last executing test programs: 2m47.11661611s ago: executing program 0 (id=284): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001bc0)) syz_emit_vhci(0x0, 0x11) r1 = socket(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendfile(r1, r2, 0x0, 0x11000002) sendmmsg$inet(r1, &(0x7f0000000140), 0x0, 0x10) utime(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000240)={[{@nolazytime}, {@data_err_ignore}, {@prjquota}, {@journal_checksum}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xc5ee229d4f698ccc}}, {@jqfmt_vfsold}, {@dax_inode}]}, 0x1, 0x551, &(0x7f0000001600)="$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") 2m45.328101066s ago: executing program 0 (id=288): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = syz_open_procfs(0x0, 0x0) r2 = socket(0x18, 0x0, 0x1) sendfile(r2, r1, 0x0, 0x8) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) 2m42.509757662s ago: executing program 0 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000000, 0x7, 0x449c, 0x401, 0xa, 0x3, 0x1, 0x10000000000009, 0x4, 0xffffffffffffff81, 0xb218, 0xe74, 0x0, 0x8000000000000000, 0x7], 0xd000, 0x2a0706}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.39483964s ago: executing program 0 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x111) write$cgroup_int(r1, &(0x7f0000000000)=0x3, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@cgroup=r6, 0x7, 0x1, 0x0, 0x0, 0xfffffffffffffd3b, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 2m38.095740569s ago: executing program 0 (id=315): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000400)="a0b7f4681b2c5a98568dcde245c59f04ad5c8c27c22f55a05985de53f9d50647958899b3909b4f26a0115aae78e12e5844470229939cfdba9360cbc7a19e7b5a87dcd9a0309cb46e8746b5ffccdc3aba786d0d42942ddaf3766a6f9f503048effc9ad53dd3b0c97ee0fd04db964d16557648a9b0a27a2e6130c3", 0x7a, 0x4000054, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000240)={&(0x7f0000001000)=[0x3, 0xfc, 0x7, 0xa812, 0x1, 0xa, 0x2866, 0x1, 0x5, 0x178, 0xff, 0x10, 0x3, 0x4, 0x200, 0xffff, 0x4, 0x204c, 0xe, 0x0, 0x3, 0x83, 0x1, 0x7fffffff, 0x8, 0x80, 0x6, 0x8, 0x4, 0x7, 0x80, 0x6, 0x80000000, 0x9, 0x7, 0x1, 0x6, 0x7fff, 0x5, 0x10, 0xffff, 0x80000001, 0x8, 0x6, 0x9, 0x81, 0xcc, 0x0, 0x5, 0x2, 0xcd0, 0x8, 0xfffffffe, 0x7, 0x6, 0x2, 0x4, 0x5, 0xffffffff, 0x7, 0x66, 0x101, 0xdda9, 0xa, 0x7fff, 0x3ff, 0x6c, 0x4, 0x8e1, 0x5, 0x16842694, 0xa3, 0x5, 0x81, 0x306, 0x4, 0x4, 0x4, 0x2, 0x0, 0x9, 0x0, 0xd, 0x7, 0x1, 0x1, 0x10b, 0x6, 0x80, 0xa, 0x3ff, 0x1, 0x8, 0xfffffffa, 0x4, 0x10001, 0x7, 0x7a9d, 0x8, 0x10001, 0x9, 0x5, 0x0, 0x9, 0x8, 0xc886, 0xfffffffe, 0x456f7a28, 0x400, 0x6, 0x4, 0xd5e, 0x25fd, 0x9, 0x646c, 0x7d, 0x2, 0x5, 0x0, 0x7, 0x10001, 0x7, 0x3, 0x8, 0x8, 0x8, 0x3, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4d, 0x8, 0x3, 0x9, 0x8, 0x5, 0x831, 0x1, 0x1, 0x3, 0x15f46af2, 0x27, 0x88b1, 0x9, 0x8000, 0x9, 0x3, 0x8, 0x3ff, 0x6, 0x8, 0x80000001, 0x5, 0x9, 0x6f, 0x5, 0x10000, 0x1, 0x4, 0x5, 0x6, 0x8001, 0x28ca, 0x800, 0x9, 0x7, 0x6, 0x9, 0x6, 0x253c, 0x5, 0x1, 0x2185, 0x0, 0x3, 0x7, 0x9, 0xf0, 0x3, 0xec00, 0x101, 0x5, 0x2, 0x2, 0xfffffff8, 0x9, 0x7fffffff, 0xc, 0x4, 0x4, 0x400, 0xe, 0x6, 0x4, 0xe, 0x200, 0x80000000, 0x8, 0x1, 0xf, 0x47e9, 0xffffffff, 0x6, 0x5, 0x1, 0x7, 0x9, 0x9, 0xff, 0x101, 0x2, 0xde, 0x200, 0xcc, 0x6, 0x3, 0x40000, 0x46, 0xfffffff3, 0x101, 0x8, 0x80, 0xaf7, 0x1, 0x6, 0x2, 0x80000001, 0xfffffff8, 0x8, 0x80000001, 0x20ab, 0x0, 0xc, 0xfffffff4, 0x10000, 0x7, 0x401, 0x10000, 0x3, 0x5, 0x9, 0xfffffff3, 0xffffaa3e, 0x2, 0x200, 0x7, 0x6, 0x8, 0x9, 0x7, 0x6, 0x5, 0x1, 0x8, 0xfff, 0x0, 0x2, 0x10001, 0x4, 0x7, 0x1, 0x401, 0x2, 0x7d, 0x101, 0x8, 0x8001, 0x3, 0x1c2, 0x3, 0x0, 0x4902, 0x81, 0x7, 0xff, 0x5, 0x4, 0x8, 0x398c, 0x3457, 0x0, 0x6, 0x8, 0x0, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0x9, 0x5, 0x6, 0x10001, 0x1, 0xd8d6, 0xfffffffd, 0x0, 0x2, 0x8666, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4, 0x4, 0x6ddb, 0x0, 0x0, 0x2, 0x9, 0x8, 0x2, 0xfecd, 0x3cf7, 0xc232, 0x2, 0x6, 0xa, 0x1, 0x4, 0x0, 0xfff, 0xe70e, 0xc, 0x81, 0xa, 0x60, 0xfffffffd, 0x7fffffff, 0x627037ff, 0x0, 0x9, 0x4e, 0x4, 0x2d, 0x6, 0x9, 0x1, 0x8001, 0x28c66e0e, 0x0, 0x7fffffff, 0x7fff, 0x8001, 0x0, 0xfffffffb, 0x6, 0x0, 0x47b7, 0x45, 0x5, 0xcb, 0x0, 0x0, 0x2, 0x7, 0x9, 0x4, 0x34c, 0x2, 0x6, 0x2, 0x7, 0x85d3, 0xfffffff8, 0xfffffffe, 0x58, 0x6, 0x3ff, 0x0, 0x1, 0x40, 0x2, 0x8001, 0x3, 0x0, 0x100, 0x40, 0x7, 0x8, 0x3, 0xfffffff8, 0x9, 0xfb, 0x6, 0xdaf40614, 0x4, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0x7f, 0x7, 0x8, 0x8629, 0x2, 0x8, 0x4, 0x7ff, 0x1, 0x7f, 0xd63, 0xfffffffd, 0x101, 0x6, 0x3, 0x10a507f1, 0x5, 0x7fffffff, 0x1, 0x10000000, 0x5, 0x1000, 0xfff, 0x0, 0xc444, 0x3, 0xa0d3, 0x1, 0xe, 0x1, 0xfffffffa, 0x4, 0xb4e5, 0x4, 0x3, 0x6, 0x100, 0x657d089b, 0x4, 0x6, 0x2365, 0x6, 0x4423ef34, 0x2, 0x1, 0xbc1, 0xff, 0xac5, 0x4, 0x7, 0x5, 0x3, 0xb89, 0xb8b7, 0x0, 0x1000, 0x7, 0x7, 0x4, 0x2, 0xb, 0xfc5a, 0x10001, 0x1d, 0x4434, 0xad9759c, 0x4, 0x7, 0x6, 0x52e, 0xe, 0x80000001, 0x9, 0x5cde, 0x80000001, 0x5, 0xc6b7c933, 0x0, 0x400, 0x1, 0x2, 0x7f, 0x2, 0x3, 0x2, 0xdce, 0x35d, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x5816, 0x4, 0x1400e336, 0x7, 0x0, 0xb, 0x7fffffff, 0x6, 0x40, 0x3, 0x8001, 0x5, 0xff, 0x36, 0x7, 0x20be51fd, 0x3525, 0xffffff4d, 0x3, 0x7, 0x5, 0x3, 0x1000, 0x7, 0x6, 0x3, 0x2, 0x6, 0xfff, 0xd, 0x7, 0xb, 0x3, 0x100, 0x2, 0x9, 0x3d2, 0x10000, 0x3, 0x3, 0x9, 0x3, 0x1ff, 0x100, 0x8, 0x7bbc, 0xa89, 0x8, 0x100, 0x80000, 0x0, 0x4, 0xff, 0x4, 0xe, 0x6, 0x0, 0xffff, 0x8000, 0xec74, 0x6, 0x6, 0xc23, 0x6, 0x8, 0xfff, 0xe, 0x10, 0x7, 0x80000001, 0x1, 0x32, 0xb19c, 0x0, 0x0, 0x6, 0xb, 0x8, 0xbf6, 0x85, 0x21b, 0x8, 0x9, 0x4, 0x7, 0x4, 0x81, 0x4, 0xb3b5, 0xd, 0x8e3, 0xb3, 0x4, 0x2, 0xfffffffd, 0x3, 0xc0000000, 0x18, 0x5, 0x6, 0x100, 0x2, 0xf4f7, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x8b7, 0x80000001, 0x7c7f, 0x8001, 0x12, 0x5, 0xc400, 0xa, 0xc, 0x1fc, 0x800, 0xfffffffc, 0x7, 0x8, 0x2, 0x6, 0x2, 0x8, 0x0, 0x7, 0x3, 0x3, 0xbe, 0x0, 0x100, 0x6, 0x7f, 0x7c, 0xfffffffe, 0x3d, 0x8, 0x1, 0x7, 0x4, 0xfffff000, 0x2, 0x7f, 0x0, 0x4, 0x9, 0x5, 0x9, 0x3, 0x5, 0x4996, 0x6, 0x2, 0x800, 0x80, 0x4, 0xf83e, 0x10000, 0x7, 0x1, 0x8b, 0x6, 0x2, 0x4, 0x51, 0xc, 0x0, 0xfff, 0xcf6b, 0x0, 0x9, 0x3, 0x5c, 0x4, 0x100000, 0x7ff, 0xffffffff, 0x5f0b, 0x5, 0x8, 0x8000, 0x27, 0x9, 0x40, 0x7fff, 0xf, 0xffffffff, 0x1, 0x3, 0x6, 0x1, 0x9, 0xd, 0x6, 0x1, 0x2, 0x3, 0x3, 0x7fffffff, 0x6, 0x10, 0x4, 0xbc4, 0xfffffff7, 0x7c, 0x0, 0x1ff, 0x6, 0x7fffffff, 0x5, 0xcd, 0xffffffff, 0x100, 0x4, 0x4, 0x3, 0x8a, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0xc6a9, 0x101, 0x1, 0x5, 0x800, 0x30, 0x4, 0x7f, 0x4, 0x10000, 0x9, 0xf6, 0xffff0000, 0xffffffff, 0x7, 0xc, 0x1, 0x27, 0x3, 0x7, 0x1000, 0x20006, 0x4, 0x3, 0x1, 0x6, 0x5, 0x2, 0x0, 0x81, 0xe4f, 0x7905, 0x9, 0x4, 0x9, 0x4, 0x10, 0x4, 0x8, 0x100, 0xa1e5, 0x0, 0x0, 0x2, 0xf0, 0x0, 0xffffffff, 0x200000, 0x10, 0x1000, 0x765, 0x8001, 0xfff, 0x232fdfda, 0x8, 0xd, 0x0, 0x400000, 0x2, 0x6, 0x3d, 0x9, 0xd0b, 0x3, 0xf, 0x466c472a, 0x3, 0x4, 0x1, 0x101, 0x0, 0x4, 0x3, 0x8, 0x8b, 0x7, 0x8, 0x5, 0x8d2c, 0x1, 0x12c8, 0xfffffff6, 0x3, 0xf7a, 0x400, 0x9, 0x10, 0x6, 0x7, 0x7, 0xd1a, 0x1, 0xfffffffd, 0xffffffff, 0x5, 0x100, 0x2, 0xfffffffb, 0x9, 0xa7, 0x1d, 0xc68c, 0x40, 0x6, 0x1, 0x4, 0x0, 0x2d01, 0x3, 0x401, 0xc, 0x1, 0x8, 0x8000, 0x349b, 0x6, 0xfffffffb, 0x7, 0x6, 0x0, 0x200, 0xe, 0x0, 0x101, 0x8, 0x7, 0x3, 0xfff, 0x6, 0x8001, 0x2, 0xfffffff8, 0x6, 0x0, 0x10, 0xe, 0x7dc5, 0xffff, 0x7, 0x3, 0x639, 0x8, 0x200, 0xe4, 0xe, 0x5, 0x35887acc, 0xca0, 0xb6, 0x7f, 0x60, 0x6, 0x0, 0x7fff, 0x1ff, 0x99e, 0x2, 0x8, 0x3, 0x4, 0x3, 0xfe0000, 0x7, 0x4, 0x7ff, 0x8, 0x5d9, 0x3, 0x0, 0x3d, 0x4, 0x0, 0x5, 0xffffff7f, 0xfffffffa, 0xef35, 0xe287844, 0x3, 0x9, 0x0, 0x80000000, 0x10000, 0xc, 0xcd40, 0x400, 0x204a, 0x8, 0x7, 0x7095, 0x5, 0x9, 0x400, 0x8000, 0x8, 0x1, 0x8, 0x8a3, 0x7, 0x40, 0x4, 0x20, 0x8, 0xfffffff9, 0xffff, 0x9, 0x6, 0x1, 0x2, 0x5, 0x7, 0x1, 0x10000, 0x0, 0x7, 0x6, 0x1, 0x4, 0x2, 0x80, 0xfffffffe, 0x7, 0x1, 0x8000, 0x101, 0x8, 0x1, 0x1, 0x1, 0x8, 0x80, 0x10000, 0xb, 0xa0, 0x8, 0xd8, 0x2f88c62c, 0x6, 0x0, 0x400, 0xfffffff9, 0x2, 0x10000, 0x9, 0x63f5, 0x3ff, 0x98a, 0x7f, 0x4, 0xd, 0xd5, 0x7, 0x5, 0x5c1, 0x7fff, 0x0, 0x2, 0x4, 0x0, 0x2, 0x800, 0x6, 0x8, 0x4, 0xc, 0x7, 0x7f, 0x1, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x8, 0x6178, 0x8, 0x2, 0x0, 0x2, 0x3, 0x6d, 0x0, 0xe6a6, 0xc1e, 0x2, 0x41cc, 0x7, 0x2, 0x5, 0x8, 0x2, 0x9, 0x0, 0x9, 0x3, 0xfff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x7, 0x80000000, 0x800, 0x3, 0x8, 0x9, 0x4], 0x4, 0x400, 0x9}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2m36.90434811s ago: executing program 0 (id=318): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x900812, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$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") syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x201, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ustat(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006"], 0x0, 0x26}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) 2m36.189517725s ago: executing program 2 (id=319): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2dea, 0x4002, 0x49, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r7, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) write(r5, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, 0x0) openat(0xffffffffffffff9c, 0x0, 0x28180, 0x49) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r9, 0x40046411, &(0x7f0000000000)=0x1) r10 = syz_open_dev$radio(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r10, 0xc0445636, &(0x7f00000008c0)={0x101, "3be2fef99570bde1ff5097f8a98a79e75112ac8b19c62e53070b5bf879726a8f"}) 2m34.5455203s ago: executing program 2 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x111) write$cgroup_int(r1, &(0x7f0000000000)=0x3, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@cgroup=r6, 0x7, 0x1, 0x0, 0x0, 0xfffffffffffffd3b, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 2m33.310148284s ago: executing program 2 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x6, 0x8001, 0x6, 0x58a48, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x4, @value=r1, @void, @value=r1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0xb3c, 0x60eb5, r2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000580)=0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) sched_setaffinity(r10, 0x8, &(0x7f00000005c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r8, r9, 0x0, 0x1, 0x3}, 0x50) ioctl$IOCTL_STOP_ACCEL_DEV(r6, 0x40046104, &(0x7f0000000240)) 2m31.53921715s ago: executing program 2 (id=329): fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171cdea3e9b48b00", "f28359738e229a4c6681b4a2988e00d300e6c202000000000000000000000001", [0x204, 0x5]}) truncate(&(0x7f00000001c0)='./file1\x00', 0x200) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m28.921849109s ago: executing program 2 (id=335): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) 2m21.232319866s ago: executing program 32 (id=318): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x900812, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$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") syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x201, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ustat(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006"], 0x0, 0x26}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) 2m18.348120756s ago: executing program 2 (id=357): socket$nl_generic(0x11, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8aaf, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x2000a000000, 0xfffffffffffffffd, 0x0, 0x10, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 2m18.100624396s ago: executing program 33 (id=357): socket$nl_generic(0x11, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8aaf, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x2000a000000, 0xfffffffffffffffd, 0x0, 0x10, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 16.421296077s ago: executing program 4 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 12.84685848s ago: executing program 4 (id=702): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1010059, &(0x7f0000000240)={[{@usrquota}, {@resuid}, {@nojournal_checksum}, {@mblk_io_submit}, {@acl}, {@errors_remount}, {@sysvgroups}]}, 0x1, 0x54f, &(0x7f0000000e80)="$eJzs3dFrJHcdAPDvTLJ3ubvUbNWHWrAWW7mreptL47XBh6og+lSoVnwSzphsQrhN9kg27SUcNsVXQRDRgi/65IvgHyBIX3wXoVDfRUWReqcPCm1HZnb2LtnuJjnczUjy+cDvZn7zm53v97fH/vY3u5OdAM6sJyPiSkRMRMQzETFTbk/LEnvdku937+6dpbwkkWUvv5NEUm7rHet8ubxUPmwqIr7+1YjvJL09Xrofd2tn9+Ziq9XcLOuznfXk3Szbvbq2vrjaXG1uzM/PPbfw/ML1hWsj6Wc9Il748l9+/INffOWF33z21T/e+NuV7+Zp/SfLXou+foxSt+u14rnomYyIzXEEq8hk0cOu6xXnAgDA4fL5/ocj4pPF/H8mJorZHAAAAHCaZF+YjneTiAwAAAA4tdKImI4kbZTX+06XV6xeioiPxsW01d7qfGalvb2xnLdF1KOWrqy1mtdiqrh2oB61JK/PldfY9urP9tXnI+LRiPjRzIWi3lhqt5ar/vADAAAAzohLfef//5pJ00ajbNyrODkAAABgdOpVJwAAAACMnfN/AAAAOP3qWXKc3dLxZwIAAACMwUsvvpiXrHf/6+VXdrZvtl+5utzcutlY315qLLU3bzVW2+3V4jf71o86XqvdvvW52Ni+PdtpbnVmt3Z2b6y3tzc6N9YO3AIbAAAAOEGPfuLNPyQRsff5C0XJnSvbahHZxP6dJ6vIEBiXh7qm58/jywM4efvf3y9UmAdw8kzp4eyqVZ0AULmj/gBo6MU7vxt9LgAAwHhc/tjw7//fWak0NWDMyu//k2P9AAhwqkxUnQBQme73f+9nXVVnA5yk2mEzACcFcOqlo/n+/4hLCRMDCgAAVGy6KEnaKM8DpiNNG42IR4rbAtaSlbVW81pEfCgi3p6pnc/rc8UjE7N5AAAAAAAAAAAAAAAAAAAAAAAAADimLEsiAwAAAE61iPSvvTtzXZ55err/84Fzyb9nimVEvPrTl39ye7HT2ZzLt//j/vbOG+X2Z6v4BAMAAADo1ztP753HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAo3bt7Z+lelmXZ3TtLJxn371+KiHoZvyzdlsmYKpZTUYuIi/9MYnLf45KImBhB/L3XI+KxQfGTPK2ol1kciH8uIo2IC6OKHw8ZP7rxL40gPpxlb+bjzxcHvf7SeLJYDn79TZblfzV8/Evvj38TQ8a/R4YdtBgwH1Qff+tXs0Pjvx7x+OTg8acXP8mPNyD+U8fs47e/sbs7rC37ecTlQeNfcjDWbGf91uzWzu7VtfXF1eZqc2N+fu65hecXri9cm11ZazXLfwfG+OHHf/3+g9p7H+j/xUPG36L/Q57/p4/Z//feun33I93VWl9TLX6WZVeeGvz//1i++PQH4/fe+z5Vvg/k9fw5TN/45sD4T/zy908Myy3v//KQ/k/19f98X/+vHLP/z3zte3865q4AwAnY2tm9udhqNTet7F+J+v9FGie0kk/0HvJR+byz8uSTSCJfeftA02L1iXVXXitfY4ut3qttREf+bXlyNM7kKxqPAACA8Xkw6e9vSapJCAAAAAAAAAAAAAAAAAAAAM6gI38GbFhTGhEPtnzr+4f8Gll/zL1qugoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKj/BgAA//9odtVZ") 10.686884444s ago: executing program 4 (id=708): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7ffffffc, "56600300", 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r1, 0x4050}, {r1, 0x2094}], 0x2, 0xffffffb3) close_range(r0, 0xffffffffffffffff, 0x0) 9.777239914s ago: executing program 4 (id=712): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x32, 0x33, 0x16, 0xa, 0x7, 0x100, 0x0, 0x44, 0xffffffffffffffff}) 8.13494052s ago: executing program 4 (id=714): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xdb21102df0aad9a1, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0), 0x141800, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000300)) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x4a) 7.60643864s ago: executing program 3 (id=716): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000400)="a0b7f4681b2c5a98568dcde245c59f04ad5c8c27c22f55a05985de53f9d50647958899b3909b4f26a0115aae78e12e5844470229939cfdba9360cbc7a19e7b5a87dcd9a0309cb46e8746b5ffccdc3aba786d0d42942ddaf3766a6f9f503048effc9ad53dd3b0c97ee0fd04db964d16557648a9b0a27a2e6130c3", 0x7a, 0x4000054, 0x0, 0x0) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000240)={&(0x7f0000001000)=[0x3, 0xfc, 0x7, 0xa812, 0x1, 0xa, 0x2866, 0x1, 0x5, 0x178, 0xff, 0x10, 0x3, 0x4, 0x200, 0xffff, 0x4, 0x204c, 0xe, 0x0, 0x3, 0x83, 0x1, 0x7fffffff, 0x8, 0x80, 0x6, 0x8, 0x4, 0x7, 0x80, 0x6, 0x80000000, 0x9, 0x7, 0x1, 0x6, 0x7fff, 0x5, 0x10, 0xffff, 0x80000001, 0x8, 0x6, 0x9, 0x81, 0xcc, 0x0, 0x5, 0x2, 0xcd0, 0x8, 0xfffffffe, 0x7, 0x6, 0x2, 0x4, 0x5, 0xffffffff, 0x7, 0x66, 0x101, 0xdda9, 0xa, 0x7fff, 0x3ff, 0x6c, 0x4, 0x8e1, 0x5, 0x16842694, 0xa3, 0x5, 0x81, 0x306, 0x4, 0x4, 0x4, 0x2, 0x0, 0x9, 0x0, 0xd, 0x7, 0x1, 0x1, 0x10b, 0x6, 0x80, 0xa, 0x3ff, 0x1, 0x8, 0xfffffffa, 0x4, 0x10001, 0x7, 0x7a9d, 0x8, 0x10001, 0x9, 0x5, 0x0, 0x9, 0x8, 0xc886, 0xfffffffe, 0x456f7a28, 0x400, 0x6, 0x4, 0xd5e, 0x25fd, 0x9, 0x646c, 0x7d, 0x2, 0x5, 0x0, 0x7, 0x10001, 0x7, 0x3, 0x8, 0x8, 0x8, 0x3, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4d, 0x8, 0x3, 0x9, 0x8, 0x5, 0x831, 0x1, 0x1, 0x3, 0x15f46af2, 0x27, 0x88b1, 0x9, 0x8000, 0x9, 0x3, 0x8, 0x3ff, 0x6, 0x8, 0x80000001, 0x5, 0x9, 0x6f, 0x5, 0x10000, 0x1, 0x4, 0x5, 0x6, 0x8001, 0x28ca, 0x800, 0x9, 0x7, 0x6, 0x9, 0x6, 0x253c, 0x5, 0x1, 0x2185, 0x0, 0x3, 0x7, 0x9, 0xf0, 0x3, 0xec00, 0x101, 0x5, 0x2, 0x2, 0xfffffff8, 0x9, 0x7fffffff, 0xc, 0x4, 0x4, 0x400, 0xe, 0x6, 0x4, 0xe, 0x200, 0x80000000, 0x8, 0x1, 0xf, 0x47e9, 0xffffffff, 0x6, 0x5, 0x1, 0x7, 0x9, 0x9, 0xff, 0x101, 0x2, 0xde, 0x200, 0xcc, 0x6, 0x3, 0x40000, 0x46, 0xfffffff3, 0x101, 0x8, 0x80, 0xaf7, 0x1, 0x6, 0x2, 0x80000001, 0xfffffff8, 0x8, 0x80000001, 0x20ab, 0x0, 0xc, 0xfffffff4, 0x10000, 0x7, 0x401, 0x10000, 0x3, 0x5, 0x9, 0xfffffff3, 0xffffaa3e, 0x2, 0x200, 0x7, 0x6, 0x8, 0x9, 0x7, 0x6, 0x5, 0x1, 0x8, 0xfff, 0x0, 0x2, 0x10001, 0x4, 0x7, 0x1, 0x401, 0x2, 0x7d, 0x101, 0x8, 0x8001, 0x3, 0x1c2, 0x3, 0x0, 0x4902, 0x81, 0x7, 0xff, 0x5, 0x4, 0x8, 0x398c, 0x3457, 0x0, 0x6, 0x8, 0x0, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0x9, 0x5, 0x6, 0x10001, 0x1, 0xd8d6, 0xfffffffd, 0x0, 0x2, 0x8666, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4, 0x4, 0x6ddb, 0x0, 0x0, 0x2, 0x9, 0x8, 0x2, 0xfecd, 0x3cf7, 0xc232, 0x2, 0x6, 0xa, 0x1, 0x4, 0x0, 0xfff, 0xe70e, 0xc, 0x81, 0xa, 0x60, 0xfffffffd, 0x7fffffff, 0x627037ff, 0x0, 0x9, 0x4e, 0x4, 0x2d, 0x6, 0x9, 0x1, 0x8001, 0x28c66e0e, 0x0, 0x7fffffff, 0x7fff, 0x8001, 0x0, 0xfffffffb, 0x6, 0x0, 0x47b7, 0x45, 0x5, 0xcb, 0x0, 0x0, 0x2, 0x7, 0x9, 0x4, 0x34c, 0x2, 0x6, 0x2, 0x7, 0x85d3, 0xfffffff8, 0xfffffffe, 0x58, 0x6, 0x3ff, 0x0, 0x1, 0x40, 0x2, 0x8001, 0x3, 0x0, 0x100, 0x40, 0x7, 0x8, 0x3, 0xfffffff8, 0x9, 0xfb, 0x6, 0xdaf40614, 0x4, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0x7f, 0x7, 0x8, 0x8629, 0x2, 0x8, 0x4, 0x7ff, 0x1, 0x7f, 0xd63, 0xfffffffd, 0x101, 0x6, 0x3, 0x10a507f1, 0x5, 0x7fffffff, 0x1, 0x10000000, 0x5, 0x1000, 0xfff, 0x0, 0xc444, 0x3, 0xa0d3, 0x1, 0xe, 0x1, 0xfffffffa, 0x4, 0xb4e5, 0x4, 0x3, 0x6, 0x100, 0x657d089b, 0x4, 0x6, 0x2365, 0x6, 0x4423ef34, 0x2, 0x1, 0xbc1, 0xff, 0xac5, 0x4, 0x7, 0x5, 0x3, 0xb89, 0xb8b7, 0x0, 0x1000, 0x7, 0x7, 0x4, 0x2, 0xb, 0xfc5a, 0x10001, 0x1d, 0x4434, 0xad9759c, 0x4, 0x7, 0x6, 0x52e, 0xe, 0x80000001, 0x9, 0x5cde, 0x80000001, 0x5, 0xc6b7c933, 0x0, 0x400, 0x1, 0x2, 0x7f, 0x2, 0x3, 0x2, 0xdce, 0x35d, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x5816, 0x4, 0x1400e336, 0x7, 0x0, 0xb, 0x7fffffff, 0x6, 0x40, 0x3, 0x8001, 0x5, 0xff, 0x36, 