last executing test programs: 36.819658993s ago: executing program 4 (id=43): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) (async) openat$audio1(0xffffffffffffff9c, 0x0, 0x129442, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) (async) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x3, 0x8440) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0xfffffdcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) (async) io_setup(0x7f, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000340)={r6, 0x8}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x7, &(0x7f0000000380)}, &(0x7f0000000280)=0x10) (async) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 35.681008986s ago: executing program 4 (id=45): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 33.91103597s ago: executing program 4 (id=51): unshare(0x20020000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0xffff}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x38) (async) syz_emit_ethernet(0x3b, &(0x7f00000000c0)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @generic={0x30f, 0x9, 0x6, 0xb, 0x3, @random="8635ca8e5817", "f30ecbdb3f4ea248c1f071", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, "4a2c91edae5a7997d7362f494868"}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff5308000000000000000b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 32.421722459s ago: executing program 4 (id=55): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001f40)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 30.630228344s ago: executing program 4 (id=59): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0xfe5d9000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 29.209681432s ago: executing program 4 (id=64): setrlimit(0xb, &(0x7f0000000000)={0x4848, 0x9}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x8000d7, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1020, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) (async) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x1}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x5, {{0x41, 0x803}, 0x2}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x0) (async) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c884}, 0x4) 28.800491859s ago: executing program 32 (id=64): setrlimit(0xb, &(0x7f0000000000)={0x4848, 0x9}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x8000d7, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1020, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) (async) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x1}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x5, {{0x41, 0x803}, 0x2}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x0) (async) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c884}, 0x4) 15.727956334s ago: executing program 1 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xd, 0x10000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x33}, @in=@local, {}, {}, {0x0, 0x0, 0x100}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e22, @in=@multicast2}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c854, &(0x7f0000000080), 0x64, 0x545, &(0x7f00000007c0)="$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") 12.670547343s ago: executing program 3 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create(0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x34c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 1) 11.545736975s ago: executing program 0 (id=103): io_setup(0x7, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fanotify_init(0x200, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) syz_io_uring_setup(0x2dbc, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) sendfile(r4, r3, 0x0, 0x578410e9) 10.868355699s ago: executing program 3 (id=104): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 10.492764936s ago: executing program 0 (id=105): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0xfe5d9000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10.347416609s ago: executing program 1 (id=106): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x6, 0x9, 0x2}) unshare(0x28000600) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x4026c1, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = gettid() tkill(r3, 0x14) fcntl$setown(r2, 0x8, r3) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x10, 0x0) unshare(0xc000400) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000600)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 10.049385665s ago: executing program 3 (id=107): syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') clock_adjtime(0x2, &(0x7f0000000b00)={0xfd0, 0x81, 0x4, 0x0, 0xffffff7fffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x41, 0xfffffffffffffffd, 0x0, 0x0, 0x2}) timer_create(0x0, 0x0, 0x0) socket(0x1e, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b28c52096d13d6b9aac338f27ca2d2108c51ad7bbbc6ec9d577b00c703c4ef2ee9f16febbb7afdafc59e817dc8edb56d445c74fa48cdccf79223640f685b92b26c62d7d65dd4fdd6f73c1d9c70f1bca7a7150f62de63f2f579f1fb2d10f3a770f2b9ce8cd8be9414e0444fd357b3fad5b16d91c91c0f1aa3e11d39426af77180bdb588060a2546b369655c02eb52709e0e03785f8010bfd1a72a817dad46c854ebb0a8aa5d59cae56089e2aac882b33018aa4006a44968a267cde827c86aa1abccb51cb152459f91a39a5cbbd8d218d37f4cf35d339694a379", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xf, 0x2a6, &(0x7f0000000b40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x44042, 0xd5) syz_emit_vhci(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='oom_score\x00') ftruncate(r0, 0x2007ffc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="130005000000000000000000d985bf43e207002b3fd4ae004e237e04ba0c453fc4c595"]) clock_adjtime(0x4, &(0x7f00000002c0)={0xff, 0x8, 0x0, 0x3, 0x2, 0x800, 0x6, 0x7ff, 0x2, 0x5, 0x3, 0x9, 0x6, 0x3, 0xfffffffffffffff7, 0x0, 0x9, 0x5e, 0x2, 0xffffffffffffff01, 0x3, 0x6, 0x5, 0x100000000, 0x8, 0x74c}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000009c00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r3, r5, 0x0) 9.871109278s ago: executing program 2 (id=108): syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') clock_adjtime(0x2, &(0x7f0000000b00)={0xfd0, 0x81, 0x4, 0x0, 0xffffff7fffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x41, 0xfffffffffffffffd, 0x0, 0x0, 0x2}) timer_create(0x0, 0x0, 0x0) socket(0x1e, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xf, 0x2a6, &(0x7f0000000b40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x44042, 0xd5) syz_emit_vhci(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='oom_score\x00') ftruncate(r0, 0x2007ffc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="130005000000000000000000d985bf43e207002b3fd4ae004e237e04ba0c453fc4c595"]) clock_adjtime(0x4, &(0x7f00000002c0)={0xff, 0x8, 0x0, 0x3, 0x2, 0x800, 0x6, 0x7ff, 0x2, 0x5, 0x3, 0x9, 0x6, 0x3, 0xfffffffffffffff7, 0x0, 0x9, 0x5e, 0x2, 0xffffffffffffff01, 0x3, 0x6, 0x5, 0x100000000, 0x8, 0x74c}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000009c00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r3, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 9.665750892s ago: executing program 1 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 8.726037401s ago: executing program 1 (id=110): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa81, &(0x7f0000000200)="$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") syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x30008c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11, 0x2bf, &(0x7f0000000d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 7.69477398s ago: executing program 2 