macvtap left promiscuous mode [ 219.557073][ T4276] device veth1_vlan left promiscuous mode [ 219.562946][ T4276] device veth0_vlan left promiscuous mode [ 219.673347][ T5864] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 219.678228][ T5423] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 219.685496][ T6037] cxacru 9-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 219.958619][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 219.973181][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 219.996275][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.015751][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.089997][ T4276] bond0 (unregistering): Released all slaves [ 220.179899][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 220.195884][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 220.209357][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.224415][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.300134][ T4276] bond0 (unregistering): Released all slaves [ 220.393496][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 220.407616][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 220.420726][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.437445][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.509225][ T4276] bond0 (unregistering): Released all slaves