0x7, 0x20be51fd, 0x3525, 0xffffff4d, 0x3, 0x7, 0x5, 0x3, 0x1000, 0x7, 0x6, 0x3, 0x2, 0x6, 0xfff, 0xd, 0x7, 0xb, 0x3, 0x100, 0x2, 0x9, 0x3d2, 0x10000, 0x3, 0x3, 0x9, 0x3, 0x1ff, 0x100, 0x8, 0x7bbc, 0xa89, 0x8, 0x100, 0x80000, 0x0, 0x4, 0xff, 0x4, 0xe, 0x6, 0x0, 0xffff, 0x8000, 0xec74, 0x6, 0x6, 0xc23, 0x6, 0x8, 0xfff, 0xe, 0x10, 0x7, 0x80000001, 0x1, 0x32, 0xb19c, 0x0, 0x0, 0x6, 0xb, 0x8, 0xbf6, 0x85, 0x21b, 0x8, 0x9, 0x4, 0x7, 0x4, 0x81, 0x4, 0xb3b5, 0xd, 0x8e3, 0xb3, 0x4, 0x2, 0xfffffffd, 0x3, 0xc0000000, 0x18, 0x5, 0x6, 0x100, 0x2, 0xf4f7, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x8b7, 0x80000001, 0x7c7f, 0x8001, 0x12, 0x5, 0xc400, 0xa, 0xc, 0x1fc, 0x800, 0xfffffffc, 0x7, 0x8, 0x2, 0x6, 0x2, 0x8, 0x0, 0x7, 0x3, 0x3, 0xbe, 0x0, 0x100, 0x6, 0x7f, 0x7c, 0xfffffffe, 0x3d, 0x8, 0x1, 0x7, 0x4, 0xfffff000, 0x2, 0x7f, 0x0, 0x4, 0x9, 0x5, 0x9, 0x3, 0x5, 0x4996, 0x6, 0x2, 0x800, 0x80, 0x4, 0xf83e, 0x10000, 0x7, 0x1, 0x8b, 0x6, 0x2, 0x4, 0x51, 0xc, 0x0, 0xfff, 0xcf6b, 0x0, 0x9, 0x3, 0x5c, 0x4, 0x100000, 0x7ff, 0xffffffff, 0x5f0b, 0x5, 0x8, 0x8000, 0x27, 0x9, 0x40, 0x7fff, 0xf, 0xffffffff, 0x1, 0x3, 0x6, 0x1, 0x9, 0xd, 0x6, 0x1, 0x2, 0x3, 0x3, 0x7fffffff, 0x6, 0x10, 0x4, 0xbc4, 0xfffffff7, 0x7c, 0x0, 0x1ff, 0x6, 0x7fffffff, 0x5, 0xcd, 0xffffffff, 0x100, 0x4, 0x4, 0x3, 0x8a, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0xc6a9, 0x101, 0x1, 0x5, 0x800, 0x30, 0x4, 0x7f, 0x4, 0x10000, 0x9, 0xf6, 0xffff0000, 0xffffffff, 0x7, 0xc, 0x1, 0x27, 0x3, 0x7, 0x1000, 0x20006, 0x4, 0x3, 0x1, 0x6, 0x5, 0x2, 0x0, 0x81, 0xe4f, 0x7905, 0x9, 0x4, 0x9, 0x4, 0x10, 0x4, 0x8, 0x100, 0xa1e5, 0x0, 0x0, 0x2, 0xf0, 0x0, 0xffffffff, 0x200000, 0x10, 0x1000, 0x765, 0x8001, 0xfff, 0x232fdfda, 0x8, 0xd, 0x0, 0x400000, 0x2, 0x6, 0x3d, 0x9, 0xd0b, 0x3, 0xf, 0x466c472a, 0x3, 0x4, 0x1, 0x101, 0x0, 0x4, 0x3, 0x8, 0x8b, 0x7, 0x8, 0x5, 0x8d2c, 0x1, 0x12c8, 0xfffffff6, 0x3, 0xf7a, 0x400, 0x9, 0x10, 0x6, 0x7, 0x7, 0xd1a, 0x1, 0xfffffffd, 0xffffffff, 0x5, 0x100, 0x2, 0xfffffffb, 0x9, 0xa7, 0x1d, 0xc68c, 0x40, 0x6, 0x1, 0x4, 0x0, 0x2d01, 0x3, 0x401, 0xc, 0x1, 0x8, 0x8000, 0x349b, 0x6, 0xfffffffb, 0x7, 0x6, 0x0, 0x200, 0xe, 0x0, 0x101, 0x8, 0x7, 0x3, 0xfff, 0x6, 0x8001, 0x2, 0xfffffff8, 0x6, 0x0, 0x10, 0xe, 0x7dc5, 0xffff, 0x7, 0x3, 0x639, 0x8, 0x200, 0xe4, 0xe, 0x5, 0x35887acc, 0xca0, 0xb6, 0x7f, 0x60, 0x6, 0x0, 0x7fff, 0x1ff, 0x99e, 0x2, 0x8, 0x3, 0x4, 0x3, 0xfe0000, 0x7, 0x4, 0x7ff, 0x8, 0x5d9, 0x3, 0x0, 0x3d, 0x4, 0x0, 0x5, 0xffffff7f, 0xfffffffa, 0xef35, 0xe287844, 0x3, 0x9, 0x0, 0x80000000, 0x10000, 0xc, 0xcd40, 0x400, 0x204a, 0x8, 0x7, 0x7095, 0x5, 0x9, 0x400, 0x8000, 0x8, 0x1, 0x8, 0x8a3, 0x7, 0x40, 0x4, 0x20, 0x8, 0xfffffff9, 0xffff, 0x9, 0x6, 0x1, 0x2, 0x5, 0x7, 0x1, 0x10000, 0x0, 0x7, 0x6, 0x1, 0x4, 0x2, 0x80, 0xfffffffe, 0x7, 0x1, 0x8000, 0x101, 0x8, 0x1, 0x1, 0x1, 0x8, 0x80, 0x10000, 0xb, 0xa0, 0x8, 0xd8, 0x2f88c62c, 0x6, 0x0, 0x400, 0xfffffff9, 0x2, 0x10000, 0x9, 0x63f5, 0x3ff, 0x98a, 0x7f, 0x4, 0xd, 0xd5, 0x7, 0x5, 0x5c1, 0x7fff, 0x0, 0x2, 0x4, 0x0, 0x2, 0x800, 0x6, 0x8, 0x4, 0xc, 0x7, 0x7f, 0x1, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x8, 0x6178, 0x8, 0x2, 0x0, 0x2, 0x3, 0x6d, 0x0, 0xe6a6, 0xc1e, 0x2, 0x41cc, 0x7, 0x2, 0x5, 0x8, 0x2, 0x9, 0x0, 0x9, 0x3, 0xfff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x7, 0x80000000, 0x800, 0x3, 0x8, 0x9, 0x4], 0x4, 0x400, 0x9}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x4, 0x0, 0x0, 0x9, 0x96, 0x5, 0x50}}], 0x58, 0x20008011}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.724004737s ago: executing program 3 (id=720): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x101002, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) 5.413845087s ago: executing program 3 (id=723): socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000400), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3fb) sendfile(r0, r2, 0x0, 0x157a) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x0, 0x483aa00d, 0xfffffffe, 0x0, 0xfc, "02000a130000000038000000003972932000"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.949526559s ago: executing program 6 (id=729): socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 3.838654487s ago: executing program 6 (id=730): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000400)="a0b7f4681b2c5a98568dcde245c59f04ad5c8c27c22f55a05985de53f9d50647958899b3909b4f26a0115aae78e12e5844470229939cfdba9360cbc7a19e7b5a87dcd9a0309cb46e8746b5ffccdc3aba786d0d42942ddaf3766a6f9f503048effc9ad53dd3b0c97ee0fd04db964d16557648a9b0a27a2e6130c3", 0x7a, 0x4000054, 0x0, 0x0) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000240)={&(0x7f0000001000)=[0x3, 0xfc, 0x7, 0xa812, 0x1, 0xa, 0x2866, 0x1, 0x5, 0x178, 0xff, 0x10, 0x3, 0x4, 0x200, 0xffff, 0x4, 0x204c, 0xe, 0x0, 0x3, 0x83, 0x1, 0x7fffffff, 0x8, 0x80, 0x6, 0x8, 0x4, 0x7, 0x80, 0x6, 0x80000000, 0x9, 0x7, 0x1, 0x6, 0x7fff, 0x5, 0x10, 0xffff, 0x80000001, 0x8, 0x6, 0x9, 0x81, 0xcc, 0x0, 0x5, 0x2, 0xcd0, 0x8, 0xfffffffe, 0x7, 0x6, 0x2, 0x4, 0x5, 0xffffffff, 0x7, 0x66, 0x101, 0xdda9, 0xa, 0x7fff, 0x3ff, 0x6c, 0x4, 0x8e1, 0x5, 0x16842694, 0xa3, 0x5, 0x81, 0x306, 0x4, 0x4, 0x4, 0x2, 0x0, 0x9, 0x0, 0xd, 0x7, 0x1, 0x1, 0x10b, 0x6, 0x80, 0xa, 0x3ff, 0x1, 0x8, 0xfffffffa, 0x4, 0x10001, 0x7, 0x7a9d, 0x8, 0x10001, 0x9, 0x5, 0x0, 0x9, 0x8, 0xc886, 0xfffffffe, 0x456f7a28, 0x400, 0x6, 0x4, 0xd5e, 0x25fd, 0x9, 0x646c, 0x7d, 0x2, 0x5, 0x0, 0x7, 0x10001, 0x7, 0x3, 0x8, 0x8, 0x8, 0x3, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4d, 0x8, 0x3, 0x9, 0x8, 0x5, 0x831, 0x1, 0x1, 0x3, 0x15f46af2, 0x27, 0x88b1, 0x9, 0x8000, 0x9, 0x3, 0x8, 0x3ff, 0x6, 0x8, 0x80000001, 0x5, 0x9, 0x6f, 0x5, 0x10000, 0x1, 0x4, 0x5, 0x6, 0x8001, 0x28ca, 0x800, 0x9, 0x7, 0x6, 0x9, 0x6, 0x253c, 0x5, 0x1, 0x2185, 0x0, 0x3, 0x7, 0x9, 0xf0, 0x3, 0xec00, 0x101, 0x5, 0x2, 0x2, 0xfffffff8, 0x9, 0x7fffffff, 0xc, 0x4, 0x4, 0x400, 0xe, 0x6, 0x4, 0xe, 0x200, 0x80000000, 0x8, 0x1, 0xf, 0x47e9, 0xffffffff, 0x6, 0x5, 0x1, 0x7, 0x9, 0x9, 0xff, 0x101, 0x2, 0xde, 0x200, 0xcc, 0x6, 0x3, 0x40000, 0x46, 0xfffffff3, 0x101, 0x8, 0x80, 0xaf7, 0x1, 0x6, 0x2, 0x80000001, 0xfffffff8, 0x8, 0x80000001, 0x20ab, 0x0, 0xc, 0xfffffff4, 0x10000, 0x7, 0x401, 0x10000, 0x3, 0x5, 0x9, 0xfffffff3, 0xffffaa3e, 0x2, 0x200, 0x7, 0x6, 0x8, 0x9, 0x7, 0x6, 0x5, 0x1, 0x8, 0xfff, 0x0, 0x2, 0x10001, 0x4, 0x7, 0x1, 0x401, 0x2, 0x7d, 0x101, 0x8, 0x8001, 0x3, 0x1c2, 0x3, 0x0, 0x4902, 0x81, 0x7, 0xff, 0x5, 0x4, 0x8, 0x398c, 0x3457, 0x0, 0x6, 0x8, 0x0, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0x9, 0x5, 0x6, 0x10001, 0x1, 0xd8d6, 0xfffffffd, 0x0, 0x2, 0x8666, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4, 0x4, 0x6ddb, 0x0, 0x0, 0x2, 0x9, 0x8, 0x2, 0xfecd, 0x3cf7, 0xc232, 0x2, 0x6, 0xa, 0x1, 0x4, 0x0, 0xfff, 0xe70e, 0xc, 0x81, 0xa, 0x60, 0xfffffffd, 0x7fffffff, 0x627037ff, 0x0, 0x9, 0x4e, 0x4, 0x2d, 0x6, 0x9, 0x1, 0x8001, 0x28c66e0e, 0x0, 0x7fffffff, 0x7fff, 0x8001, 0x0, 0xfffffffb, 0x6, 0x0, 0x47b7, 0x45, 0x5, 0xcb, 0x0, 0x0, 0x2, 0x7, 0x9, 0x4, 0x34c, 0x2, 0x6, 0x2, 0x7, 0x85d3, 0xfffffff8, 0xfffffffe, 0x58, 0x6, 0x3ff, 0x0, 0x1, 0x40, 0x2, 0x8001, 0x3, 0x0, 0x100, 0x40, 0x7, 0x8, 0x3, 0xfffffff8, 0x9, 0xfb, 0x6, 0xdaf40614, 0x4, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0x7f, 0x7, 0x8, 0x8629, 0x2, 0x8, 0x4, 0x7ff, 0x1, 0x7f, 0xd63, 0xfffffffd, 0x101, 0x6, 0x3, 0x10a507f1, 0x5, 0x7fffffff, 0x1, 0x10000000, 0x5, 0x1000, 0xfff, 0x0, 0xc444, 0x3, 0xa0d3, 0x1, 0xe, 0x1, 0xfffffffa, 0x4, 0xb4e5, 0x4, 0x3, 0x6, 0x100, 0x657d089b, 0x4, 0x6, 0x2365, 0x6, 0x4423ef34, 0x2, 0x1, 0xbc1, 0xff, 0xac5, 0x4, 0x7, 0x5, 0x3, 0xb89, 0xb8b7, 0x0, 0x1000, 0x7, 0x7, 0x4, 0x2, 0xb, 0xfc5a, 0x10001, 0x1d, 0x4434, 0xad9759c, 0x4, 0x7, 0x6, 0x52e, 0xe, 0x80000001, 0x9, 0x5cde, 0x80000001, 0x5, 0xc6b7c933, 0x0, 0x400, 0x1, 0x2, 0x7f, 0x2, 0x3, 0x2, 0xdce, 0x35d, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x5816, 0x4, 0x1400e336, 0x7, 0x0, 0xb, 0x7fffffff, 0x6, 0x40, 0x3, 0x8001, 0x5, 0xff, 0x36, 0x7, 0x20be51fd, 0x3525, 0xffffff4d, 0x3, 0x7, 0x5, 0x3, 0x1000, 0x7, 0x6, 0x3, 0x2, 0x6, 0xfff, 0xd, 0x7, 0xb, 0x3, 0x100, 0x2, 0x9, 0x3d2, 0x10000, 0x3, 0x3, 0x9, 0x3, 0x1ff, 0x100, 0x8, 0x7bbc, 0xa89, 0x8, 0x100, 0x80000, 0x0, 0x4, 0xff, 0x4, 0xe, 0x6, 0x0, 0xffff, 0x8000, 0xec74, 0x6, 0x6, 0xc23, 0x6, 0x8, 0xfff, 0xe, 0x10, 0x7, 0x80000001, 0x1, 0x32, 0xb19c, 0x0, 0x0, 0x6, 0xb, 0x8, 0xbf6, 0x85, 0x21b, 0x8, 0x9, 0x4, 0x7, 0x4, 0x81, 0x4, 0xb3b5, 0xd, 0x8e3, 0xb3, 0x4, 0x2, 0xfffffffd, 0x3, 0xc0000000, 0x18, 0x5, 0x6, 0x100, 0x2, 0xf4f7, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x8b7, 0x80000001, 0x7c7f, 0x8001, 0x12, 0x5, 0xc400, 0xa, 0xc, 0x1fc, 0x800, 0xfffffffc, 0x7, 0x8, 0x2, 0x6, 0x2, 0x8, 0x0, 0x7, 0x3, 0x3, 0xbe, 0x0, 0x100, 0x6, 0x7f, 0x7c, 0xfffffffe, 0x3d, 0x8, 0x1, 0x7, 0x4, 0xfffff000, 0x2, 0x7f, 0x0, 0x4, 0x9, 0x5, 0x9, 0x3, 0x5, 0x4996, 0x6, 0x2, 0x800, 0x80, 0x4, 0xf83e, 0x10000, 0x7, 0x1, 0x8b, 0x6, 0x2, 0x4, 0x51, 0xc, 0x0, 0xfff, 0xcf6b, 0x0, 0x9, 0x3, 0x5c, 0x4, 0x100000, 0x7ff, 0xffffffff, 0x5f0b, 0x5, 0x8, 0x8000, 0x27, 0x9, 0x40, 0x7fff, 0xf, 0xffffffff, 0x1, 0x3, 0x6, 0x1, 0x9, 0xd, 0x6, 0x1, 0x2, 0x3, 0x3, 0x7fffffff, 0x6, 0x10, 0x4, 0xbc4, 0xfffffff7, 0x7c, 0x0, 0x1ff, 0x6, 0x7fffffff, 0x5, 0xcd, 0xffffffff, 0x100, 0x4, 0x4, 0x3, 0x8a, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0xc6a9, 0x101, 0x1, 0x5, 0x800, 0x30, 0x4, 0x7f, 0x4, 0x10000, 0x9, 0xf6, 0xffff0000, 0xffffffff, 0x7, 0xc, 0x1, 0x27, 0x3, 0x7, 0x1000, 0x20006, 0x4, 0x3, 0x1, 0x6, 0x5, 0x2, 0x0, 0x81, 0xe4f, 0x7905, 0x9, 0x4, 0x9, 0x4, 0x10, 0x4, 0x8, 0x100, 0xa1e5, 0x0, 0x0, 0x2, 0xf0, 0x0, 0xffffffff, 0x200000, 0x10, 0x1000, 0x765, 0x8001, 0xfff, 0x232fdfda, 0x8, 0xd, 0x0, 0x400000, 0x2, 0x6, 0x3d, 0x9, 0xd0b, 0x3, 0xf, 0x466c472a, 0x3, 0x4, 0x1, 0x101, 0x0, 0x4, 0x3, 0x8, 0x8b, 0x7, 0x8, 0x5, 0x8d2c, 0x1, 0x12c8, 0xfffffff6, 0x3, 0xf7a, 0x400, 0x9, 0x10, 0x6, 0x7, 0x7, 0xd1a, 0x1, 0xfffffffd, 0xffffffff, 0x5, 0x100, 0x2, 0xfffffffb, 0x9, 0xa7, 0x1d, 0xc68c, 0x40, 0x6, 0x1, 0x4, 0x0, 0x2d01, 0x3, 0x401, 0xc, 0x1, 0x8, 0x8000, 0x349b, 0x6, 0xfffffffb, 0x7, 0x6, 0x0, 0x200, 0xe, 0x0, 0x101, 0x8, 0x7, 0x3, 0xfff, 0x6, 0x8001, 0x2, 0xfffffff8, 0x6, 0x0, 0x10, 0xe, 0x7dc5, 0xffff, 0x7, 0x3, 0x639, 0x8, 0x200, 0xe4, 0xe, 0x5, 0x35887acc, 0xca0, 0xb6, 0x7f, 0x60, 0x6, 0x0, 0x7fff, 0x1ff, 0x99e, 0x2, 0x8, 0x3, 0x4, 0x3, 0xfe0000, 0x7, 0x4, 0x7ff, 0x8, 0x5d9, 0x3, 0x0, 0x3d, 0x4, 0x0, 0x5, 0xffffff7f, 0xfffffffa, 0xef35, 0xe287844, 0x3, 0x9, 0x0, 0x80000000, 0x10000, 0xc, 0xcd40, 0x400, 0x204a, 0x8, 0x7, 0x7095, 0x5, 0x9, 0x400, 0x8000, 0x8, 0x1, 0x8, 0x8a3, 0x7, 0x40, 0x4, 0x20, 0x8, 0xfffffff9, 0xffff, 0x9, 0x6, 0x1, 0x2, 0x5, 0x7, 0x1, 0x10000, 0x0, 0x7, 0x6, 0x1, 0x4, 0x2, 0x80, 0xfffffffe, 0x7, 0x1, 0x8000, 0x101, 0x8, 0x1, 0x1, 0x1, 0x8, 0x80, 0x10000, 0xb, 0xa0, 0x8, 0xd8, 0x2f88c62c, 0x6, 0x0, 0x400, 0xfffffff9, 0x2, 0x10000, 0x9, 0x63f5, 0x3ff, 0x98a, 0x7f, 0x4, 0xd, 0xd5, 0x7, 0x5, 0x5c1, 0x7fff, 0x0, 0x2, 0x4, 0x0, 0x2, 0x800, 0x6, 0x8, 0x4, 0xc, 0x7, 0x7f, 0x1, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x8, 0x6178, 0x8, 0x2, 0x0, 0x2, 0x3, 0x6d, 0x0, 0xe6a6, 0xc1e, 0x2, 0x41cc, 0x7, 0x2, 0x5, 0x8, 0x2, 0x9, 0x0, 0x9, 0x3, 0xfff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x7, 0x80000000, 0x800, 0x3, 0x8, 0x9, 0x4], 0x4, 0x400, 0x9}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x4, 0x0, 0x0, 0x9, 0x96, 0x5, 0x50}}], 0x58, 0x20008011}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.89134157s ago: executing program 6 (id=731): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="6f2d4a41cfff36de7330ac0e24cc722b19557daf1a769fcded7d7d953448b71816abbf93c4f089ceb2633a5fc33d8a1330647fda0844d778a847cf886fed96beeefdad1933", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/route\x00') read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0x9, 0x0, 0x3) 1.781250444s ago: executing program 5 (id=734): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\t\x00'], 0x20) 1.677282083s ago: executing program 6 (id=735): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'nr0\x00', {0x2, 0x0, @private}}) 1.477522277s ago: executing program 5 (id=737): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.254902815s ago: executing program 5 (id=739): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r6) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0xe0}], 0x1}, 0x40040) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r4, 0x0, 0x1100000000f336, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.141214743s ago: executing program 1 (id=740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xf00) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742e8680d85ff9782762f86dd", 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r2, 0x54d2b226a8e856d5, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x700, 0x7230, 0xd5, {{0x2e, 0x4, 0x0, 0x1, 0xb8, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x1b, 0x50, [@loopback, @remote, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0x44, 0x38, 0x1, 0x3, [{@empty}, {@multicast2, 0x2}, {@rand_addr=0x64010100, 0x1ff}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0xcc4}, {@loopback, 0x6}, {@broadcast, 0xffffffff}, {@remote}]}, @cipso={0x86, 0x1b, 0x3, [{0x7, 0x9, "4feaaa0c76c17d"}, {0x6, 0xc, "8761847dd037ca32448d"}]}, @lsrr={0x83, 0x1b, 0x8e, [@dev={0xac, 0x14, 0x14, 0x17}, @local, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x0, [{@local, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x1, 0x0, {{0x28, 0x4, 0x3, 0x24, 0xa0, 0x65, 0x0, 0xfd, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x2c, 0xf5, 0x1, 0x7, [{@local}, {@empty, 0x7}, {@broadcast, 0xe}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x40}]}, @timestamp={0x44, 0x8, 0x27, 0x0, 0x9, [0x8]}, @timestamp={0x44, 0x28, 0x8c, 0x0, 0x8, [0x7, 0x1, 0x3, 0x6, 0x4, 0x4, 0x8, 0xfff, 0x3b7]}, @rr={0x7, 0x23, 0x52, [@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x2, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0x9c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x2a0, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xec, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x40000}, 0x404c880) 1.140820314s ago: executing program 6 (id=741): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002cab000000000000010000008500000020000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e000790b6462272963484d3e4206", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000e40), 0x0, 0x4000880) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 881.553903ms ago: executing program 1 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000092000000069d0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x20004014) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd"], 0x1c}}, 0x0) 697.631077ms ago: executing program 1 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfffe, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 669.743909ms ago: executing program 5 (id=744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) close(0x4) 568.359477ms ago: executing program 3 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) 341.715154ms ago: executing program 1 (id=746): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="fd00000000000000300012800b0001006572"], 0x50}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xfffffdef, 0xe) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 341.428475ms ago: executing program 3 (id=747): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r0], 0x20) 244.734852ms ago: executing program 1 (id=748): socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 202.518425ms ago: executing program 5 (id=749): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x20, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 121.769561ms ago: executing program 3 (id=750): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000dedbdf25080000000478f200"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x4000890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000c031de4c1d5d42c81c880a53720c7c853bedd29885ea962415dc91531e8aa21087d0fb6b6add530363cdaedfb1c71e840145e60a67b2042d61a6f53022aa09fa967e570e2ac488ef1ec9ada894b213d30368f5e27ab330a2e68164ef11eda57ebc673bd917c798066ab4c155df19d328645a74fb85a0cb7960b68dc08ce1e0bdbb5719eb11bc5cc98faa122880f2791bf99f4aadf155600add95f89aafaabb64e6f45a66a28bd96bf3bf5c96be703287a06243a8262a2ce34ec6dfa1f", @ANYRES16=r4, @ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="7cb485ac06307d702a04760853d9a2bccdf25d8475748c3ee46520a6da46f78ec273bc8365536b47cd1d5bfba300e11227ccdd04a8991a13c7f39282dccb5f7c4ab8448547c415eb23e5e67d6b10472ebeb13e118a2ca67add351b8c04fff58dd17dc540fa189938f9371bb2ca1a42b5ccd75b7779a62fbe3c44339e31af577ce4bcd31d65a60d2b9122eec06f3f4b5ff9b4ca73fe60789cc99d636a8286e2a099ee8de9", @ANYRES64=r2, @ANYRES8=r3], 0x48) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @null, 0x1}, [@default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) 66.619895ms ago: executing program 1 (id=751): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x2, 0x68, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "8f1151239582"}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)=ANY=[], 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x15, 0x3}, 0x10) sendto$inet6(r2, &(0x7f0000000000)="58aa1c1aa12f8c0af101b12142f3e11a4cc8cbbfec492ce90c85f577a5b4a34ffadf9f7686513d10f088e195fec9d57bed24d2bcc95d407167a45ad98a5913963e43e4647d169daeeb4670c21947dc2a1c497b424ffdb5fd6a57b3ee4832f617e4b137e0e8e47a0cc4e1fc69519a7900"/127, 0x7f, 0xe0, &(0x7f000005ffe4)={0xa, 0x4a63, 0x0, @empty}, 0x1c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 66.288315ms ago: executing program 6 (id=752): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x40}}, 0x240080c0) 12.0489ms ago: executing program 5 (id=753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff020000001d00000008000300", @ANYRES32=r1, @ANYBLOB="2c002f800c0002008000000000000000080001"], 0x48}}, 0x0) 0s ago: executing program 4 (id=754): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/127, 0x7f}, 0x1a83}], 0x2, 0x100, 0x0) kernel console output (not intermixed with test programs): led to resolve './file1': -2 [ 90.459190][ T4415] sched: RT throttling activated [ 91.412293][ T4421] loop0: detected capacity change from 0 to 128 [ 92.828546][ T4434] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.38'. [ 92.976462][ T4444] QAT: Stopping all acceleration devices. [ 95.045030][ T4445] ax25_connect(): syz.3.39 uses autobind, please contact jreuter@yaina.de [ 97.866255][ T4466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.43'. [ 97.907005][ T4466] overlayfs: failed to resolve './file1': -2 [ 100.249681][ T4477] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 100.249681][ T4477] program syz.3.47 not setting count and/or reply_len properly [ 104.058475][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 104.188921][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.245693][ T26] audit: type=1326 audit(1759778523.661:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4503 comm="syz.3.54" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2017837ec9 code=0x0 [ 105.145277][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.208580][ T4505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.472279][ T4526] nbd: nbd0 already in use [ 105.663327][ T4530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.58'. [ 105.703080][ T4530] overlayfs: failed to resolve './file1': -2 [ 106.395453][ T4526] Zero length message leads to an empty skb [ 107.179646][ T4455] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.903920][ T4550] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 108.190164][ T4455] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.979438][ T4455] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.072632][ T4455] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.232955][ T4455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.312436][ T4539] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.075534][ T4562] vxfs: WRONG superblock magic 00000000 at 1 [ 111.076020][ T4562] vxfs: WRONG superblock magic 00000000 at 8 [ 111.076043][ T4562] vxfs: can't find superblock. [ 111.099827][ T4455] usb 1-1: can't set config #27, error -71 [ 111.145045][ T4566] loop0: detected capacity change from 0 to 16 [ 111.311152][ T4566] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.381468][ T4455] usb 1-1: USB disconnect, device number 4 [ 111.395296][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.471860][ T4571] attempt to access beyond end of device [ 111.471860][ T4571] loop0: rw=524288, want=48, limit=16 [ 111.555698][ T4571] attempt to access beyond end of device [ 111.555698][ T4571] loop0: rw=524288, want=40, limit=16 [ 114.319989][ T4599] atomic_op ffff88807df41998 conn xmit_atomic 0000000000000000 [ 114.811493][ T4589] sp0: Synchronizing with TNC [ 114.825906][ T4588] [U] č [ 114.897105][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 116.189579][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 116.902639][ T4620] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.071383][ T4625] loop3: detected capacity change from 0 to 4 [ 117.119895][ T4625] Dev loop3: unable to read RDB block 4 [ 117.136472][ T4625] loop3: unable to read partition table [ 117.169594][ T4625] loop3: partition table beyond EOD, truncated [ 117.233083][ T4625] loop_reread_partitions: partition scan of loop3 (žč¢«xü—Ńą– ) failed (rc=-5) [ 118.751789][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.831932][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.210342][ T4658] capability: warning: `syz.4.94' uses 32-bit capabilities (legacy support in use) [ 127.352226][ T4726] atomic_op ffff88814875a998 conn xmit_atomic 0000000000000000 [ 129.683002][ T4740] binder: 4735:4740 unknown command 1074553619 [ 129.689363][ T4740] binder: 4735:4740 ioctl c0306201 200000000540 returned -22 [ 131.885752][ T4759] loop1: detected capacity change from 0 to 128 [ 132.864908][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872831][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168378][ T4773] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.168378][ T4773] program syz.1.125 not setting count and/or reply_len properly [ 133.435527][ T4775] input: syz1 as /devices/virtual/input/input6 [ 135.319624][ T4343] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.542342][ T4801] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 135.609503][ T4343] usb 5-1: Using ep0 maxpacket: 8 [ 135.759820][ T4343] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.777261][ T4343] usb 5-1: config 0 has no interface number 0 [ 135.792996][ T4343] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.850928][ T4343] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.923811][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.927092][ T4804] loop2: detected capacity change from 0 to 128 [ 136.130106][ T4343] usb 5-1: config 0 descriptor?? [ 136.219592][ T4343] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 136.703390][ T4812] 9pnet_virtio: no channels available for device syz [ 137.942061][ T4343] usb 5-1: USB disconnect, device number 2 [ 138.203897][ T4826] input: syz1 as /devices/virtual/input/input7 [ 138.724481][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.913100][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 139.359424][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 139.479619][ T21] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.255876][ T21] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.115381][ T21] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.232331][ T21] usb 3-1: config 1 interface 0 has no altsetting 0 [ 141.710255][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.739588][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.755064][ T4849] loop2: detected capacity change from 0 to 128 [ 141.781256][ T21] usb 3-1: Product: syz [ 141.809433][ T4343] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.959913][ T21] usb 3-1: can't set config #1, error -71 [ 141.991054][ T21] usb 3-1: USB disconnect, device number 2 [ 142.019497][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.059884][ T4343] usb 2-1: Using ep0 maxpacket: 8 [ 142.179563][ T4343] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 142.207539][ T4343] usb 2-1: config 0 has no interface number 0 [ 142.381694][ T4343] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 142.405011][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.429485][ T4343] usb 2-1: Product: syz [ 142.433956][ T4343] usb 2-1: Manufacturer: syz [ 142.438962][ T4343] usb 2-1: SerialNumber: syz [ 142.446769][ T4343] usb 2-1: config 0 descriptor?? [ 142.470780][ T4343] usb 2-1: can't set config #0, error -71 [ 142.479273][ T4343] usb 2-1: USB disconnect, device number 2 [ 142.543086][ T4855] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 142.543086][ T4855] program syz.0.149 not setting count and/or reply_len properly [ 143.343492][ T13] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 143.404202][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 143.426847][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.574254][ T13] usb 5-1: Product: syz [ 143.578679][ T13] usb 5-1: Manufacturer: syz [ 143.584307][ T13] usb 5-1: SerialNumber: syz [ 143.677804][ T4865] binder: 4857:4865 unknown command 1074553619 [ 143.684353][ T4865] binder: 4857:4865 ioctl c0306201 200000000540 returned -22 [ 144.547617][ T4866] atomic_op ffff88807b66d998 conn xmit_atomic 0000000000000000 [ 145.309527][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.319549][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 145.348056][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.385468][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.412685][ T13] lan78xx: probe of 5-1:1.0 failed with error -32 [ 145.505448][ T4847] udc-core: couldn't find an available UDC or it's busy [ 145.559553][ T4847] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.709527][ T21] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 146.059720][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.077618][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.086511][ T21] usb 3-1: Product: syz [ 146.095101][ T21] usb 3-1: Manufacturer: syz [ 146.106328][ T21] usb 3-1: SerialNumber: syz [ 146.164647][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.279723][ T4252] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.308167][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 146.317807][ T4886] ax25_connect(): syz.1.159 uses autobind, please contact jreuter@yaina.de [ 146.407965][ T4892] loop1: detected capacity change from 0 to 16 [ 146.463767][ T4892] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.549641][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 146.700315][ T4252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.897406][ T13] usb 5-1: USB disconnect, device number 3 [ 146.949506][ T21] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.317836][ T4875] udc-core: couldn't find an available UDC or it's busy [ 147.430123][ T4875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.548627][ T4252] usb 1-1: config 0 has no interfaces? [ 147.560611][ T4875] udc-core: couldn't find an available UDC or it's busy [ 147.610229][ T4875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.800270][ T4875] udc-core: couldn't find an available UDC or it's busy [ 147.809592][ T4875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.831352][ T1334] usb 3-1: USB disconnect, device number 3 [ 148.868681][ T4905] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.868681][ T4905] program syz.4.163 not setting count and/or reply_len properly [ 149.394113][ T21] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 149.408694][ T4252] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 149.444119][ T21] ath9k_htc: Failed to initialize the device [ 149.452107][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.462721][ T4252] usb 1-1: Product: syz [ 149.471553][ T4252] usb 1-1: Manufacturer: syz [ 149.481245][ T1334] usb 3-1: ath9k_htc: USB layer deinitialized [ 149.495278][ T4252] usb 1-1: SerialNumber: syz [ 149.526063][ T4252] usb 1-1: config 0 descriptor?? [ 149.709628][ T4252] usb 1-1: can't set config #0, error -71 [ 149.724638][ T4252] usb 1-1: USB disconnect, device number 5 [ 149.925805][ T4921] ax25_connect(): syz.4.171 uses autobind, please contact jreuter@yaina.de [ 149.944913][ T1334] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.199526][ T1334] usb 3-1: Using ep0 maxpacket: 32 [ 150.518442][ T1334] usb 3-1: device descriptor read/all, error -71 [ 150.884422][ T4934] atomic_op ffff88801fab4998 conn xmit_atomic 0000000000000000 [ 152.387657][ T4942] crypto_alloc_aead failed rc=-2 [ 154.149471][ T4955] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 154.149471][ T4955] program syz.4.178 not setting count and/or reply_len properly [ 156.097395][ T4980] loop3: detected capacity change from 0 to 128 [ 156.609482][ T1334] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.899378][ T1334] usb 1-1: Using ep0 maxpacket: 16 [ 157.269538][ T1334] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.299031][ T1334] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.306149][ T1334] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 157.326475][ T1334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.356486][ T1334] usb 1-1: config 0 descriptor?? [ 157.585280][ T4997] binder: 4992:4997 unknown command 1074553619 [ 157.591609][ T4997] binder: 4992:4997 ioctl c0306201 200000000540 returned -22 [ 158.671728][ T5003] nbd: nbd2 already in use [ 158.906864][ T4995] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 158.906864][ T4995] program syz.4.190 not setting count and/or reply_len properly [ 159.056893][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.068629][ T5012] device syzkaller0 entered promiscuous mode [ 159.079273][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.087328][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.104256][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.117695][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.125725][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.137106][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.145514][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.157992][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.166173][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.177765][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.187334][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.293628][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.302414][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.309605][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.946586][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.953758][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.964172][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 159.994139][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.071753][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.086436][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.094052][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.101850][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.110089][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.116909][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.124308][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.131297][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.146666][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.153978][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.160934][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.167782][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.175001][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.182127][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.188873][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.195843][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.202779][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.209779][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.216810][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.223636][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.230403][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.238751][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.245911][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.252811][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.259881][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.267028][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.273805][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.280625][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.287510][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.294547][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.301748][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.308667][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.315562][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.322659][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.329951][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.336941][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.345342][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.352516][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.359843][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.367141][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.374510][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.381712][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.388539][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.395433][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.402327][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.409086][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.415950][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.423136][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.429952][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.436684][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.444799][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.452225][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.460214][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.467125][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.473901][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.481024][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.488126][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.495141][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.502117][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.509186][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.516569][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.524198][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.530998][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.538130][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.545827][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.552729][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.559592][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.566432][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.573627][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.581103][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.587926][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.594955][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.601969][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.609136][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.616050][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.622966][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.630299][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.637053][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.643953][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.651537][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.658293][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.665371][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.672242][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.679847][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.686872][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.693896][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.701019][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.708333][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.715223][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.722407][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.729504][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.736259][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.743267][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.750885][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.757904][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.764993][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.771962][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.778697][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.785516][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.792925][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.799719][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.806555][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.813352][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.820159][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.827098][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.834107][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.841408][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.849224][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.860448][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.868166][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.876822][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.884589][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.894132][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.902595][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.911560][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.922408][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.930166][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.939504][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.948669][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.956642][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.963956][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.971112][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.978590][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.985889][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 