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.608074242s ago: executing program 0 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (fail_nth: 1) 7.607484932s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() (async) getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x80000000000000a, 0x2, 0x0) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) creat(0x0, 0xa) (async) creat(0x0, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="31c1ddb11c81aaaaaaaaaa3b86dd60000000001c3c03fe800000000000000000000000000026fe8000000000000000000000000000aa3300"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58f830400000009078005a"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 6.309709138s ago: executing program 3 (id=114): io_setup(0x7, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fanotify_init(0x200, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) syz_io_uring_setup(0x2dbc, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) sendfile(r4, r3, 0x0, 0x578410e9) 4.945655704s ago: executing program 3 (id=115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x2000, 0x8000) recvmsg$unix(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/91, 0x5b}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/122, 0x7a}], 0x5, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.349044106s ago: executing program 1 (id=116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0xd, 0x10000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x33}, @in=@local, {}, {}, {0x0, 0x0, 0x100}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e22, @in=@multicast2}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c854, &(0x7f0000000080), 0x64, 0x545, &(0x7f00000007c0)="$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") 2.809613225s ago: executing program 0 (id=117): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 2.740259567s ago: executing program 2 (id=118): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x6, 0x9, 0x2}) unshare(0x28000600) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x4026c1, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = gettid() tkill(r3, 0x14) fcntl$setown(r2, 0x8, r3) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x10, 0x0) unshare(0xc000400) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000600)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 2.428097343s ago: executing program 1 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe39}, 0x8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 1.808486025s ago: executing program 0 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 1.465782912s ago: executing program 2 (id=121): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0xfe5d9000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.446712012s ago: executing program 2 (id=122): syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') clock_adjtime(0x2, &(0x7f0000000b00)={0xfd0, 0x81, 0x4, 0x0, 0xffffff7fffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x41, 0xfffffffffffffffd, 0x0, 0x0, 0x2}) timer_create(0x0, 0x0, 0x0) socket(0x1e, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b28c52096d13d6b9aac338f27ca2d2108c51ad7bbbc6ec9d577b00c703c4ef2ee9f16febbb7afdafc59e817dc8edb56d445c74fa48cdccf79223640f685b92b26c62d7d65dd4fdd6f73c1d9c70f1bca7a7150f62de63f2f579f1fb2d10f3a770f2b9ce8cd8be9414e0444fd357b3fad5b16d91c91c0f1aa3e11d39426af77180bdb588060a2546b369655c02eb52709e0e03785f8010bfd1a72a817dad46c854ebb0a8aa5d59cae56089e2aac882b33018aa4006a44968a267cde827c86aa1abccb51cb152459f91a39a5cbbd8d218d37f4cf35d339694a379", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xf, 0x2a6, &(0x7f0000000b40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x44042, 0xd5) syz_emit_vhci(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='oom_score\x00') ftruncate(r0, 0x2007ffc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="130005000000000000000000d985bf43e207002b3fd4ae004e237e04ba0c453fc4c595"]) clock_adjtime(0x4, &(0x7f00000002c0)={0xff, 0x8, 0x0, 0x3, 0x2, 0x800, 0x6, 0x7ff, 0x2, 0x5, 0x3, 0x9, 0x6, 0x3, 0xfffffffffffffff7, 0x0, 0x9, 0x5e, 0x2, 0xffffffffffffff01, 0x3, 0x6, 0x5, 0x100000000, 0x8, 0x74c}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000009c00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r3, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 313.49µs ago: executing program 0 (id=123): syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') clock_adjtime(0x2, &(0x7f0000000b00)={0xfd0, 0x81, 0x4, 0x0, 0xffffff7fffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x41, 0xfffffffffffffffd, 0x0, 0x0, 0x2}) timer_create(0x0, 0x0, 0x0) socket(0x1e, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xf, 0x2a6, &(0x7f0000000b40)="$eJzs3c9qO1UUAOAzSX5pVCRF3CiCA7pwVVq3bhqlgtiVEkFdaLAtSBIKLQSsYOyqT+DS9/AR3LjxDQS3grt2URmZzEyS2vQPNaZgv291OnfOuSdzS7LKyZevDft7h0mcnv8WrVYSte3Yjosk1qMWle+jEQDA/8dFlsWf2UMyG7XldwMArELx+V947F4AgNX4+NPPPuzs7u58lKateKV9NuomETE8G3WL9c5BfB2D2I/NaMdlRDZVxO9/sLsTjTS3Hm8Ox6Nunjn84peyfuePiEn+VrRjfXH+VlqY5j9fdZdG5+BZ9Uc7Xl6c//Y/82M4jm4z3npjrv+NaMevX8VhDGIv8txZ/ndbafpe9sP5t5/n2+T5SS26a5P7ZrL6io4EAAAAAAAAAAAAAAAAAAAAAIAnYCNNk2J8z2R+T35pMj9n1K1fTtY30sr8fJ9xNR8oqQoV84GyKEf0jLP4sZqvs5mmaVbeOMtvxKsNPywAAAAAAAAAAAAAAAAAAAAAueNvTvq9wWD/aClBNQ2g+lr/Q+tsz115PU76vfrNBdfuv9f8tIG811tvjkYjlvRY7gqey/tZeuW12eF+EkVQHcxS93rp3aLoSb+XlkvVQ+73krv2alUH99P8UjP+bWPZ5F/iMrt6pq1pq1ezmkt6Gs0XFi79lWXZ/eq883txRuWVZDJi4367PyuDhS8wD1rXz+Lnmwve+JZRX8obDwAAAAAAAAAAAAAAAAAAcE31pd8Xjxcsnt6aWvvPmgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFat+//9oGrQi4uqVa8G4TL7tnjJoxtHxI79EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnoC/AwAA//8+s03m") r0 = open(&(0x7f0000000240)='./file1\x00', 0x44042, 0xd5) syz_emit_vhci(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='oom_score\x00') ftruncate(r0, 0x2007ffc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="130005000000000000000000d985bf43e207002b3fd4ae004e237e04ba0c453fc4c595"]) clock_adjtime(0x4, &(0x7f00000002c0)={0xff, 0x8, 0x0, 0x3, 0x2, 0x800, 0x6, 0x7ff, 0x2, 0x5, 0x3, 0x9, 0x6, 0x3, 0xfffffffffffffff7, 0x0, 0x9, 0x5e, 0x2, 0xffffffffffffff01, 0x3, 0x6, 0x5, 0x100000000, 0x8, 0x74c}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000009c00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r3, r5, 0x0) 0s ago: executing program 2 (id=124): io_setup(0x7, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fanotify_init(0x200, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) syz_io_uring_setup(0x2dbc, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00', 0x9}) r3 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) sendfile(r4, r3, 0x0, 0x578410e9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 65.673955][ T4254] cgroup: Unknown subsys name 'net' [ 