last executing test programs: 8.70723989s ago: executing program 2 (id=211): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340), 0x0, 0x100, 0x9}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d", 0xb5}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.006599093s ago: executing program 3 (id=214): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a1982345", 0x40, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.817259329s ago: executing program 2 (id=215): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota']) chdir(&(0x7f0000000100)='./file0\x00') 6.79719977s ago: executing program 1 (id=216): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0x9f, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d", 0xb5}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.78890658s ago: executing program 0 (id=217): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.358437104s ago: executing program 2 (id=218): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 5.243389718s ago: executing program 0 (id=219): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a00), 0x0, 0x60010000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 5.235378308s ago: executing program 3 (id=220): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1b2084a, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000500)={0x50, 0x0, 0xfffffffffffffff4, {0x7, 0x29, 0x1007, 0x12510421, 0x3, 0x4, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cec}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0xf3, 0x4804182, 0x8, 0x7ff, 0x3, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.030829224s ago: executing program 1 (id=221): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.678731495s ago: executing program 1 (id=222): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50800000bb6b2d65"], 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(0xffffffffffffffff, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) 4.270404738s ago: executing program 3 (id=223): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @pix={0x1000000, 0xfff, 0x32315241, 0xfdc9192202aa791b, 0x4, 0x2, 0x5, 0x1, 0x1, 0x4, 0x0, 0x4}}) mknod$loop(0x0, 0xfff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x26, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0xd, '\x00', @data=0x13d, 0xa}]}) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) 3.993330807s ago: executing program 2 (id=224): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340), 0x0, 0x100, 0x9}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d", 0xb5}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.186528681s ago: executing program 1 (id=225): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a1982345", 0x40, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.185687372s ago: executing program 3 (id=226): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1b2084a, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000300000000000400030000000000100006000000"], 0x24, 0x2) 3.157283703s ago: executing program 0 (id=227): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.985299438s ago: executing program 3 (id=228): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota']) chdir(&(0x7f0000000100)='./file0\x00') 1.734916467s ago: executing program 3 (id=229): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a1982345", 0x40, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.689388598s ago: executing program 0 (id=230): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r4, 0x65283e1aaa2ddbb1, 0x10000000, 0x40, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x8000) 1.392243927s ago: executing program 1 (id=231): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.330262759s ago: executing program 2 (id=232): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1b2084a, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000500)={0x50, 0x0, 0xfffffffffffffff4, {0x7, 0x29, 0x1007, 0x12510421, 0x3, 0x4, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cec}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0xf3, 0x4804182, 0x8, 0x7ff, 0x3, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 557.159063ms ago: executing program 0 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 407.336828ms ago: executing program 1 (id=234): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50800000bb6b2d65"], 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(0xffffffffffffffff, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) 61.604269ms ago: executing program 0 (id=235): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @pix={0x1000000, 0xfff, 0x32315241, 0xfdc9192202aa791b, 0x4, 0x2, 0x5, 0x1, 0x1, 0x4, 0x0, 0x4}}) mknod$loop(0x0, 0xfff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x26, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0xd, '\x00', @data=0x13d, 0xa}]}) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 0s ago: executing program 2 (id=236): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a00), 0x0, 0x60010000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 79.939375][ T5761] cgroup: Unknown subsys name 'net' [ 80.073208][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.709020][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.502987][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.525891][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.544613][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.553848][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.564878][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.571376][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.579395][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.588359][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.597704][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.605755][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.625645][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.635079][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.642890][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.651435][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.659845][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.667250][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.669095][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.682756][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.690149][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.702621][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.717620][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.727135][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.735388][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.743571][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.236184][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 