160.993680][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.000859][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.007728][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.014722][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.021712][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.028914][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.036195][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.043332][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.050590][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.060886][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.068833][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.076948][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.085558][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.093257][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.100224][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.107453][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.114446][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.121641][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.128991][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.135884][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.143031][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.152526][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.161475][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.170250][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.177351][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.186244][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.193214][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.200816][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.208526][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.215506][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.222907][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.229680][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.236548][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.243845][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.250946][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.257832][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.266677][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.273758][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.281456][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.289808][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.297788][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.306007][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.313516][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.320561][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.328417][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.336028][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.343094][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.351047][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.358430][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.367182][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.375865][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.383547][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.391757][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.400067][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.408075][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.415057][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.421864][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.429243][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.436034][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.443552][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.451422][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.458644][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.466694][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.474384][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.482427][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.489794][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.497141][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.504634][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.511671][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.518420][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.525675][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.532835][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.539758][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.547468][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.555439][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.562980][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.570914][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.577832][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.584787][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.591761][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.598582][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.605499][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.612654][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.619843][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.626957][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.634179][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.641165][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.648378][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.655241][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.662417][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.670134][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.677515][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.687464][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.694681][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.703529][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.711658][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.718838][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.725982][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.733259][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.740333][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.747628][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.754512][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.762079][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.768987][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.776893][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.783783][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.790572][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.797603][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.804496][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.811590][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.818792][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.826037][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.833382][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.841088][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.848020][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.854910][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.861682][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.868401][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.876206][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.883342][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.890459][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.897211][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.903986][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.910876][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.917779][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.924961][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.932000][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.939163][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.947053][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.954087][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.961080][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.967805][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.974807][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.982726][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.989776][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 161.996564][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.003325][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.010178][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.017278][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.024127][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.031513][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.038877][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.045710][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.052838][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.059859][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.066603][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.074176][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.081988][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.089258][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.096079][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.103172][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.110032][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.117216][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.124692][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.131695][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.138429][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.145366][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.152365][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.159120][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.166457][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.173521][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.180295][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.187962][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.194857][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.201767][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.209877][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.217246][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.225592][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.232727][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.240655][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.248599][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.256828][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.264097][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.271029][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.278441][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.286493][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.293647][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.300689][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.307956][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.314896][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.322799][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.330689][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.338769][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.346647][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.353550][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.361713][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.369780][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.377259][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.384711][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.392687][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.400725][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.407929][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.414888][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.422357][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.429939][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.437742][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.445072][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.452134][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.459500][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.466420][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.474126][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.481748][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.489891][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.497568][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.504637][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.511698][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.518963][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.525894][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.533699][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.540779][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.547708][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.554869][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.561690][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.568897][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.576047][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.586245][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.594583][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.601953][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.609420][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.616783][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.623745][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.630799][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.637813][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.644736][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.651516][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.658486][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.665287][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.672461][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.680123][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.686986][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.695356][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.702756][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.709616][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.716439][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.723529][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.730638][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.737461][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.744987][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.751791][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.758675][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.765531][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.772429][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.779538][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.786624][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.793516][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.803229][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.810531][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.817437][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.824677][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.831951][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.838826][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.845934][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.853296][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.860240][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.867684][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.874894][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.881992][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.889415][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.896528][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.904756][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.911657][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.918760][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.925525][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.932384][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.939116][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.946211][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.953029][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.959886][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.966625][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.973527][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.980362][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.987469][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 