65.801994][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.205741][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.650225][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.659113][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.662311][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.668425][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.674429][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.681573][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.687973][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.694730][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.702715][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.708959][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.716284][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.722800][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.731254][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.736682][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.744023][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.758066][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.758069][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.758908][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.765342][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.772559][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.779635][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.786824][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.808910][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.816609][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.838659][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.850560][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.855446][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.864907][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.877490][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.885752][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.221287][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 69.280156][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 69.345417][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 69.455101][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.464829][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.474450][ T4268] device bridge_slave_0 entered promiscuous mode [ 69.484745][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.491944][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.499723][ T4268] device bridge_slave_1 entered promiscuous mode [ 69.523543][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 69.548305][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.555440][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.563254][ T4269] device bridge_slave_0 entered promiscuous mode [ 69.587729][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 69.601315][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.608540][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.616335][ T4269] device bridge_slave_1 entered promiscuous mode [ 69.635026][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.642139][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.650070][ T4264] device bridge_slave_0 entered promiscuous mode [ 69.659820][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.674341][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.698253][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.705338][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.713235][ T4264] device bridge_slave_1 entered promiscuous mode [ 69.775309][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.790948][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.805145][ T4268] team0: Port device team_slave_0 added [ 69.812772][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.832106][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.848922][ T4268] team0: Port device team_slave_1 added [ 69.904248][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.911508][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.919391][ T4277] device bridge_slave_0 entered promiscuous mode [ 69.928875][ T4269] team0: Port device team_slave_0 added [ 69.934838][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.942767][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.951050][ T4277] device bridge_slave_1 entered promiscuous mode [ 69.958325][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.965410][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.973939][ T4274] device bridge_slave_0 entered promiscuous mode [ 69.984644][ T4264] team0: Port device team_slave_0 added [ 69.999749][ T4269] team0: Port device team_slave_1 added [ 70.012983][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.020356][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.028315][ T4274] device bridge_slave_1 entered promiscuous mode [ 70.035989][ T4264] team0: Port device team_slave_1 added [ 70.042533][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.049706][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.075810][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.116363][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.123450][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.149885][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.169213][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.193310][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.200333][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.227003][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.247322][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.254307][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.280338][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.293147][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.304254][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.313794][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.320835][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.347032][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.363283][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.370701][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.401426][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.421112][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.479974][ T4264] device hsr_slave_0 entered promiscuous mode [ 70.487129][ T4264] device hsr_slave_1 entered promiscuous mode [ 70.495297][ T4277] team0: Port device team_slave_0 added [ 70.511462][ T4268] device hsr_slave_0 entered promiscuous mode [ 70.518277][ T4268] device hsr_slave_1 entered promiscuous mode [ 70.524773][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.532671][ T4268] Cannot create hsr debugfs directory [ 70.553462][ T4277] team0: Port device team_slave_1 added [ 70.568012][ T4274] team0: Port device team_slave_0 added [ 70.584918][ T4269] device hsr_slave_0 entered promiscuous mode [ 70.591703][ T4269] device hsr_slave_1 entered promiscuous mode [ 70.598553][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.606099][ T4269] Cannot create hsr debugfs directory [ 70.634520][ T4274] team0: Port device team_slave_1 added [ 70.662838][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.669894][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.695889][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.708255][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.715204][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.741511][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.769882][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.776900][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.803801][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.837681][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.844629][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.870821][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 70.877413][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.936577][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 70.936878][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 70.942773][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 70.954010][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 70.966854][ T4274] device hsr_slave_0 entered promiscuous mode [ 70.973506][ T4274] device hsr_slave_1 entered promiscuous mode [ 70.980456][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.988095][ T4274] Cannot create hsr debugfs directory [ 71.009758][ T4277] device hsr_slave_0 entered promiscuous mode [ 71.016644][ T4277] device hsr_slave_1 entered promiscuous mode [ 71.023152][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.033787][ T4277] Cannot create hsr debugfs directory [ 71.179854][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.186341][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.278317][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.287779][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.297962][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.313339][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.357301][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.366337][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.375989][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.390020][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.457285][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.466279][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.494513][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.503538][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.569518][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.591122][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.602247][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.616094][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.625449][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.645865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.654633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.672484][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.703476][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.738234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.748273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.758735][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.765931][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.773960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.783143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.792089][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.799211][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.807898][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.838517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.846636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.854301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.862347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.875560][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.886894][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.907147][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.915995][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.935178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.945263][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.954056][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.961162][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.975008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.982997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.991587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.000704][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.007846][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.016232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.026167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.041552][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.051484][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.074661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.088807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.097544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.106029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.115249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.143061][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.151359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.159631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.171848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.180772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.189995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.198544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.207379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.215541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.223659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.232097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.244827][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.257438][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.269245][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.289137][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.297911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.307537][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.315267][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.323179][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.331955][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.341876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.350903][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.359850][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.366985][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.374598][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.383675][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.392433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.402635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.411103][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.418228][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.432373][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.456237][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.474758][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.486065][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.495621][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.502774][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.511738][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.520764][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.530075][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.552770][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.567647][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.582459][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.593219][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.608263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.622225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.630766][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.645028][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.653749][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.660904][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.675189][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.693411][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.712823][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.732661][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.742295][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.773358][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.834455][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.846599][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.859846][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.877490][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.929345][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.939865][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 