84.266967][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.307582][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 84.387018][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.488670][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.496511][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.503816][ T5782] bridge_slave_0: entered allmulticast mode [ 84.511870][ T5782] bridge_slave_0: entered promiscuous mode [ 84.558238][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.565682][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.572858][ T5782] bridge_slave_1: entered allmulticast mode [ 84.580333][ T5782] bridge_slave_1: entered promiscuous mode [ 84.647114][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.654395][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.661575][ T5773] bridge_slave_0: entered allmulticast mode [ 84.669427][ T5773] bridge_slave_0: entered promiscuous mode [ 84.687081][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.694245][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.701772][ T5781] bridge_slave_0: entered allmulticast mode [ 84.709599][ T5781] bridge_slave_0: entered promiscuous mode [ 84.728864][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.736146][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.743405][ T5773] bridge_slave_1: entered allmulticast mode [ 84.750689][ T5773] bridge_slave_1: entered promiscuous mode [ 84.779470][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.786813][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.793979][ T5781] bridge_slave_1: entered allmulticast mode [ 84.801518][ T5781] bridge_slave_1: entered promiscuous mode [ 84.811145][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.824805][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.846444][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.853638][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.861171][ T5777] bridge_slave_0: entered allmulticast mode [ 84.868873][ T5777] bridge_slave_0: entered promiscuous mode [ 84.912010][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.922036][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.929306][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.936974][ T5777] bridge_slave_1: entered allmulticast mode [ 84.944450][ T5777] bridge_slave_1: entered promiscuous mode [ 84.953435][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.967815][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.989071][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.033829][ T5782] team0: Port device team_slave_0 added [ 85.043285][ T5782] team0: Port device team_slave_1 added [ 85.072883][ T5773] team0: Port device team_slave_0 added [ 85.104141][ T5781] team0: Port device team_slave_0 added [ 85.113002][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.126412][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.137645][ T5773] team0: Port device team_slave_1 added [ 85.156354][ T5781] team0: Port device team_slave_1 added [ 85.163486][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.170640][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.196853][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.263104][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.270172][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.296929][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.330188][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.337536][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.364146][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.386541][ T5777] team0: Port device team_slave_0 added [ 85.393262][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.400459][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.426888][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.439534][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.450259][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.476707][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.510099][ T5777] team0: Port device team_slave_1 added [ 85.516699][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.523685][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.550060][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.582227][ T5782] hsr_slave_0: entered promiscuous mode [ 85.588938][ T5782] hsr_slave_1: entered promiscuous mode [ 85.651237][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.658686][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.685522][ T5778] Bluetooth: hci0: command tx timeout [ 85.685950][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.719187][ T5773] hsr_slave_0: entered promiscuous mode [ 85.729236][ T5773] hsr_slave_1: entered promiscuous mode [ 85.735836][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.743637][ T5773] Cannot create hsr debugfs directory [ 85.761796][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.768961][ T5778] Bluetooth: hci2: command tx timeout [ 85.768989][ T5785] Bluetooth: hci1: command tx timeout [ 85.769349][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.806067][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.844653][ T5778] Bluetooth: hci3: command tx timeout [ 85.872567][ T5777] hsr_slave_0: entered promiscuous mode [ 85.879036][ T5777] hsr_slave_1: entered promiscuous mode [ 85.886139][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.893791][ T5777] Cannot create hsr debugfs directory [ 85.923236][ T5781] hsr_slave_0: entered promiscuous mode [ 85.931031][ T5781] hsr_slave_1: entered promiscuous mode [ 85.938276][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.946079][ T5781] Cannot create hsr debugfs directory [ 86.389241][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.402924][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.427006][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.454115][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.497748][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.510682][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.522681][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.534731][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.618227][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.634129][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.648394][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.659166][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.753957][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.780269][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.796374][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.810821][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.895299][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.953879][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.022306][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.032363][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.039824][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.069536][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.076754][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.167998][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.201122][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.213057][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.220236][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.277556][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.284793][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.367158][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.389516][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.436533][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.443703][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.453952][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.461181][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.511950][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.602166][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.609388][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.662503][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.669742][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.764715][ T5778] Bluetooth: hci0: command tx timeout [ 87.845132][ T5778] Bluetooth: hci2: command tx timeout [ 87.845237][ T5785] Bluetooth: hci1: command tx timeout [ 87.924639][ T5785] Bluetooth: hci3: command tx timeout [ 88.046118][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.158753][ T5773] veth0_vlan: entered promiscuous mode [ 88.201162][ T5773] veth1_vlan: entered promiscuous mode [ 88.307821][ T5773] veth0_macvtap: entered promiscuous mode [ 88.321235][ T5773] veth1_macvtap: entered promiscuous mode [ 88.352916][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.395467][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.448467][ T5782] veth0_vlan: entered promiscuous mode [ 88.459235][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.482169][ T5782] veth1_vlan: entered promiscuous mode [ 88.500009][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.531796][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.541891][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.551590][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.560930][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.626869][ T5782] veth0_macvtap: entered promiscuous mode [ 88.641997][ T5782] veth1_macvtap: entered promiscuous mode [ 88.662212][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.688508][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.700573][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.712287][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.753089][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.765391][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.783483][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.796202][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.808156][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.817581][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.826761][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.844025][ T5781] veth0_vlan: entered promiscuous mode [ 88.892293][ T5781] veth1_vlan: entered promiscuous mode [ 88.903384][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.921151][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.025040][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.032938][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.106237][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.114125][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.186874][ T5777] veth0_vlan: entered promiscuous mode [ 89.195673][ T5781] veth0_macvtap: entered promiscuous mode [ 89.213369][ T5781] veth1_macvtap: entered promiscuous mode [ 89.238517][ T5777] veth1_vlan: entered promiscuous mode [ 89.245471][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.253349][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.328567][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.354767][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.365664][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.376712][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.405654][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.455185][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.473151][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.489286][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.500697][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.519423][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.552390][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.581424][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.654453][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.702965][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.845134][ T5785] Bluetooth: hci0: command tx timeout [ 89.948995][ T5785] Bluetooth: hci2: command tx timeout [ 89.988169][ T5778] Bluetooth: hci1: command tx timeout [ 90.005203][ T5785] Bluetooth: hci3: command tx timeout [ 90.340825][ T5777] veth0_macvtap: entered promiscuous mode [ 90.609452][ T5850] (syz.3.4,5850,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 90.618233][ T5850] (syz.3.4,5850,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 91.035163][ T5777] veth1_macvtap: entered promiscuous mode [ 91.482296][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.490857][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.948845][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.989687][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.007631][ T5785] Bluetooth: hci1: command tx timeout [ 92.013096][ T5785] Bluetooth: hci0: command tx timeout [ 92.018893][ T5774] Bluetooth: hci2: command tx timeout [ 92.084723][ T5774] Bluetooth: hci3: command tx timeout [ 92.096398][ T9] cfg80211: failed to load regulatory.db [ 92.472110][ T5852] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.481382][ T5852] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.493077][ T5852] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.502259][ T5852] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.692206][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.717050][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.743278][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.755376][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.767324][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.780370][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.799372][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.809866][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.825791][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.835815][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.846512][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.858539][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.908285][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.921127][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.930759][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.940484][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981262][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.002979][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.075660][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.125006][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.140661][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.242570][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.285178][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.294750][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 93.313732][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.343017][ T5814] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 93.382130][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.395922][ T5814] usb 1-1: Product: syz [ 93.400202][ T5814] usb 1-1: Manufacturer: syz [ 93.405364][ T5814] usb 1-1: SerialNumber: syz [ 93.420087][ T5814] usb 1-1: config 0 descriptor?? [ 93.432918][ T5814] hub 1-1:0.0: bad descriptor, ignoring hub [ 93.442364][ T5814] hub: probe of 1-1:0.0 failed with error -5 [ 93.461210][ T5814] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 93.529332][ T34] usb 1-1: Failed to submit usb control message: -71 [ 93.539787][ T34] usb 1-1: unable to send the bmi data to the device: -71 [ 93.547341][ T34] usb 1-1: unable to get target info from device [ 93.553865][ T34] usb 1-1: could not get target info (-71) [ 93.559828][ T34] usb 1-1: could not probe fw (-71) [ 93.574492][ T171] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.684253][ T28] audit: type=1326 audit(1781474738.582:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b63f9ce59 code=0x0 [ 93.794729][ T171] usb 2-1: Using ep0 maxpacket: 16 [ 94.720532][ T171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.734031][ T171] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 94.743641][ T171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.752007][ T171] usb 2-1: Product: syz [ 94.756560][ T171] usb 2-1: Manufacturer: syz [ 94.761203][ T171] usb 2-1: SerialNumber: syz [ 94.844084][ T171] usb 2-1: config 0 descriptor?? [ 94.927759][ T171] hub 2-1:0.0: bad descriptor, ignoring hub [ 94.939133][ T171] hub: probe of 2-1:0.0 failed with error -5 [ 95.026911][ T171] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 95.081977][ T12] usb 2-1: Failed to submit usb control message: -71 [ 95.094435][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 95.101628][ T12] usb 2-1: unable to get target info from device [ 95.108762][ T12] usb 2-1: could not get target info (-71) [ 95.116795][ T12] usb 2-1: could not probe fw (-71) [ 95.220542][ T5878] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 95.336972][ T27] usb 1-1: USB disconnect, device number 2 [ 96.054778][ T27] usb 2-1: USB disconnect, device number 2 [ 99.138223][ T5901] nbd: must specify an index to disconnect [ 99.148930][ T5901] process 'syz.3.14' launched './file0' with NULL argv: empty string added [ 99.623929][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 101.397861][ T28] audit: type=1326 audit(1781474746.302:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b63f9ce59 code=0x0 [ 101.697167][ T5924] (syz.0.17,5924,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 101.705815][ T5924] (syz.0.17,5924,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 102.639166][ T5931] fuse: Bad value for 'fd' [ 