162.994842][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.002530][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.009367][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.016222][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.023191][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.030195][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.036924][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.043791][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.050553][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.057573][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.065140][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.072247][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.079385][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.086844][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.095964][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.104451][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.111973][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.119206][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.126328][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.133120][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.140273][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.147233][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.154112][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.161185][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.168385][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.175352][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.182461][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.189221][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.196055][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.202895][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.210888][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.217728][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.224594][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.231431][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.238344][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.245507][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.252494][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.259468][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.266511][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.273605][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.281055][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.287772][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.295286][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.302320][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.310498][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.317612][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.324723][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.331959][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.338706][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.346032][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.353359][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.360188][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.366926][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.374915][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.384946][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.392797][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.401189][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.408687][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.418073][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.425689][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.432607][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.439988][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.446966][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.453989][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.460809][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.467632][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.474445][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.481767][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.489436][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.497226][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.504099][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.512905][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.519738][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.526739][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.533514][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.540341][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.547329][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.554188][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.560962][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.567687][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.575080][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.582913][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.590273][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.597402][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.604589][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.612091][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.620198][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.627344][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.634254][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.641936][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.648660][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.655428][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.662579][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.669515][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.680825][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.688292][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.696147][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.705022][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.712770][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.720753][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.727778][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.734567][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.742292][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.750608][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.757516][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.764749][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.771727][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.778702][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.785754][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.792536][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.799394][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.806213][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.813026][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.821205][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.827949][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.834861][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.841660][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.848546][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.855726][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.863139][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.870294][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.878642][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.888969][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.899377][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.908986][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.917505][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.925959][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.933035][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.940231][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.947606][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.954546][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.961808][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.969500][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.977653][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.984599][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 163.992112][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.001369][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.010587][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.017801][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.026459][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.033506][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.041076][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.048301][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.055142][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.062021][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.069098][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.076658][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.083895][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.091480][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.098234][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.105217][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.112315][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.119681][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.127585][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.134418][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.141304][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.148217][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.155118][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.162054][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.168964][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.175865][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.183162][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.191014][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.197900][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.205053][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.212213][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.219923][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.226978][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.235094][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.242407][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.249874][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.257725][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.264841][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.271972][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.280277][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.289485][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.300002][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.308235][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.315913][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.323723][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.332653][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.340301][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.347822][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.355489][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.362925][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.370057][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.377562][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.386601][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.393985][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.401613][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.408694][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.415644][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.423886][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.431292][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.439026][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.446647][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.455240][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.462390][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.470021][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.477898][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.485198][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.495579][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.503028][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.510564][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.517653][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.524957][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.532294][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.540533][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.548769][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.555821][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.562924][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.569948][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.577014][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.584272][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.591233][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.598541][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.605831][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.613077][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.620357][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.628041][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.634935][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.642854][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.650001][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.656806][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.664343][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.672571][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.679645][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.686481][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.693339][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.700148][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.707734][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.714856][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.722330][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.729035][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.735884][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.744189][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.752017][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.758975][ T1334] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 164.766043][ T1334] kye 0003:0458:0138.0001: collection stack underflow [ 164.773283][ T1334] kye 0003:0458:0138.0001: item 0 0 0 12 parsing failed [ 164.781418][ T1334] kye 0003:0458:0138.0001: parse failed [ 164.788054][ T1334] kye: probe of 0003:0458:0138.0001 failed with error -22 [ 164.806003][ T1334] usb 1-1: USB disconnect, device number 6 [ 164.935001][ T5028] loop0: detected capacity change from 0 to 128 [ 166.054523][ T5038] binder: 5027:5038 unknown command 1074553619 [ 166.063698][ T5038] binder: 5027:5038 ioctl c0306201 200000000540 returned -22 [ 166.452179][ T5040] nbd: nbd3 already in use [ 166.662727][ T5036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'. [ 167.162271][ T4337] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.979500][ T4337] usb 2-1: Using ep0 maxpacket: 16 [ 168.739747][ T4337] usb 2-1: string descriptor 0 read error: -71 [ 168.771125][ T4337] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 168.906335][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.010279][ T4337] usb 2-1: config 0 descriptor?? [ 169.049275][ T4337] usb 2-1: can't set config #0, error -71 [ 169.108518][ T4337] usb 2-1: USB disconnect, device number 3 [ 169.499661][ T4343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 169.561186][ T5076] device syzkaller0 entered promiscuous mode [ 169.580379][ T4404] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.929558][ T4404] usb 1-1: Using ep0 maxpacket: 32 [ 169.998500][ T5085] binder: 5080:5085 unknown command 1074553619 [ 170.005462][ T5085] binder: 5080:5085 ioctl c0306201 200000000540 returned -22 [ 170.787005][ T4343] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.799743][ T4343] usb 5-1: config 0 has no interface number 0 [ 170.807199][ T4343] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.819616][ T4343] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.830162][ T4343] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.873033][ T5088] loop2: detected capacity change from 0 to 128 [ 170.890184][ T4404] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 170.910670][ T4404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.974944][ T5091] atomic_op ffff8880251df198 conn xmit_atomic 0000000000000000 [ 171.074602][ T4404] usb 1-1: config 0 descriptor?? [ 171.479770][ T4404] as10x_usb: device has been detected [ 171.628678][ T4404] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 171.749632][ T4343] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 171.760913][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.777530][ T4343] usb 5-1: config 0 descriptor?? [ 171.810120][ T4343] usb 5-1: can't set config #0, error -71 [ 171.851613][ T4343] usb 5-1: USB disconnect, device number 4 [ 171.864414][ T4404] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 171.994920][ T4404] as10x_usb: error during firmware upload part1 [ 172.040684][ T4404] Registered device nBox DVB-T Dongle [ 172.068927][ T4404] usb 1-1: USB disconnect, device number 7 [ 172.098688][ T4337] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 172.700164][ T4337] usb 2-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config [ 172.927044][ T4337] usb 2-1: config 240 has 0 interfaces, different from the descriptor's value: 1 [ 173.050352][ T4337] usb 2-1: string descriptor 0 read error: -71 [ 173.073076][ T4337] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 173.138824][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.245854][ T5106] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 173.245854][ T5106] program syz.3.221 not setting count and/or reply_len properly [ 173.762180][ T4337] usb 2-1: can't set config #240, error -71 [ 173.961140][ T4337] usb 2-1: USB disconnect, device number 4 [ 174.026380][ T4404] Unregistered device nBox DVB-T Dongle [ 174.055554][ T4404] as10x_usb: device