72.957646][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.996596][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.004501][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.016708][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 73.022752][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 73.028819][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 73.028836][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 73.050088][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.067518][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.076024][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.090552][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.099376][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.108583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.116265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.134655][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.148284][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.189065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.208289][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.243520][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.263464][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.287497][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.307282][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.321103][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.328269][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.336088][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.345797][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.354819][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.361965][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.372737][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.381933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.391078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.398660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.409384][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.421448][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.431132][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.441006][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.505077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.516108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.525168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.534931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.543779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.557070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.565491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.580761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.603361][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.629853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.639675][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.648610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.658392][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.671593][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.702734][ T4269] device veth0_vlan entered promiscuous mode [ 73.712250][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.720090][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.730558][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.739354][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.748066][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.755874][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.772970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.781441][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.791517][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.799729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.812556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.821519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.832560][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.846757][ T4269] device veth1_vlan entered promiscuous mode [ 73.860182][ T4264] device veth0_vlan entered promiscuous mode [ 73.915226][ T4264] device veth1_vlan entered promiscuous mode [ 73.942111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.961128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.969765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.985937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.995244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.012638][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.021934][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.037393][ T4268] device veth0_vlan entered promiscuous mode [ 74.052140][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.062423][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.076323][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.087029][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.097205][ T4269] device veth0_macvtap entered promiscuous mode [ 74.112200][ T4269] device veth1_macvtap entered promiscuous mode [ 74.140923][ T4268] device veth1_vlan entered promiscuous mode [ 74.154819][ T4274] device veth0_vlan entered promiscuous mode [ 74.190332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.201546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.210866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.221403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.230156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.238631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.248409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.259935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.268257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.275925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.285240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.299373][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.317772][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.329411][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.339330][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.348936][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.360716][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372352][ T4264] device veth0_macvtap entered promiscuous mode [ 74.383430][ T4274] device veth1_vlan entered promiscuous mode [ 74.391277][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.400620][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.409123][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.418381][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.427861][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.436312][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.444983][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.454264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.465135][ T4268] device veth0_macvtap entered promiscuous mode [ 74.486091][ T4264] device veth1_macvtap entered promiscuous mode [ 74.499980][ T4268] device veth1_macvtap entered promiscuous mode [ 74.514822][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.522022][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.531782][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.552470][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.613328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.640627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.652345][ T4274] device veth0_macvtap entered promiscuous mode [ 