103.004409][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.079830][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.204429][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 103.345182][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.513091][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.180618][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.220075][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.555002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.738004][ T23] usb 2-1: config 0 descriptor?? [ 105.828448][ T23] usb 2-1: can't set config #0, error -71 [ 105.895842][ T23] usb 2-1: USB disconnect, device number 3 [ 106.859485][ T5967] syz.3.30[5967]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 106.917249][ T5967] loop3: detected capacity change from 0 to 164 [ 107.026824][ T5967] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 108.114509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 108.524569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.905221][ T6067] fuse: Bad value for 'fd' [ 115.794954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.723233][ T6102] fuse: Bad value for 'fd' [ 122.705075][ T28] audit: type=1326 audit(1781474767.612:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a7fd9ce59 code=0x0 [ 123.591372][ T6186] fuse: Unknown parameter '0x0000000000000003' [ 124.980710][ T6208] loop1: detected capacity change from 0 to 164 [ 125.054148][ T6208] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 126.444611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 127.099154][ T6214] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 127.109980][ T6214] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 127.119630][ T6214] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 127.208406][ T6214] syz.3.68 (6214) used greatest stack depth: 20624 bytes left [ 127.255620][ T28] audit: type=1800 audit(1781474772.002:5): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.68" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 128.953579][ T6240] (syz.2.71,6240,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 128.962174][ T6240] (syz.2.71,6240,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 130.148955][ T6247] fuse: Unknown parameter '0x0000000000000003' [ 130.158235][ T6244] (syz.0.72,6244,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 130.166880][ T6244] (syz.0.72,6244,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 131.906115][ T6264] (syz.0.76,6264,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 131.914871][ T6264] (syz.0.76,6264,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 133.053889][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060964][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.838199][ T6299] fuse: Unknown parameter '0x0000000000000003' [ 136.453027][ T6038] Bluetooth: (null): Invalid header checksum [ 136.477510][ T6038] Bluetooth: (null): Invalid header checksum [ 136.567480][ T6038] Bluetooth: (null): Invalid header checksum [ 136.747746][ T12] Bluetooth: (null): Invalid header checksum [ 136.860267][ T12] Bluetooth: (null): Invalid header checksum [ 136.975515][ T12] Bluetooth: (null): Invalid header checksum [ 137.088633][ T12] Bluetooth: (null): Invalid header checksum [ 137.143187][ T12] Bluetooth: (null): Invalid header checksum [ 137.168608][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.238140][ T6025] Bluetooth: (null): Invalid header checksum [ 137.261687][ T6319] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.343321][ T6319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.392465][ T6025] Bluetooth: (null): Invalid header checksum [ 137.567947][ T6319] syz.0.89 (6319) used greatest stack depth: 20584 bytes left [ 137.711613][ T6335] fuse: Unknown parameter '0x0000000000000003' [ 138.224562][ T5763] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.434370][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 138.448693][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.477196][ T5763] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 138.494329][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.519546][ T5763] usb 2-1: Product: syz [ 138.529136][ T5763] usb 2-1: Manufacturer: syz [ 138.533810][ T5763] usb 2-1: SerialNumber: syz [ 138.555537][ T5763] usb 2-1: config 0 descriptor?? [ 138.569704][ T5763] hub 2-1:0.0: bad descriptor, ignoring hub [ 138.579236][ T5763] hub: probe of 2-1:0.0 failed with error -5 [ 138.608317][ T5763] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 138.640590][ T6007] usb 2-1: Failed to submit usb control message: -71 [ 138.674411][ T6007] usb 2-1: unable to send the bmi data to the device: -71 [ 138.694363][ T6007] usb 2-1: unable to get target info from device [ 138.706805][ T6007] usb 2-1: could not get target info (-71) [ 138.713131][ T6007] usb 2-1: could not probe fw (-71) [ 139.734840][ T968] usb 2-1: USB disconnect, device number 4 [ 140.946478][ T6379] fuse: Unknown parameter '0x0000000000000003' [ 144.109448][ T6415] loop1: detected capacity change from 0 to 164 [ 144.172726][ T6415] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 144.416864][ T6422] fuse: Unknown parameter '0x0000000000000003' [ 144.715104][ T6427] Zero length message leads to an empty skb [ 148.658716][ T968] libceph: connect (1)[c::]:6789 error -101 [ 148.678294][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 148.830164][ T6458] ceph: No mds server is up or the cluster is laggy [ 149.523743][ T6469] fuse: Unknown parameter 'fd0x0000000000000003' [ 149.744421][ T968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.953585][ T6473] (syz.1.129,6473,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 149.963025][ T6473] (syz.1.129,6473,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 150.188389][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 150.373771][ T968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.633440][ T968] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 150.693961][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.720267][ T968] usb 3-1: Product: syz [ 150.740682][ T968] usb 3-1: Manufacturer: syz [ 150.771838][ T968] usb 3-1: SerialNumber: syz [ 150.842900][ T968] usb 3-1: config 0 descriptor?? [ 150.897838][ T968] hub 3-1:0.0: bad descriptor, ignoring hub [ 150.903847][ T968] hub: probe of 3-1:0.0 failed with error -5 [ 151.222578][ T968] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 152.055452][ T6034] usb 3-1: Failed to submit usb control message: -71 [ 152.062807][ T6034] usb 3-1: unable to send the bmi data to the device: -71 [ 152.071690][ T6034] usb 3-1: unable to get target info from device [ 152.089156][ T6034] usb 3-1: could not get target info (-71) [ 152.119761][ T6034] usb 3-1: could not probe fw (-71) [ 152.374529][ T5814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.758936][ T5818] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.805566][ T6495] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 153.815116][ T6495] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 153.824817][ T6495] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 153.918846][ T28] audit: type=1800 audit(1781474798.712:6): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.135" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 153.940474][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 153.950284][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.972338][ T5814] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 153.993731][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.011625][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 154.020232][ T5814] usb 1-1: Product: syz [ 154.038504][ T5814] usb 1-1: Manufacturer: syz [ 154.053715][ T5814] usb 1-1: SerialNumber: syz [ 154.064696][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.087490][ T5814] usb 1-1: config 0 descriptor?? [ 154.110643][ T5818] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 154.125142][ T5825] usb 3-1: USB disconnect, device number 2 [ 154.126780][ T5814] hub 1-1:0.0: bad descriptor, ignoring hub [ 154.154447][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.162694][ T5818] usb 2-1: Product: syz [ 154.170222][ T5818] usb 2-1: Manufacturer: syz [ 154.175108][ T5814] hub: probe of 1-1:0.0 failed with error -5 [ 154.189841][ T5818] usb 2-1: SerialNumber: syz [ 154.206253][ T5818] usb 2-1: config 0 descriptor?? [ 154.233352][ T5818] hub 2-1:0.0: bad descriptor, ignoring hub [ 154.240244][ T5814] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 154.258557][ T5818] hub: probe of 2-1:0.0 failed with error -5 [ 154.272514][ T6025] usb 1-1: Failed to submit usb control message: -71 [ 154.282356][ T6025] usb 1-1: unable to send the bmi data to the device: -71 [ 154.290289][ T6025] usb 1-1: unable to get target info from device [ 154.297592][ T6025] usb 1-1: could not get target info (-71) [ 154.303461][ T6025] usb 1-1: could not probe fw (-71) [ 154.338917][ T5818] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 154.427665][ T6025] usb 2-1: Failed to submit usb control message: -71 [ 154.434933][ T6025] usb 2-1: could not get target info (-71) [ 154.440805][ T6025] usb 2-1: could not probe fw (-71) [ 154.464778][ T5825] usb 1-1: USB disconnect, device number 3 [ 155.374877][ T9] usb 2-1: USB disconnect, device number 5 [ 155.552974][ T6526] loop0: detected capacity change from 0 to 164 [ 155.629305][ T6526] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 156.042535][ T6533] fuse: Unknown parameter 'fd0x0000000000000003' [ 156.754456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 157.462065][ T6546] syz.3.144 (6546) used greatest stack depth: 17896 bytes left [ 158.375390][ T6552] nbd: must specify an index to disconnect [ 161.216133][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.253295][ T6569] fuse: Unknown parameter 'fd0x0000000000000003' [ 161.414458][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 161.427269][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.437868][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.461534][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 161.473245][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.486872][ T9] usb 1-1: Product: syz [ 161.491126][ T9] usb 1-1: Manufacturer: syz [ 161.498954][ T9] usb 1-1: SerialNumber: syz [ 161.508603][ T9] usb 1-1: config 0 descriptor?? [ 161.516935][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.524104][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 161.562788][ T9] ath10k_warn: 2 callbacks suppressed [ 161.562815][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 161.597317][ T12] usb 1-1: Failed to submit usb control message: -71 [ 161.604622][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 161.625807][ T12] usb 1-1: unable to get target info from device [ 161.644546][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 161.645068][ T12] usb 1-1: could not get target info (-71) [ 161.660816][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.688348][ T12] usb 1-1: could not probe fw (-71) [ 161.695241][ T5814] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 161.722569][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.750415][ T5814] usb 4-1: Product: syz [ 161.758543][ T5814] usb 4-1: Manufacturer: syz [ 161.768041][ T5814] usb 4-1: SerialNumber: syz [ 161.794223][ T5814] usb 4-1: config 0 descriptor?? [ 161.814679][ T5814] hub 4-1:0.0: bad descriptor, ignoring hub [ 161.830843][ T5814] hub: probe of 4-1:0.0 failed with error -5 [ 161.864629][ T5814] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 162.006017][ T6034] usb 4-1: Failed to submit usb control message: -71 [ 162.013068][ T6034] usb 4-1: unable to send the bmi data to the device: -71 [ 162.446206][ T6034] usb 4-1: unable to get target info from device [ 162.541498][ T6034] usb 4-1: could not get target info (-71) [ 162.748215][ T6034] usb 4-1: could not probe fw (-71) [ 162.966960][ T5815] usb 1-1: USB disconnect, device number 4 [ 163.612890][ T6594] autofs4:pid:6594:autofs_fill_super: called with bogus options [ 164.555306][ T5814] usb 4-1: USB disconnect, device number 2 [ 164.824364][ T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.034333][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 165.046940][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.074340][ T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.124589][ T968] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.144328][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.175471][ T968] usb 2-1: config 0 descriptor?? [ 167.304298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.344297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 167.404287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 167.424289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 168.647928][ T968] usbhid 2-1:0.0: can't add hid device: -71 [ 168.654018][ T968] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.765500][ T968] usb 2-1: USB disconnect, device number 6 [ 168.901879][ T6639] loop1: detected capacity change from 0 to 164 [ 169.027852][ T6639] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 172.588783][ T6675] nbd: must specify an index to disconnect [ 174.970127][ T6701] loop2: detected capacity change from 0 to 164 [ 175.026227][ T6701] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 176.641648][ T6726] nbd: must specify an index to disconnect [ 180.632739][ T6769] nbd: must specify an index to disconnect [ 180.687162][ T6769] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 185.545372][ T6815] nbd: must specify an index to disconnect [ 186.003225][ T6815] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 189.325545][ T6861] nbd: must specify an index to disconnect [ 189.886704][ T6861] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 193.545862][ T6912] nbd: must specify an index to disconnect [ 193.560034][ T6912] ================================================================== [ 193.568163][ T6912] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 193.575865][ T6912] Read of size 8 at addr ffff888142b53218 by task syz.0.235/6912 [ 193.583611][ T6912] [ 193.585984][ T6912] CPU: 1 PID: 6912 Comm: syz.0.235 Not tainted syzkaller #0 [ 193.593298][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.603400][ T6912] Call Trace: [ 193.606720][ T6912] [ 193.609686][ T6912] dump_stack_lvl+0x18c/0x250 [ 193.614411][ T6912] ? __lock_acquire+0x7d40/0x7d40 [ 193.619477][ T6912] ? show_regs_print_info+0x20/0x20 [ 193.624717][ T6912] ? load_image+0x420/0x420 [ 193.629258][ T6912] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 193.634806][ T6912] ? __virt_addr_valid+0x18c/0x540 [ 193.639957][ T6912] ? __virt_addr_valid+0x469/0x540 [ 193.645109][ T6912] print_report+0xa8/0x210 [ 193.649604][ T6912] ? dvb_device_open+0xca/0x370 [ 193.654509][ T6912] kasan_report+0x117/0x150 [ 193.659060][ T6912] ? dvb_device_open+0xca/0x370 [ 193.663955][ T6912] dvb_device_open+0xca/0x370 [ 193.668683][ T6912] chrdev_open+0x5cc/0x6a0 [ 193.673158][ T6912] ? cd_forget+0x160/0x160 [ 193.677618][ T6912] ? fsnotify_perm+0x3ed/0x5e0 [ 193.682419][ T6912] ? cd_forget+0x160/0x160 [ 193.686872][ T6912] do_dentry_open+0x8c6/0x1500 [ 193.691692][ T6912] path_openat+0x27f1/0x3230 [ 193.696324][ T6912] ? finish_task_switch+0x265/0x8f0 [ 193.701575][ T6912] ? verify_lock_unused+0x140/0x140 [ 193.706828][ T6912] ? do_filp_open+0x430/0x430 [ 193.711553][ T6912] ? asan.module_dtor+0x20/0x20 [ 193.716457][ T6912] do_filp_open+0x1f5/0x430 [ 193.721000][ T6912] ? vfs_tmpfile+0x490/0x490 [ 193.725685][ T6912] ? _raw_spin_unlock+0x28/0x40 [ 193.730581][ T6912] ? alloc_fd+0x58f/0x630 [ 193.734966][ T6912] do_sys_openat2+0x134/0x1d0 [ 193.739687][ T6912] ? do_sys_open+0xe0/0xe0 [ 193.744145][ T6912] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 193.750166][ T6912] ? lock_chain_count+0x20/0x20 [ 193.755058][ T6912] __x64_sys_openat+0x139/0x160 [ 193.759957][ T6912] do_syscall_64+0x55/0xb0 [ 193.764412][ T6912] ? clear_bhb_loop+0x40/0x90 [ 193.769130][ T6912] ? clear_bhb_loop+0x40/0x90 [ 193.773839][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.779777][ T6912] RIP: 0033:0x7f184655d68e [ 193.784243][ T6912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.803894][ T6912] RSP: 002b:00007f18473dfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.812348][ T6912] RAX: ffffffffffffffda RBX: 00007f18473e06c0 RCX: 00007f184655d68e [ 193.820359][ T6912] RDX: 0000000000000002 RSI: 00007f18473dfc00 RDI: ffffffffffffff9c [ 193.828371][ T6912] RBP: 00007f18473dfc00 R08: 0000000000000000 R09: 0000000000000000 [ 193.836420][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 193.844430][ T6912] R13: 00007f1846816218 R14: 00007f1846816180 R15: 00007ffc306c4768 [ 193.852444][ T6912] [ 193.855499][ T6912] [ 193.857852][ T6912] Allocated by task 1: [ 193.861962][ T6912] kasan_set_track+0x4e/0x70 [ 193.866597][ T6912] __kasan_kmalloc+0x8f/0xa0 [ 193.871234][ T6912] dvb_register_device+0x2fd/0x2210 [ 193.876480][ T6912] dvb_register_frontend+0x649/0x930 [ 193.881805][ T6912] vidtv_bridge_probe+0x9ab/0xf80 [ 193.886861][ T6912] platform_probe+0x13b/0x1c0 [ 193.891578][ T6912] really_probe+0x25b/0xb20 [ 193.896121][ T6912] __driver_probe_device+0x1ef/0x390 [ 193.901444][ T6912] driver_probe_device+0x4f/0x420 [ 193.906511][ T6912] __driver_attach+0x451/0x6e0 [ 193.911312][ T6912] bus_for_each_dev+0x235/0x2b0 [ 193.916195][ T6912] bus_add_driver+0x340/0x630 [ 193.920903][ T6912] driver_register+0x23a/0x310 [ 193.925704][ T6912] vidtv_bridge_init+0x3d/0x70 [ 193.930502][ T6912] do_one_initcall+0x242/0x790 [ 193.935309][ T6912] do_initcall_level+0x137/0x1f0 [ 193.940296][ T6912] do_initcalls+0x69/0xd0 [ 193.944670][ T6912] kernel_init_freeable+0x3ed/0x580 [ 193.949913][ T6912] kernel_init+0x1d/0x1c0 [ 193.954274][ T6912] ret_from_fork+0x48/0x80 [ 193.958726][ T6912] ret_from_fork_asm+0x11/0x20 [ 193.963528][ T6912] [ 193.965877][ T6912] Freed by task 6861: [ 193.969880][ T6912] kasan_set_track+0x4e/0x70 [ 193.974503][ T6912] kasan_save_free_info+0x2e/0x50 [ 193.979571][ T6912] ____kasan_slab_free+0x126/0x1e0 [ 193.984758][ T6912] slab_free_freelist_hook+0x130/0x1a0 [ 193.990248][ T6912] __kmem_cache_free+0xba/0x1e0 [ 193.995145][ T6912] dvb_device_open+0x2ee/0x370 [ 193.999955][ T6912] chrdev_open+0x5cc/0x6a0 [ 194.004405][ T6912] do_dentry_open+0x8c6/0x1500 [ 194.009209][ T6912] path_openat+0x27f1/0x3230 [ 194.013866][ T6912] do_filp_open+0x1f5/0x430 [ 194.018406][ T6912] do_sys_openat2+0x134/0x1d0 [ 194.023117][ T6912] __x64_sys_openat+0x139/0x160 [ 194.028002][ T6912] do_syscall_64+0x55/0xb0 [ 194.032462][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.038407][ T6912] [ 194.040764][ T6912] The buggy address belongs to the object at ffff888142b53200 [ 194.040764][ T6912] which belongs to the cache kmalloc-256 of size 256 [ 194.054864][ T6912] The buggy address is located 24 bytes inside of [ 194.054864][ T6912] freed 256-byte region [ffff888142b53200, ffff888142b53300) [ 194.068615][ T6912] [ 194.070974][ T6912] The buggy address belongs to the physical page: [ 194.077447][ T6912] page:ffffea00050ad480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142b52 [ 194.087744][ T6912] head:ffffea00050ad480 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.096739][ T6912] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 194.104856][ T6912] page_type: 0xffffffff() [ 194.109223][ T6912] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 194.117838][ T6912] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 194.126446][ T6912] page dumped because: kasan: bad access detected [ 194.132901][ T6912] page_owner tracks the page as allocated [ 194.138642][ T6912] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18746736798, free_ts 0 [ 194.158394][ T6912] post_alloc_hook+0x1c1/0x200 [ 194.163207][ T6912] get_page_from_freelist+0x1951/0x19e0 [ 194.168780][ T6912] __alloc_pages+0x1f0/0x460 [ 194.173398][ T6912] alloc_page_interleave+0x24/0x1e0 [ 194.178625][ T6912] alloc_slab_page+0x5d/0x160 [ 194.183420][ T6912] new_slab+0x87/0x2d0 [ 194.187539][ T6912] ___slab_alloc+0xc5d/0x12f0 [ 194.192265][ T6912] __kmem_cache_alloc_node+0x19e/0x250 [ 194.197765][ T6912] kmalloc_trace+0x2a/0xe0 [ 194.202231][ T6912] bus_add_driver+0x162/0x630 [ 194.206937][ T6912] driver_register+0x23a/0x310 [ 194.211734][ T6912] usb_register_driver+0x206/0x3d0 [ 194.216878][ T6912] uvc_init+0x27/0x50 [ 194.220894][ T6912] do_one_initcall+0x242/0x790 [ 194.225707][ T6912] do_initcall_level+0x137/0x1f0 [ 194.230688][ T6912] do_initcalls+0x69/0xd0 [ 194.235070][ T6912] page_owner free stack trace missing [ 194.240479][ T6912] [ 194.242837][ T6912] Memory state around the buggy address: [ 194.248529][ T6912] ffff888142b53100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.256635][ T6912] ffff888142b53180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.264723][ T6912] >ffff888142b53200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.272808][ T6912] ^ [ 194.277687][ T6912] ffff888142b53280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.285780][ T6912] ffff888142b53300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.293870][ T6912] ================================================================== [ 194.314221][ T6912] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.321486][ T6912] CPU: 1 PID: 6912 Comm: syz.0.235 Not tainted syzkaller #0 [ 194.328809][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.338900][ T6912] Call Trace: [ 194.342207][ T6912] [ 194.345178][ T6912] dump_stack_lvl+0x18c/0x250 [ 194.349900][ T6912] ? show_regs_print_info+0x20/0x20 [ 194.355151][ T6912] ? load_image+0x420/0x420 [ 194.359687][ T6912] panic+0x2dc/0x730 [ 194.363628][ T6912] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.369834][ T6912] ? bpf_jit_dump+0xd0/0xd0 [ 194.374387][ T6912] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 194.380409][ T6912] ? _raw_spin_unlock+0x40/0x40 [ 194.385310][ T6912] ? dvb_device_open+0xca/0x370 [ 194.390243][ T6912] check_panic_on_warn+0x84/0xa0 [ 194.395225][ T6912] ? dvb_device_open+0xca/0x370 [ 194.400139][ T6912] end_report+0x6f/0x130 [ 194.404420][ T6912] kasan_report+0x128/0x150 [ 194.408960][ T6912] ? dvb_device_open+0xca/0x370 [ 194.413870][ T6912] dvb_device_open+0xca/0x370 [ 194.418591][ T6912] chrdev_open+0x5cc/0x6a0 [ 194.423043][ T6912] ? cd_forget+0x160/0x160 [ 194.427493][ T6912] ? fsnotify_perm+0x3ed/0x5e0 [ 194.432288][ T6912] ? cd_forget+0x160/0x160 [ 194.436737][ T6912] do_dentry_open+0x8c6/0x1500 [ 194.441517][ T6912] path_openat+0x27f1/0x3230 [ 194.446125][ T6912] ? finish_task_switch+0x265/0x8f0 [ 194.451341][ T6912] ? verify_lock_unused+0x140/0x140 [ 194.456552][ T6912] ? do_filp_open+0x430/0x430 [ 194.461237][ T6912] ? asan.module_dtor+0x20/0x20 [ 194.466129][ T6912] do_filp_open+0x1f5/0x430 [ 194.470639][ T6912] ? vfs_tmpfile+0x490/0x490 [ 194.475241][ T6912] ? _raw_spin_unlock+0x28/0x40 [ 194.480107][ T6912] ? alloc_fd+0x58f/0x630 [ 194.484450][ T6912] do_sys_openat2+0x134/0x1d0 [ 194.489132][ T6912] ? do_sys_open+0xe0/0xe0 [ 194.493552][ T6912] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 194.499554][ T6912] ? lock_chain_count+0x20/0x20 [ 194.504445][ T6912] __x64_sys_openat+0x139/0x160 [ 194.509344][ T6912] do_syscall_64+0x55/0xb0 [ 194.511616][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.511760][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.526275][ T6912] ? clear_bhb_loop+0x40/0x90 [ 194.530965][ T6912] ? clear_bhb_loop+0x40/0x90 [ 194.535653][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.541573][ T6912] RIP: 0033:0x7f184655d68e [ 194.546014][ T6912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.565651][ T6912] RSP: 002b:00007f18473dfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.574070][ T6912] RAX: ffffffffffffffda RBX: 00007f18473e06c0 RCX: 00007f184655d68e [ 194.582046][ T6912] RDX: 0000000000000002 RSI: 00007f18473dfc00 RDI: ffffffffffffff9c [ 194.590026][ T6912] RBP: 00007f18473dfc00 R08: 0000000000000000 R09: 0000000000000000 [ 194.598006][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 194.606005][ T6912] R13: 00007f1846816218 R14: 00007f1846816180 R15: 00007ffc306c4768 [ 194.614008][ T6912] [ 194.617276][ T6912] Kernel Offset: disabled [ 194.621613][ T6912] Rebooting in 86400 seconds..