has been disconnected [ 174.078919][ T5113] device syzkaller0 entered promiscuous mode [ 174.429528][ T4404] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.049767][ T4404] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=eb.c7 [ 175.074059][ T4404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.102116][ T4404] usb 1-1: Product: syz [ 175.119926][ T4404] usb 1-1: Manufacturer: syz [ 175.134434][ T4404] usb 1-1: SerialNumber: syz [ 175.168724][ T4404] usb 1-1: config 0 descriptor?? [ 175.620586][ T5126] 9pnet_virtio: no channels available for device syz [ 175.837898][ T5127] binder: 5123:5127 unknown command 1074553619 [ 175.844325][ T5127] binder: 5123:5127 ioctl c0306201 200000000540 returned -22 [ 176.688180][ T5131] nbd: nbd0 already in use [ 176.692465][ T4404] usb 1-1: USB disconnect, device number 8 [ 177.065795][ T4244] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.429672][ T4244] usb 2-1: Using ep0 maxpacket: 16 [ 177.582594][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.634738][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.678902][ T4244] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 177.743744][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.771163][ T4244] usb 2-1: config 0 descriptor?? [ 179.499533][ T5150] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 179.499533][ T5150] program syz.3.235 not setting count and/or reply_len properly [ 179.674600][ T5146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.238'. [ 179.988324][ T5157] loop3: detected capacity change from 0 to 128 [ 179.997890][ T5149] device syzkaller0 entered promiscuous mode [ 180.033001][ T4244] usbhid 2-1:0.0: can't add hid device: -71 [ 181.582452][ T4244] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.910476][ T4244] usb 2-1: USB disconnect, device number 5 [ 183.780767][ T5170] binder: 5163:5170 unknown command 1074553619 [ 183.787082][ T5170] binder: 5163:5170 ioctl c0306201 200000000540 returned -22 [ 184.099683][ T5172] binder: 5166:5172 unknown command 1074553619 [ 184.105911][ T5172] binder: 5166:5172 ioctl c0306201 200000000540 returned -22 [ 184.659207][ T5179] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.800788][ T5187] atomic_op ffff88807eaff998 conn xmit_atomic 0000000000000000 [ 187.302314][ T5208] binder: 5204:5208 unknown command 1074553619 [ 187.308816][ T5208] binder: 5204:5208 ioctl c0306201 200000000540 returned -22 [ 187.371367][ T5207] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 187.371367][ T5207] program syz.1.250 not setting count and/or reply_len properly [ 188.618336][ T5209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'. [ 188.741699][ T5219] binder: 5213:5219 unknown command 1074553619 [ 188.748012][ T5219] binder: 5213:5219 ioctl c0306201 200000000540 returned -22 [ 188.829484][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.661438][ T5226] loop4: detected capacity change from 0 to 128 [ 189.740550][ T5231] loop2: detected capacity change from 0 to 128 [ 189.870013][ T21] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.915672][ T5234] overlayfs: failed to resolve './file1': -2 [ 189.952888][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.664975][ T21] usb 2-1: config 0 descriptor?? [ 190.732838][ T21] cp210x 2-1:0.0: cp210x converter detected [ 191.031147][ T5241] atomic_op ffff88805be78198 conn xmit_atomic 0000000000000000 [ 191.269769][ T5244] atomic_op ffff888147c66198 conn xmit_atomic 0000000000000000 [ 191.839465][ T21] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 192.027712][ T21] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 192.040478][ T21] usb 2-1: cp210x converter now attached to ttyUSB0 [ 192.051412][ T21] usb 2-1: USB disconnect, device number 6 [ 192.062237][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.070801][ T21] cp210x 2-1:0.0: device disconnected [ 192.085823][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 192.092276][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 192.100562][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 192.107081][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 192.470355][ T5254] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 192.470355][ T5254] program syz.3.267 not setting count and/or reply_len properly [ 193.140512][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 193.443008][ T5265] device syzkaller0 entered promiscuous mode [ 193.658110][ T5271] binder: 5258:5271 unknown command 1074553619 [ 193.664688][ T5271] binder: 5258:5271 ioctl c0306201 200000000540 returned -22 [ 194.309866][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316307][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.471442][ T5274] loop4: detected capacity change from 0 to 128 [ 195.618195][ T5282] atomic_op ffff8880738ae998 conn xmit_atomic 0000000000000000 [ 196.250105][ T5304] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 196.250105][ T5304] program syz.2.282 not setting count and/or reply_len properly [ 197.218302][ T5307] loop0: detected capacity change from 0 to 1024 [ 197.645470][ T5309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'. [ 197.692377][ T5307] EXT4-fs (loop0): Ignoring removed orlov option [ 198.042140][ T5322] loop1: detected capacity change from 0 to 128 [ 198.360959][ T5330] loop4: detected capacity change from 0 to 128 [ 199.177852][ T5333] atomic_op ffff888061e7b198 conn xmit_atomic 0000000000000000 [ 199.450617][ T5338] loop2: detected capacity change from 0 to 16 [ 199.635743][ T5338] erofs: (device loop2): mounted with root inode @ nid 36. [ 199.868030][ T5338] attempt to access beyond end of device [ 199.868030][ T5338] loop2: rw=0, want=40, limit=16 [ 202.507345][ T5379] binder: 5369:5379 unknown command 1074553619 [ 202.507415][ T5379] binder: 5369:5379 ioctl c0306201 200000000540 returned -22 [ 203.340773][ T5382] device syzkaller0 entered promiscuous mode [ 203.372870][ T5380] atomic_op ffff888076ecb998 conn xmit_atomic 0000000000000000 [ 204.205766][ T5396] binder: 5389:5396 ioctl c0306201 0 returned -14 [ 205.938147][ T5408] loop2: detected capacity change from 0 to 1024 [ 206.053706][ T5408] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 206.129524][ T5408] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.221254][ T5408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 206.238050][ T5408] System zones: 0-1, 3-36 [ 206.292346][ T5408] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 206.382074][ T5417] loop0: detected capacity change from 0 to 128 [ 207.402845][ T5432] nbd: nbd1 already in use [ 207.754292][ T5435] atomic_op ffff8880246b2198 conn xmit_atomic 0000000000000000 [ 208.971525][ T5443] binder: 5437:5443 ioctl c0306201 0 returned -14 [ 211.554626][ T5454] loop2: detected capacity change from 0 to 128 [ 211.917320][ T5454] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.373987][ T5454] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.239451][ T5454] loop_set_status: loop2 () has still dirty pages (nrpages=4) [ 213.309720][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.553867][ T5473] device batadv_slave_0 entered promiscuous mode [ 214.045493][ T5478] loop4: detected capacity change from 0 to 16 [ 214.214107][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 214.308232][ T5478] erofs: (device loop4): mounted with root inode @ nid 36. [ 214.342995][ T5478] attempt to access beyond end of device [ 214.342995][ T5478] loop4: rw=0, want=40, limit=16 [ 214.415834][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 214.598590][ T4187] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 214.722868][ T5489] binder: 5486:5489 ioctl c0306201 0 returned -14 [ 215.557018][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 215.573295][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 215.656411][ T4187] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 215.680563][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 217.304434][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 217.322402][ T4187] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 217.500696][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 219.315142][ T4187] EXT4-fs error: 182 callbacks suppressed [ 219.315162][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 220.840852][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 220.924171][ T4187] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 221.003836][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 221.115938][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 221.329837][ T4187] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 221.790357][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 221.844481][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 221.960885][ T4187] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 222.005540][ T4187] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 222.146923][ T5529] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 222.146923][ T5529] program syz.3.350 not setting count and/or reply_len properly [ 224.480010][ T1334] Bluetooth: hci5: command 0x0409 tx timeout [ 224.775047][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.887482][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.979032][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.152226][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.084874][ T5531] chnl_net:caif_netlink_parms(): no params data found [ 226.458558][ T5576] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 226.458558][ T5576] program syz.4.362 not setting count and/or reply_len properly [ 226.539687][ T4404] Bluetooth: hci5: command 0x041b tx timeout [ 226.739473][ T5583] overlayfs: overlapping lowerdir path [ 228.769174][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 228.800742][ T5595] loop1: detected capacity change from 0 to 128 [ 228.862010][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.914982][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.923534][ T5531] device bridge_slave_0 entered promiscuous mode [ 229.880890][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.888473][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.902540][ T4404] Bluetooth: hci3: command 0x0409 tx timeout [ 230.196651][ T5531] device bridge_slave_1 entered promiscuous mode [ 230.280408][ T5531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.311643][ T5531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.871651][ T4252] Bluetooth: hci5: command 0x0419 tx timeout [ 233.122413][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 233.612624][ T5531] team0: Port device team_slave_0 added [ 234.135512][ T5531] team0: Port device team_slave_1 added [ 234.792224][ T5648] loop3: detected capacity change from 0 to 128 [ 235.420682][ T5531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.432822][ T5531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.044574][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 236.115585][ T5531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.948977][ T5531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.967982][ T5531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.066921][ T5531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.817197][ T5531] device hsr_slave_0 entered promiscuous mode [ 237.831880][ T5688] nbd: nbd4 already in use [ 237.839198][ T5531] device hsr_slave_1 entered promiscuous mode [ 237.905855][ T5531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.926263][ T5531] Cannot create hsr debugfs directory [ 237.955055][ T5582] chnl_net:caif_netlink_parms(): no params data found [ 238.149615][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 238.264287][ T5702] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 238.264287][ T5702] program syz.3.386 not setting count and/or reply_len properly [ 239.362879][ T5706] overlayfs: missing 'lowerdir' [ 239.415264][ T5715] loop1: detected capacity change from 0 to 512 [ 239.451377][ T5716] loop3: detected capacity change from 0 to 1024 [ 239.523897][ T5716] EXT4-fs (loop3): Ignoring removed nobh option [ 239.525173][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.538155][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.561727][ T5582] device bridge_slave_0 entered promiscuous mode [ 239.609636][ T5715] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 239.629624][ T5716] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.389: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 239.657519][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.718630][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.754275][ T5715] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.771842][ T5582] device bridge_slave_1 entered promiscuous mode [ 240.329608][ T5716] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.389: couldn't read orphan inode 11 (err -117) [ 240.649861][ T5716] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 240.760444][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.633633][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.752863][ T5582] team0: Port device team_slave_0 added [ 242.771034][ T5582] team0: Port device team_slave_1 added [ 243.847439][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.904767][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.209378][ T5760] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 244.209378][ T5760] program syz.3.397 not setting count and/or reply_len properly [ 244.289818][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.658462][ T5531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.886829][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.919556][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.019407][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.131502][ T5770] input: syz1 as /devices/virtual/input/input9 [ 245.550386][ T5531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.743486][ T5531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.236872][ T5531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.524900][ T5582] device hsr_slave_0 entered promiscuous mode [ 246.591204][ T5582] device hsr_slave_1 entered promiscuous mode [ 246.614887][ T5582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.657199][ T5582] Cannot create hsr debugfs directory [ 247.765772][ T144] device hsr_slave_0 left promiscuous mode [ 247.785451][ T144] device hsr_slave_1 left promiscuous mode [ 247.799756][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.807574][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.827041][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.888400][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.897145][ T144] device bridge_slave_1 left promiscuous mode [ 247.905776][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.928055][ T144] device bridge_slave_0 left promiscuous mode [ 247.934507][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.848651][ T144] device veth1_macvtap left promiscuous mode [ 249.036887][ T144] device veth0_macvtap left promiscuous mode [ 249.048659][ T144] device veth1_vlan left promiscuous mode [ 249.056291][ T144] device veth0_vlan left promiscuous mode [ 250.266296][ T144] team0 (unregistering): Port device team_slave_1 removed [ 250.305742][ T144] team0 (unregistering): Port device team_slave_0 removed [ 250.530364][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.553924][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.593920][ T5838] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 250.593920][ T5838] program syz.4.418 not setting count and/or reply_len properly [ 250.671901][ T144] bond0 (unregistering): Released all slaves [ 251.188857][ T5531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.252774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.330890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.395364][ T5859] overlayfs: overlapping lowerdir path [ 251.751422][ T5531] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.894229][ T5582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.978130][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.018390][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.090704][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.097926][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.241498][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.081635][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.199873][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.207394][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.873296][ T5582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.911273][ T5582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.274019][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.286278][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.296990][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.306283][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.327998][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.341988][ T5887] loop3: detected capacity change from 0 to 512 [ 254.387754][ T5582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.447617][ T5887] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 254.458242][ T5888] loop4: detected capacity change from 0 to 128 [ 254.496432][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.499477][ T5887] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.528090][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.540794][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.550382][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.567974][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.596205][ T5888] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.607404][ T5888] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.621781][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.677817][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.688143][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.983810][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.533317][ T5924] overlayfs: overlapping lowerdir path [ 256.096506][ T5923] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 256.096506][ T5923] program syz.3.431 not setting count and/or reply_len properly [ 256.179353][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.185725][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.206509][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.239465][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.248464][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.426215][ T5531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.616201][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.637546][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.658657][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.665905][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.676358][ T5938] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 256.676358][ T5938] program syz.4.435 not setting count and/or reply_len properly [ 256.815373][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.993051][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.124035][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.131682][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.387953][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.516794][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.525762][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.535567][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.543360][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.681892][ T5582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.735711][ T5582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.763882][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.792748][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.797159][ T5954] loop3: detected capacity change from 0 to 1024 [ 257.830524][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.850411][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.887037][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.226793][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.872103][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.880487][ T5954] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 259.887459][ T5954] hfsplus: xattr searching failed [ 259.909741][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.939158][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.973559][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.081978][ T4252] Bluetooth: hci4: command 0x1003 tx timeout [ 260.092921][ T4203] Bluetooth: hci4: sending frame failed (-49) [ 261.192999][ T5981] overlayfs: failed to clone lowerpath [ 261.909754][ T5982] atomic_op ffff88807753b198 conn xmit_atomic 0000000000000000 [ 262.139515][ T4252] Bluetooth: hci4: command 0x1001 tx timeout [ 262.145842][ T4203] Bluetooth: hci4: sending frame failed (-49) [ 262.220371][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.243512][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.297773][ T5993] usb usb8: usbfs: process 5993 (syz.3.446) did not claim interface 0 before use [ 262.316838][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.326649][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.353514][ T5531] device veth0_vlan entered promiscuous mode [ 262.403878][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.425169][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.527001][ T5531] device veth1_vlan entered promiscuous mode [ 262.606040][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.669693][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.773724][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.914751][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.230177][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.330379][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.356238][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.451455][ T5531] device veth0_macvtap entered promiscuous mode [ 263.823302][ T6010] overlayfs: missing 'lowerdir' [ 264.546223][ T4230] Bluetooth: hci4: command 0x1009 tx timeout [ 264.552802][ T5531] device veth1_macvtap entered promiscuous mode [ 264.756467][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.789006][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.817459][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.857480][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.907485][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.924883][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.937141][ T5531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.962371][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.977455][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.005261][ T6024] faulting far call emulation tainted memory [ 265.010081][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.029550][ T6024] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.046321][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.063033][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.093727][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.131770][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.149361][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.159214][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.188391][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.209042][ T5531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.224932][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.300962][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.348658][ T5531] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.377991][ T5531] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.408880][ T5531] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.417841][ T5531] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.832663][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.887336][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.019556][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.055971][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.101493][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.189995][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.200816][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.227937][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.289412][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.745275][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.755970][ T5582] device veth0_vlan entered promiscuous mode [ 266.803530][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.894918][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.937730][ T5582] device veth1_vlan entered promiscuous mode [ 266.978093][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.090624][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.359686][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.063573][ T6069] loop4: detected capacity change from 0 to 256 [ 270.167618][ T5582] device veth0_macvtap entered promiscuous mode [ 270.190224][ T6069] exfat: Bad value for 'errors' [ 271.338862][ T6082] loop4: detected capacity change from 0 to 8192 [ 271.756530][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.457965][ T5582] device veth1_macvtap entered promiscuous mode [ 272.531495][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.604621][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.616397][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.926855][ T6098] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 272.926855][ T6098] program syz.5.463 not setting count and/or reply_len properly [ 273.332897][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.363593][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.393669][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.416129][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.535741][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.577023][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.610292][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.691646][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.729469][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.735599][ T6116] loop4: detected capacity change from 0 to 128 [ 274.755702][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.784738][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.808794][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.827933][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.837981][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.954325][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.088808][ T5582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.217124][ T5582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.377950][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.664226][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.774688][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.794695][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.834357][ T6128] loop3: detected capacity change from 0 to 512 [ 275.871632][ T5582] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.952256][ T5582] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.107963][ T5582] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.209703][ T5582] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.303595][ T6128] EXT4-fs (loop3): Ignoring removed nobh option [ 276.318240][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.457561][ T6128] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.499464][ T6128] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 276.519326][ T6128] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.475: Corrupt directory, running e2fsck is recommended [ 276.631795][ T6128] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 276.678323][ T6128] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.475: corrupted in-inode xattr [ 276.743373][ T6137] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 276.743373][ T6137] program syz.4.476 not setting count and/or reply_len properly [ 276.870448][ T6128] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 276.912095][ T6128] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 277.059853][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.068075][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.154025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.166117][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.190574][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.257315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.080701][ T6157] capability: warning: `syz.4.481' uses deprecated v2 capabilities in a way that may be insecure [ 278.203243][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.482'. [ 278.203272][ T6160] device lo entered promiscuous mode [ 278.459479][ T6170] loop6: detected capacity change from 0 to 1024 [ 278.592594][ T6170] EXT4-fs (loop6): Ignoring removed oldalloc option [ 278.748828][ T6170] EXT4-fs (loop6): Ignoring removed bh option [ 278.755147][ T6170] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.537687][ T6170] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 279.787068][ T6188] loop3: detected capacity change from 0 to 128 [ 279.973007][ T9] device hsr_slave_0 left promiscuous mode [ 280.026524][ T6170] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3871: comm syz.6.485: Allocating blocks 497-513 which overlap fs metadata [ 281.520322][ T9] device hsr_slave_1 left promiscuous mode [ 281.657734][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.699756][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.364114][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.422564][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.592525][ T6189] EXT4-fs (loop6): pa ffff88801c429620: logic 16, phys. 321, len 12 [ 282.604286][ T6189] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 282.675514][ T9] device bridge_slave_1 left promiscuous mode [ 282.682290][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.804468][ T9] device bridge_slave_0 left promiscuous mode [ 282.814153][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.836621][ T6211] loop5: detected capacity change from 0 to 128 [ 282.921280][ T6211] FAT-fs (loop5): Unrecognized mount option "shortname=wMnt" or missing value [ 283.037068][ T9] device veth1_macvtap left promiscuous mode [ 283.043610][ T9] device veth0_macvtap left promiscuous mode [ 283.367680][ T9] device veth1_vlan left promiscuous mode [ 283.373837][ T9] device veth0_vlan left promiscuous mode [ 285.662344][ T6232] loop3: detected capacity change from 0 to 128 [ 285.679953][ T6225] loop5: detected capacity change from 0 to 128 [ 285.871174][ T6232] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 286.794352][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 286.806417][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 286.814101][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.824167][ T4200] Workqueue: hci1 hci_rx_work [ 286.828870][ T4200] Call Trace: [ 286.832494][ T4200] [ 286.835550][ T4200] dump_stack_lvl+0x168/0x230 [ 286.840353][ T4200] ? show_regs_print_info+0x20/0x20 [ 286.845570][ T4200] ? load_image+0x3b0/0x3b0 [ 286.850088][ T4200] sysfs_create_dir_ns+0x252/0x280 [ 286.855209][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 286.860251][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 286.864987][ T4200] ? le_conn_complete_evt+0xcbc/0x1590 [ 286.870644][ T4200] ? hci_event_packet+0xe05/0x12f0 [ 286.875776][ T4200] ? process_one_work+0x863/0x1000 [ 286.880904][ T4200] ? do_raw_spin_unlock+0x11d/0x230 [ 286.886329][ T4200] kobject_add_internal+0x662/0xd00 [ 286.891657][ T4200] kobject_add+0x152/0x210 [ 286.896122][ T4200] ? kobject_init+0x1d0/0x1d0 [ 286.900819][ T4200] ? klist_children_get+0x50/0x50 [ 286.905861][ T4200] ? get_device_parent+0x121/0x3f0 [ 286.910997][ T4200] device_add+0x483/0xfb0 [ 286.915355][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 286.920335][ T4200] le_conn_complete_evt+0xcbc/0x1590 [ 286.925645][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 286.930768][ T4200] ? __mutex_trylock_common+0x14f/0x250 [ 286.936326][ T4200] hci_le_meta_evt+0x289/0x3b80 [ 286.941372][ T4200] ? hci_event_packet+0x36d/0x12f0 [ 286.946490][ T4200] ? hci_event_packet+0x2e2/0x12f0 [ 286.951869][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 286.957144][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 286.963227][ T4200] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 286.968871][ T4200] ? mark_lock+0x94/0x320 [ 286.973209][ T4200] ? mutex_unlock+0x10/0x10 [ 286.977808][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 286.983804][ T4200] ? lock_chain_count+0x20/0x20 [ 286.988693][ T4200] ? __rwlock_init+0x140/0x140 [ 286.993467][ T4200] hci_event_packet+0xe05/0x12f0 [ 286.998422][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 287.003643][ T4200] ? rcu_lock_release+0x20/0x20 [ 287.008596][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 287.013893][ T4200] hci_rx_work+0x255/0xa10 [ 287.018378][ T4200] process_one_work+0x863/0x1000 [ 287.023359][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 287.029096][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 287.034400][ T4200] ? _raw_spin_lock_irq+0xab/0xe0 [ 287.039439][ T4200] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 287.044818][ T4200] ? wq_worker_running+0x97/0x170 [ 287.049850][ T4200] worker_thread+0xaa8/0x12a0 [ 287.054558][ T4200] kthread+0x436/0x520 [ 287.058635][ T4200] ? rcu_lock_release+0x20/0x20 [ 287.063491][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 287.068104][ T4200] ret_from_fork+0x1f/0x30 [ 287.072560][ T4200] [ 287.125415][ T4200] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 287.134742][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 287.139009][ T4200] Bluetooth: hci1: failed to register connection device [ 290.075678][ T6274] loop3: detected capacity change from 0 to 512 [ 290.185070][ T6278] fuse: Unknown parameter '/dev/sg#' [ 290.191101][ T6278] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 290.191101][ T6278] program syz.5.513 not setting count and/or reply_len properly [ 290.270131][ T6274] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 290.448006][ T6283] loop5: detected capacity change from 0 to 512 [ 290.485636][ T6283] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 290.496845][ T6283] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 290.515234][ T6274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.647609][ T6283] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 290.655700][ T6283] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=6042e01c, mo2=0000] [ 290.663728][ T6283] EXT4-fs (loop5): failed to initialize system zone (-117) [ 290.671267][ T6283] EXT4-fs (loop5): mount failed [ 290.793482][ T6288] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.951780][ T6274] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 291.097171][ T9] team0 (unregistering): Port device team_slave_1 removed [ 291.221862][ T6274] EXT4-fs (loop3): 1 truncate cleaned up [ 291.227609][ T6274] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 291.273670][ T9] team0 (unregistering): Port device team_slave_0 removed [ 291.285837][ T6294] loop4: detected capacity change from 0 to 128 [ 291.627616][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.687483][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.720842][ T6294] FAT-fs (loop4): Directory bread(block 162) failed [ 291.759570][ T6294] FAT-fs (loop4): Directory bread(block 163) failed [ 291.766259][ T6294] FAT-fs (loop4): Directory bread(block 164) failed [ 291.799710][ T6294] FAT-fs (loop4): Directory bread(block 165) failed [ 291.827210][ T6294] FAT-fs (loop4): Directory bread(block 166) failed [ 291.854616][ T6294] FAT-fs (loop4): Directory bread(block 167) failed [ 291.872032][ T6294] FAT-fs (loop4): Directory bread(block 168) failed [ 291.878716][ T6294] FAT-fs (loop4): Directory bread(block 169) failed [ 292.006875][ T9] bond0 (unregistering): Released all slaves [ 293.238501][ T6322] fuse: Unknown parameter '/dev/sg#' [ 293.244720][ T6322] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 293.244720][ T6322] program syz.4.526 not setting count and/or reply_len properly [ 294.274542][ T6332] overlayfs: missing 'lowerdir' [ 294.572485][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 295.174973][ T6334] input: syz1 as /devices/virtual/input/input10 [ 297.390626][ T6383] atomic_op ffff88807de5b198 conn xmit_atomic 0000000000000000 [ 298.568836][ T6406] overlayfs: unrecognized mount option "/" or missing value [ 300.429531][ T4464] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 300.758973][ T6447] atomic_op ffff88802329f998 conn xmit_atomic 0000000000000000 [ 300.809541][ T4464] usb 4-1: not running at top speed; connect to a high speed hub [ 300.894180][ T6450] fuse: Bad value for 'fd' [ 301.339445][ T4464] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 301.348190][ T4464] usb 4-1: config 95 has no interface number 0 [ 301.354651][ T4464] usb 4-1: config 95 interface 1 has no altsetting 0 [ 301.489162][ T26] audit: type=1326 audit(1759778720.901:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f436ec9 code=0x7ffc0000 [ 301.529511][ T4464] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 301.559324][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.599637][ T26] audit: type=1326 audit(1759778720.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f436ec9 code=0x7ffc0000 [ 301.604787][ T4464] usb 4-1: Product: syz [ 301.712189][ T26] audit: type=1326 audit(1759778720.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f548f436ec9 code=0x7ffc0000 [ 301.834222][ T4464] usb 4-1: Manufacturer: syz [ 301.839014][ T4464] usb 4-1: SerialNumber: syz [ 301.859418][ T26] audit: type=1326 audit(1759778720.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f436ec9 code=0x7ffc0000 [ 301.966136][ T6465] overlayfs: unrecognized mount option "/" or missing value [ 302.328819][ T26] audit: type=1326 audit(1759778720.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f436ec9 code=0x7ffc0000 [ 302.612924][ T6470] loop3: detected capacity change from 0 to 1024 [ 302.647709][ T26] audit: type=1326 audit(1759778720.931:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f548f436ec9 code=0x7ffc0000 [ 303.999481][ T26] audit: type=1326 audit(1759778720.931:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f548f436f03 code=0x7ffc0000 [ 305.019680][ T26] audit: type=1326 audit(1759778720.931:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f548f43597f code=0x7ffc0000 [ 305.129797][ T6484] loop3: detected capacity change from 0 to 2048 [ 305.170573][ T6492] loop4: detected capacity change from 0 to 8 [ 305.259451][ T4464] usb 4-1: USB disconnect, device number 2 [ 305.309543][ T26] audit: type=1326 audit(1759778720.951:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f548f436f57 code=0x7ffc0000 [ 305.479608][ T26] audit: type=1326 audit(1759778720.961:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f548f435710 code=0x7ffc0000 [ 305.518203][ T6484] loop3: p1 p3 p4 [ 305.585296][ T6492] SQUASHFS error: Failed to read block 0x599: -5 [ 305.592247][ T6484] loop3: p4 size 589824 extends beyond EOD, truncated [ 305.659404][ T4343] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 305.679310][ T6492] SQUASHFS error: Unable to read metadata cache entry [599] [ 305.764595][ T3561] loop3: p1 p3 p4 [ 305.804414][ T3561] loop3: p4 size 589824 extends beyond EOD, truncated [ 305.925564][ T4343] usb 7-1: Using ep0 maxpacket: 32 [ 306.066682][ T4343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 306.104245][ T4343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 306.168730][ T4343] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.250651][ T4343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.307822][ T4343] usb 7-1: config 0 descriptor?? [ 306.361403][ T4343] hub 7-1:0.0: USB hub found [ 306.581188][ T4343] hub 7-1:0.0: 1 port detected [ 307.408882][ T6543] overlayfs: unrecognized mount option "/" or missing value [ 308.075374][ T4404] usb 7-1: USB disconnect, device number 2 [ 308.700968][ T6560] overlayfs: unrecognized mount option "/" or missing value [ 310.287065][ T6570] loop4: detected capacity change from 0 to 1024 [ 310.451963][ T6574] device syzkaller0 entered promiscuous mode [ 311.143096][ T409] hfsplus: b-tree write err: -5, ino 4 [ 311.451822][ T6586] loop6: detected capacity change from 0 to 1024 [ 311.612138][ T6586] EXT4-fs (loop6): Ignoring removed orlov option [ 311.703922][ T6586] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 313.318887][ T6616] overlayfs: unrecognized mount option "/" or missing value [ 314.061775][ T6617] input: syz1 as /devices/virtual/input/input11 [ 314.777582][ T6631] device syzkaller0 entered promiscuous mode [ 317.184790][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.191598][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.699322][ T21] Bluetooth: hci3: command 0x0401 tx timeout [ 318.946378][ T6689] loop3: detected capacity change from 0 to 512 [ 319.141093][ T6694] device syzkaller0 entered promiscuous mode [ 319.232836][ T6689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.249605][ T6689] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.813383][ T6712] loop3: detected capacity change from 0 to 128 [ 325.204454][ T6761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.264592][ T6758] atomic_op ffff88814d199998 conn xmit_atomic 0000000000000000 [ 325.286174][ T6765] loop6: detected capacity change from 0 to 128 [ 326.407425][ T6774] loop4: detected capacity change from 0 to 128 [ 326.415134][ T6774] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 326.455312][ T6772] loop3: detected capacity change from 0 to 2048 [ 327.969734][ T6772] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 328.119881][ T6787] fuse: Unknown parameter '/dev/sg#' [ 328.125838][ T6787] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 328.125838][ T6787] program syz.5.635 not setting count and/or reply_len properly [ 328.151886][ T6772] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrquota,errors=remount-ro,dioread_lock,noquota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 328.203537][ T6789] loop6: detected capacity change from 0 to 128 [ 328.260607][ T6789] FAT-fs (loop6): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 328.461806][ T6799] loop4: detected capacity change from 0 to 164 [ 329.223021][ T6793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 330.301794][ T6810] loop6: detected capacity change from 0 to 128 [ 330.397679][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.408610][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.416243][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.560694][ T6793] EXT4-fs (loop3): Remounting filesystem read-only [ 331.818772][ T6838] loop6: detected capacity change from 0 to 128 [ 331.847727][ T6838] FAT-fs (loop6): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 332.000217][ T6841] device syzkaller0 entered promiscuous mode [ 332.782578][ T6845] loop5: detected capacity change from 0 to 256 [ 333.755849][ T6845] attempt to access beyond end of device [ 333.755849][ T6845] loop5: rw=2049, want=324, limit=256 [ 333.864409][ T6845] attempt to access beyond end of device [ 333.864409][ T6845] loop5: rw=2049, want=264, limit=256 [ 333.877076][ T6845] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 333.891858][ T6845] attempt to access beyond end of device [ 333.891858][ T6845] loop5: rw=2049, want=296, limit=256 [ 334.385489][ T6880] atomic_op ffff88807ee63198 conn xmit_atomic 0000000000000000 [ 336.101123][ T6894] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 336.101123][ T6894] program syz.3.659 not setting count and/or reply_len properly [ 336.359646][ T6899] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 336.429964][ T6899] overlayfs: missing 'lowerdir' [ 336.642174][ T6907] loop5: detected capacity change from 0 to 128 [ 336.690660][ T6907] FAT-fs (loop5): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 336.889385][ T4464] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 337.250110][ T4464] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 337.549648][ T4464] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.593259][ T4464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.700671][ T4464] usb 7-1: SerialNumber: syz [ 337.990046][ T6924] device syzkaller0 entered promiscuous mode [ 338.220137][ T4464] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 338.285038][ T4464] usb 7-1: USB disconnect, device number 3 [ 339.239661][ T6947] atomic_op ffff888024cc6198 conn xmit_atomic 0000000000000000 [ 341.355032][ T6984] nbd: nbd3 already in use [ 343.315067][ T7017] atomic_op ffff888141ba4998 conn xmit_atomic 0000000000000000 [ 344.097703][ T7024] loop5: detected capacity change from 0 to 512 [ 344.859353][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 344.965645][ T7034] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 344.965645][ T7034] program syz.6.687 not setting count and/or reply_len properly [ 346.521607][ T7058] nbd: nbd3 already in use [ 350.213459][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 350.361706][ T7090] loop4: detected capacity change from 0 to 512 [ 350.444637][ T7093] loop3: detected capacity change from 0 to 512 [ 350.479527][ T7090] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 350.533753][ T7090] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 350.569027][ T7090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e04ce028, mo2=0002] [ 350.579365][ T7090] System zones: 0-1, 15-15, 18-18, 34-34 [ 350.632204][ T7090] EXT4-fs (loop4): orphan cleanup on readonly fs [ 350.690768][ T7090] __quota_error: 6 callbacks suppressed [ 350.690788][ T7090] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 350.714625][ T7093] EXT4-fs (loop3): 1 orphan inode deleted [ 350.749496][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 350.779370][ T7090] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 350.813765][ T7093] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.869762][ T7090] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 351.129420][ T7090] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.702: bg 0: block 40: padding at end of block bitmap is not set [ 351.198452][ T7090] EXT4-fs (loop4): Remounting filesystem read-only [ 351.220209][ T7090] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 351.287106][ T7108] atomic_op ffff88805ace3198 conn xmit_atomic 0000000000000000 [ 351.355663][ T7090] EXT4-fs (loop4): Remounting filesystem read-only [ 351.456230][ T7090] EXT4-fs (loop4): 1 truncate cleaned up [ 351.560670][ T7090] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,resuid=0x0000000000000000,nojournal_checksum,mblk_io_submit,acl,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 353.283862][ T7139] nbd: nbd3 already in use [ 355.548040][ T7135] syz.5.710 (7135) used greatest stack depth: 18592 bytes left [ 355.567199][ T7161] atomic_op ffff88807bc44998 conn xmit_atomic 0000000000000000 [ 357.424526][ T7184] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 357.447382][ T7184] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 357.487843][ T7184] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 357.817267][ T7195] nbd: nbd5 already in use [ 358.221927][ T7202] loop5: detected capacity change from 0 to 4096 [ 358.360792][ T7202] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.484069][ T26] audit: type=1800 audit(1759778777.901:19): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.725" name="file0" dev="loop5" ino=19 res=0 errno=0 [ 358.792410][ T7221] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 358.792410][ T7221] program syz.4.714 not setting count and/or reply_len properly [ 359.026739][ T7207] netlink: 'syz.1.726': attribute type 4 has an invalid length. [ 359.054573][ T7207] netlink: 17 bytes leftover after parsing attributes in process `syz.1.726'. [ 359.136058][ T7232] syz.6.729 uses obsolete (PF_INET,SOCK_PACKET) [ 359.379169][ T7238] atomic_op ffff888147c66198 conn xmit_atomic 0000000000000000 [ 360.473109][ T7244] loop6: detected capacity change from 0 to 16 [ 361.165019][ T7244] erofs: (device loop6): mounted with root inode @ nid 36. [ 361.188186][ T7241] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 361.199002][ T7241] attempt to access beyond end of device [ 361.199002][ T7241] loop6: rw=524288, want=34359740336, limit=16 [ 361.305439][ T7248] overlayfs: failed to resolve './file1': -2 [ 362.245389][ T7279] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.360229][ T7279] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.579813][ T7294] tipc: Enabling of bearer rejected, failed to enable media [ 362.767613][ T7300] overlayfs: failed to resolve './file1': -2 [ 363.098532][ T7311] [ 363.100927][ T7311] ====================================================== [ 363.108069][ T7311] WARNING: possible circular locking dependency detected [ 363.115136][ T7311] syzkaller #0 Not tainted [ 363.119564][ T7311] ------------------------------------------------------ [ 363.126607][ T7311] syz.3.750/7311 is trying to acquire lock: [ 363.132519][ T7311] ffff8880609be120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 363.141971][ T7311] [ 363.141971][ T7311] but task is already holding lock: [ 363.149359][ T7311] ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 363.157683][ T7311] [ 363.157683][ T7311] which lock already depends on the new lock. [ 363.157683][ T7311] [ 363.168489][ T7311] [ 363.168489][ T7311] the existing dependency chain (in reverse order) is: [ 363.177534][ T7311] [ 363.177534][ T7311] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 363.184890][ T7311] __mutex_lock_common+0x1eb/0x2390 [ 363.190647][ T7311] mutex_lock_nested+0x17/0x20 [ 363.195976][ T7311] ax25_setsockopt+0x830/0xa40 [ 363.201308][ T7311] __sys_setsockopt+0x2bf/0x3d0 [ 363.206840][ T7311] __x64_sys_setsockopt+0xb1/0xc0 [ 363.212440][ T7311] do_syscall_64+0x4c/0xa0 [ 363.217412][ T7311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.223883][ T7311] [ 363.223883][ T7311] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 363.231714][ T7311] __lock_acquire+0x2c33/0x7c60 [ 363.237146][ T7311] lock_acquire+0x197/0x3f0 [ 363.242221][ T7311] lock_sock_nested+0x44/0x100 [ 363.247557][ T7311] ax25_device_event+0x217/0x4f0 [ 363.253050][ T7311] raw_notifier_call_chain+0xcb/0x160 [ 363.258986][ T7311] __dev_notify_flags+0x178/0x2d0 [ 363.264569][ T7311] dev_change_flags+0xe3/0x1a0 [ 363.269885][ T7311] dev_ifsioc+0x147/0xe70 [ 363.274775][ T7311] dev_ioctl+0x55f/0xe50 [ 363.279598][ T7311] sock_do_ioctl+0x222/0x2f0 [ 363.284735][ T7311] sock_ioctl+0x4ed/0x6e0 [ 363.289609][ T7311] __se_sys_ioctl+0xfa/0x170 [ 363.294758][ T7311] do_syscall_64+0x4c/0xa0 [ 363.299760][ T7311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.306212][ T7311] [ 363.306212][ T7311] other info that might help us debug this: [ 363.306212][ T7311] [ 363.316613][ T7311] Possible unsafe locking scenario: [ 363.316613][ T7311] [ 363.324089][ T7311] CPU0 CPU1 [ 363.329473][ T7311] ---- ---- [ 363.334873][ T7311] lock(rtnl_mutex); [ 363.338878][ T7311] lock(sk_lock-AF_AX25); [ 363.345848][ T7311] lock(rtnl_mutex); [ 363.352382][ T7311] lock(sk_lock-AF_AX25); [ 363.356825][ T7311] [ 363.356825][ T7311] *** DEADLOCK *** [ 363.356825][ T7311] [ 363.364992][ T7311] 1 lock held by syz.3.750/7311: [ 363.369946][ T7311] #0: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 363.378697][ T7311] [ 363.378697][ T7311] stack backtrace: [ 363.384632][ T7311] CPU: 1 PID: 7311 Comm: syz.3.750 Not tainted syzkaller #0 [ 363.391937][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.402029][ T7311] Call Trace: [ 363.405332][ T7311] [ 363.408285][ T7311] dump_stack_lvl+0x168/0x230 [ 363.412995][ T7311] ? load_image+0x3b0/0x3b0 [ 363.417523][ T7311] ? show_regs_print_info+0x20/0x20 [ 363.422761][ T7311] ? print_circular_bug+0x12b/0x1a0 [ 363.428038][ T7311] check_noncircular+0x274/0x310 [ 363.433105][ T7311] ? add_chain_block+0x940/0x940 [ 363.438069][ T7311] ? lockdep_lock+0xdc/0x1e0 [ 363.442701][ T7311] ? lockdep_unlock+0x134/0x2d0 [ 363.447681][ T7311] ? mark_lock+0x94/0x320 [ 363.452145][ T7311] __lock_acquire+0x2c33/0x7c60 [ 363.457089][ T7311] ? lock_chain_count+0x20/0x20 [ 363.462061][ T7311] ? mark_lock+0x94/0x320 [ 363.466639][ T7311] ? verify_lock_unused+0x140/0x140 [ 363.471880][ T7311] ? verify_lock_unused+0x140/0x140 [ 363.477210][ T7311] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.483239][ T7311] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 363.489269][ T7311] ? __local_bh_enable_ip+0x12a/0x1b0 [ 363.494694][ T7311] ? mark_lock+0x94/0x320 [ 363.499075][ T7311] lock_acquire+0x197/0x3f0 [ 363.503637][ T7311] ? ax25_device_event+0x217/0x4f0 [ 363.508778][ T7311] ? lock_chain_count+0x20/0x20 [ 363.513756][ T7311] ? read_lock_is_recursive+0x10/0x10 [ 363.519170][ T7311] ? __local_bh_enable_ip+0x12a/0x1b0 [ 363.524584][ T7311] ? lockdep_hardirqs_on+0x94/0x140 [ 363.529920][ T7311] ? __local_bh_enable_ip+0x12a/0x1b0 [ 363.535868][ T7311] ? _local_bh_enable+0xa0/0xa0 [ 363.540920][ T7311] lock_sock_nested+0x44/0x100 [ 363.546111][ T7311] ? ax25_device_event+0x217/0x4f0 [ 363.551347][ T7311] ax25_device_event+0x217/0x4f0 [ 363.556409][ T7311] raw_notifier_call_chain+0xcb/0x160 [ 363.561823][ T7311] __dev_notify_flags+0x178/0x2d0 [ 363.566986][ T7311] ? __dev_change_flags+0x6a0/0x6a0 [ 363.572515][ T7311] ? __dev_change_flags+0x4bb/0x6a0 [ 363.577940][ T7311] ? dev_get_flags+0x1c0/0x1c0 [ 363.582746][ T7311] ? dev_ioctl+0x54e/0xe50 [ 363.587378][ T7311] ? dev_ioctl+0x54e/0xe50 [ 363.591985][ T7311] dev_change_flags+0xe3/0x1a0 [ 363.596842][ T7311] dev_ifsioc+0x147/0xe70 [ 363.601276][ T7311] ? dev_ioctl+0xe50/0xe50 [ 363.605832][ T7311] ? apparmor_capable+0x12c/0x190 [ 363.610913][ T7311] ? full_name_hash+0x8e/0xe0 [ 363.615789][ T7311] dev_ioctl+0x55f/0xe50 [ 363.620090][ T7311] ? _copy_from_user+0x111/0x170 [ 363.625246][ T7311] sock_do_ioctl+0x222/0x2f0 [ 363.629996][ T7311] ? sock_show_fdinfo+0xb0/0xb0 [ 363.634911][ T7311] sock_ioctl+0x4ed/0x6e0 [ 363.639284][ T7311] ? sock_poll+0x3f0/0x3f0 [ 363.643779][ T7311] ? bpf_lsm_file_ioctl+0x5/0x10 [ 363.648902][ T7311] ? security_file_ioctl+0x7c/0xa0 [ 363.654141][ T7311] ? sock_poll+0x3f0/0x3f0 [ 363.658607][ T7311] __se_sys_ioctl+0xfa/0x170 [ 363.663245][ T7311] do_syscall_64+0x4c/0xa0 [ 363.667704][ T7311] ? clear_bhb_loop+0x30/0x80 [ 363.672421][ T7311] ? clear_bhb_loop+0x30/0x80 [ 363.677164][ T7311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.683196][ T7311] RIP: 0033:0x7f2017837ec9 [ 363.687654][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.707307][ T7311] RSP: 002b:00007f2015a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.715761][ T7311] RAX: ffffffffffffffda RBX: 00007f2017a8efa0 RCX: 00007f2017837ec9 [ 363.723802][ T7311] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 363.731930][ T7311] RBP: 00007f20178baf91 R08: 0000000000000000 R09: 0000000000000000 [ 363.739934][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.747936][ T7311] R13: 00007f2017a8f038 R14: 00007f2017a8efa0 R15: 00007ffc18a00c58 [ 363.755952][ T7311] [ 363.779797][ T7312] base_sock_release(ffff888071243000) sk=ffff88801fc6d000