74.663809][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.676165][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.688442][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.696136][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.708926][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.719313][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.729878][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.741784][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.754757][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.769608][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.781454][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.800946][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.809454][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.818437][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.829073][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.838128][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.847058][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.855560][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.874000][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.892222][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.903845][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.920090][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.933649][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.946289][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.962287][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.971380][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.985621][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.999224][ T4274] device veth1_macvtap entered promiscuous mode [ 75.016678][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 75.029646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.039338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.048365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.059505][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.070437][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.079265][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.088319][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.097308][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 75.103338][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 75.109770][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 75.109788][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 75.133864][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.168575][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.193201][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.210488][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.218084][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.226840][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.238395][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.250705][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.263541][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.274420][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.285106][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.298679][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.321928][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.342794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.352537][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.379021][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.393793][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.404128][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.414706][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.425254][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.435781][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.447377][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.479019][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.495706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.532084][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.544874][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.554155][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.563302][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.596704][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.604693][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.646805][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.663359][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.673090][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.686682][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.694821][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.712614][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.720955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.738695][ T4383] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 75.747670][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.755652][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.757220][ T4384] FAULT_INJECTION: forcing a failure. [ 75.757220][ T4384] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.770283][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.777312][ T4384] CPU: 1 PID: 4384 Comm: syz.2.3 Not tainted syzkaller #0 [ 75.790258][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.800350][ T4384] Call Trace: [ 75.803654][ T4384] [ 75.806611][ T4384] dump_stack_lvl+0x168/0x22e [ 75.809182][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.811318][ T4384] ? show_regs_print_info+0x12/0x12 [ 75.811345][ T4384] ? load_image+0x3b0/0x3b0 [ 75.811376][ T4384] ? __lock_acquire+0x7c50/0x7c50 [ 75.824407][ T4384] ? verify_lock_unused+0x140/0x140 [ 75.839212][ T4384] should_fail_ex+0x399/0x4d0 [ 75.843999][ T4384] _copy_from_user+0x2c/0x170 [ 75.848685][ T4384] ___sys_sendmsg+0x155/0x290 [ 75.853379][ T4384] ? __sys_sendmsg+0x270/0x270 [ 75.858172][ T4384] ? __lock_acquire+0x7c50/0x7c50 [ 75.863224][ T4384] ? __fdget+0x17c/0x200 [ 75.867480][ T4384] __se_sys_sendmsg+0x19e/0x270 [ 75.872343][ T4384] ? __x64_sys_sendmsg+0x80/0x80 [ 75.877300][ T4384] ? lockdep_hardirqs_on+0x94/0x140 [ 75.882512][ T4384] do_syscall_64+0x4c/0xa0 [ 75.886930][ T4384] ? clear_bhb_loop+0x60/0xb0 [ 75.891612][ T4384] ? clear_bhb_loop+0x60/0xb0 [ 75.896295][ T4384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.902219][ T4384] RIP: 0033:0x7fc164b8eba9 [ 75.906656][ T4384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.926266][ T4384] RSP: 002b:00007fc1659ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.934688][ T4384] RAX: ffffffffffffffda RBX: 00007fc164dd6090 RCX: 00007fc164b8eba9 [ 75.942666][ T4384] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 75.950642][ T4384] RBP: 00007fc1659ae090 R08: 0000000000000000 R09: 0000000000000000 [ 75.958618][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.966693][ T4384] R13: 00007fc164dd6128 R14: 00007fc164dd6090 R15: 00007fff2d2008d8 [ 75.974679][ T4384] [ 75.989667][ T4277] device veth0_vlan entered promiscuous mode [ 76.024147][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.050438][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.066026][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.071775][ T4277] device veth1_vlan entered promiscuous mode [ 76.087839][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.100272][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.118803][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.146514][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.148070][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.169453][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.178196][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.206080][ T4277] device veth0_macvtap entered promiscuous mode [ 76.236899][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.245623][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.255241][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.274742][ T4277] device veth1_macvtap entered promiscuous mode [ 76.303410][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.334685][ T4389] FAULT_INJECTION: forcing a failure. [ 76.334685][ T4389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.341971][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.354086][ T4389] CPU: 0 PID: 4389 Comm: syz.3.4 Not tainted syzkaller #0 [ 76.359763][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.365362][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.382727][ T4389] Call Trace: [ 76.382932][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.386009][ T4389] [ 76.397043][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.398736][ T4389] dump_stack_lvl+0x168/0x22e [ 76.409967][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.413809][ T4389] ? show_regs_print_info+0x12/0x12 [ 76.424741][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.428776][ T4389] ? load_image+0x3b0/0x3b0 [ 76.428809][ T4389] ? __lock_acquire+0x7c50/0x7c50 [ 76.428838][ T4389] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 76.428865][ T4389] should_fail_ex+0x399/0x4d0 [ 76.428898][ T4389] strncpy_from_user+0x32/0x350 [ 76.428927][ T4389] __se_sys_add_key+0xc9/0x3f0 [ 76.428952][ T4389] ? __x64_sys_add_key+0xc0/0xc0 [ 76.428980][ T4389] ? lockdep_hardirqs_on+0x94/0x140 [ 76.478908][ T4389] ? __x64_sys_add_key+0x1c/0xc0 [ 76.483851][ T4389] do_syscall_64+0x4c/0xa0 [ 76.488269][ T4389] ? clear_bhb_loop+0x60/0xb0 [ 76.492945][ T4389] ? clear_bhb_loop+0x60/0xb0 [ 76.497621][ T4389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.503521][ T4389] RIP: 0033:0x7f6abfd8eba9 [ 76.507939][ T4389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.527546][ T4389] RSP: 002b:00007f6ac0c2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 76.535960][ T4389] RAX: ffffffffffffffda RBX: 00007f6abffd5fa0 RCX: 00007f6abfd8eba9 [ 76.543928][ T4389] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000200000000340 [ 76.551904][ T4389] RBP: 00007f6ac0c2c090 R08: 000000002569bf5e R09: 0000000000000000 [ 76.559874][ T4389] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 76.567857][ T4389] R13: 00007f6abffd6038 R14: 00007f6abffd5fa0 R15: 00007fffaf2e9728 [ 76.575932][ T4389] [ 76.599415][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.603488][ T4391] loop1: detected capacity change from 0 to 256 [ 76.609669][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.618664][ T4391] ======================================================= [ 76.618664][ T4391] WARNING: The mand mount option has been deprecated and [ 76.618664][ T4391] and is ignored by this kernel. Remove the mand [ 76.618664][ T4391] option from the mount to silence this warning. [ 76.618664][ T4391] ======================================================= [ 76.647526][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.672026][ T4265] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 76.697181][ T4391] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 76.740495][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.770716][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.797810][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.813292][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.867900][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.877895][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.888490][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.898642][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.909366][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.922256][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.942832][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.959472][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.975194][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.986276][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.001691][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.011958][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.096812][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 77.177054][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 77.186626][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 77.192698][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 77.198857][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 77.749891][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.796466][ C0] sched: RT throttling activated [ 77.969631][ T4265] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 77.978673][ T4265] usb 3-1: config 0 has no interface number 0 [ 77.986352][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.995800][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004888][ T4265] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 78.016662][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.026501][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.048311][ T4265] usb 3-1: Product: syz [ 78.061383][ T4265] usb 3-1: Manufacturer: syz [ 78.066005][ T4265] usb 3-1: SerialNumber: syz [ 78.089160][ T4265] usb 3-1: config 0 descriptor?? [ 78.252949][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.286619][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.295444][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.317566][ T4265] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 78.349247][ T4265] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 78.370197][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.388846][ T4265] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 78.392183][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.415672][ T4265] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 78.454490][ T4265] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 78.462133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.696789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.706434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.716418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.726418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.736416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.746418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.756417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.766417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.776419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.786418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 79.395423][ T4398] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 79.443516][ T4411] loop1: detected capacity change from 0 to 2048 [ 79.444242][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.459580][ T4399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8'. [ 79.518503][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.561417][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.590732][ T4419] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.592721][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.659527][ T4411] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 79.702661][ T4265] usb 3-1: USB disconnect, device number 2 [ 79.761948][ T4411] Remounting filesystem read-only [ 79.768013][ T4265] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 79.810610][ T4265] keyspan 3-1:0.133: device disconnected [ 79.936839][ T4411] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 80.008367][ T4411] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 80.167159][ T4420] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 80.196723][ T4411] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure [ 80.235635][ T4427] loop3: detected capacity change from 0 to 128 [ 80.252597][ T4411] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 81.217169][ T4430] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 81.248726][ T4356] kworker/u4:6: attempt to access beyond end of device [ 81.248726][ T4356] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 81.385561][ T4436] loop0: detected capacity change from 0 to 512 [ 81.403414][ T4436] ext2: Unknown parameter 'euid<00000000000000000000' [ 81.418094][ T14] cfg80211: failed to load regulatory.db [ 82.475635][ T4442] loop3: detected capacity change from 0 to 512 [ 82.527383][ T4442] EXT4-fs: Ignoring removed oldalloc option [ 82.620718][ T4445] FAULT_INJECTION: forcing a failure. [ 82.620718][ T4445] name failslab, interval 1, probability 0, space 0, times 1 [ 82.666097][ T4442] EXT4-fs (loop3): 1 truncate cleaned up [ 82.678355][ T4448] input: syz1 as /devices/virtual/input/input5 [ 82.734015][ T4442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.805901][ T4445] CPU: 1 PID: 4445 Comm: syz.1.18 Not tainted syzkaller #0 [ 82.813140][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.823204][ T4445] Call Trace: [ 82.826498][ T4445] [ 82.829443][ T4445] dump_stack_lvl+0x168/0x22e [ 82.834140][ T4445] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 82.839782][ T4445] ? show_regs_print_info+0x12/0x12 [ 82.844974][ T4445] ? load_image+0x3b0/0x3b0 [ 82.849497][ T4445] should_fail_ex+0x399/0x4d0 [ 82.854201][ T4445] should_failslab+0x5/0x20 [ 82.858741][ T4445] slab_pre_alloc_hook+0x59/0x310 [ 82.863774][ T4445] ? file_end_write+0x156/0x250 [ 82.868662][ T4445] kmem_cache_alloc+0x56/0x2f0 [ 82.873435][ T4445] ? getname_flags+0xb7/0x500 [ 82.878134][ T4445] getname_flags+0xb7/0x500 [ 82.882663][ T4445] do_sys_openat2+0xcf/0x490 [ 82.887281][ T4445] ? do_sys_open+0xe0/0xe0 [ 82.891720][ T4445] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.897722][ T4445] ? lock_chain_count+0x20/0x20 [ 82.902598][ T4445] __x64_sys_openat+0x135/0x160 [ 82.907472][ T4445] do_syscall_64+0x4c/0xa0 [ 82.911900][ T4445] ? clear_bhb_loop+0x60/0xb0 [ 82.916587][ T4445] ? clear_bhb_loop+0x60/0xb0 [ 82.921282][ T4445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.927198][ T4445] RIP: 0033:0x7fed7698eba9 [ 82.931626][ T4445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.951252][ T4445] RSP: 002b:00007fed74bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.959699][ T4445] RAX: ffffffffffffffda RBX: 00007fed76bd6180 RCX: 00007fed7698eba9 [ 82.967683][ T4445] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 82.975664][ T4445] RBP: 00007fed74bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.983651][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.991642][ T4445] R13: 00007fed76bd6218 R14: 00007fed76bd6180 R15: 00007ffede51e258 [ 82.999635][ T4445] [ 83.269021][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 85.115687][ T4463] loop2: detected capacity change from 0 to 256 [ 85.167072][ T4463] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 85.260617][ T4463] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 85.275384][ T4465] FAULT_INJECTION: forcing a failure. [ 85.275384][ T4465] name failslab, interval 1, probability 0, space 0, times 0 [ 85.321615][ T4465] CPU: 0 PID: 4465 Comm: syz.4.25 Not tainted syzkaller #0 [ 85.328873][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.338948][ T4465] Call Trace: [ 85.342251][ T4465] [ 85.345200][ T4465] dump_stack_lvl+0x168/0x22e [ 85.349911][ T4465] ? show_regs_print_info+0x12/0x12 [ 85.355151][ T4465] ? load_image+0x3b0/0x3b0 [ 85.359680][ T4465] ? __might_sleep+0xd0/0xd0 [ 85.364274][ T4465] ? __lock_acquire+0x7c50/0x7c50 [ 85.369307][ T4465] should_fail_ex+0x399/0x4d0 [ 85.373998][ T4465] should_failslab+0x5/0x20 [ 85.378515][ T4465] slab_pre_alloc_hook+0x59/0x310 [ 85.383540][ T4465] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 85.389270][ T4465] __kmem_cache_alloc_node+0x4f/0x260 [ 85.394677][ T4465] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 85.400404][ T4465] __kmalloc+0xa0/0x240 [ 85.404563][ T4465] tomoyo_realpath_from_path+0xdf/0x5d0 [ 85.410127][ T4465] tomoyo_path_number_perm+0x1e3/0x600 [ 85.415588][ T4465] ? tomoyo_path_number_perm+0x1b6/0x600 [ 85.421215][ T4465] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 85.426669][ T4465] ? ksys_write+0x1bd/0x240 [ 85.431177][ T4465] ? common_file_perm+0x171/0x1c0 [ 85.436217][ T4465] ? __fget_files+0x28/0x4d0 [ 85.440816][ T4465] security_file_ioctl+0x6c/0xa0 [ 85.445781][ T4465] __se_sys_ioctl+0x48/0x170 [ 85.450375][ T4465] do_syscall_64+0x4c/0xa0 [ 85.454781][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 85.459449][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 85.464123][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.470018][ T4465] RIP: 0033:0x7f348af8eba9 [ 85.474435][ T4465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.494036][ T4465] RSP: 002b:00007f348bf08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.502467][ T4465] RAX: ffffffffffffffda RBX: 00007f348b1d5fa0 RCX: 00007f348af8eba9 [ 85.510463][ T4465] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000005 [ 85.518432][ T4465] RBP: 00007f348bf08090 R08: 0000000000000000 R09: 0000000000000000 [ 85.526409][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.534391][ T4465] R13: 00007f348b1d6038 R14: 00007f348b1d5fa0 R15: 00007ffe568034e8 [ 85.542373][ T4465] [ 85.870871][ T27] audit: type=1800 audit(1757830601.843:2): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23" name="file1" dev="loop2" ino=1048607 res=0 errno=0 [ 86.586568][ T4465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.593648][ T4465] binder: 4464:4465 ioctl c0306201 200000000440 returned -14 [ 86.659552][ T4475] netlink: 'syz.2.28': attribute type 11 has an invalid length. [ 86.695250][ T4476] netlink: 'syz.2.28': attribute type 11 has an invalid length. [ 86.792722][ T4475] loop2: detected capacity change from 0 to 2048 [ 86.885026][ T4475] UDF-fs: bad mount option "Uï^Ç–ôB†³dÓêÑÏ™ºúÌ›K÷ç [ 86.885026][ T4475] Æ€8H4çÇE" or missing value [ 87.933377][ T4487] FAULT_INJECTION: forcing a failure. [ 87.933377][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.946538][ T4487] CPU: 0 PID: 4487 Comm: syz.3.32 Not tainted syzkaller #0 [ 87.953754][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.963848][ T4487] Call Trace: [ 87.967140][ T4487] [ 87.970078][ T4487] dump_stack_lvl+0x168/0x22e [ 87.974775][ T4487] ? show_regs_print_info+0x12/0x12 [ 87.979992][ T4487] ? load_image+0x3b0/0x3b0 [ 87.984523][ T4487] ? __lock_acquire+0x7c50/0x7c50 [ 87.989566][ T4487] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 87.995220][ T4487] should_fail_ex+0x399/0x4d0 [ 87.999935][ T4487] strncpy_from_user+0x32/0x350 [ 88.004808][ T4487] __se_sys_add_key+0xc9/0x3f0 [ 88.009590][ T4487] ? __x64_sys_add_key+0xc0/0xc0 [ 88.014549][ T4487] ? lockdep_hardirqs_on+0x94/0x140 [ 88.019771][ T4487] ? __x64_sys_add_key+0x1c/0xc0 [ 88.024732][ T4487] do_syscall_64+0x4c/0xa0 [ 88.029174][ T4487] ? clear_bhb_loop+0x60/0xb0 [ 88.033889][ T4487] ? clear_bhb_loop+0x60/0xb0 [ 88.038586][ T4487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.044500][ T4487] RIP: 0033:0x7f6abfd8eba9 [ 88.048928][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.068554][ T4487] RSP: 002b:00007f6ac0bea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.076980][ T4487] RAX: ffffffffffffffda RBX: 00007f6abffd6180 RCX: 00007f6abfd8eba9 [ 88.084960][ T4487] RDX: 00002000000000c0 RSI: 00002000000005c0 RDI: 0000200000000200 [ 88.092940][ T4487] RBP: 00007f6ac0bea090 R08: fffffffffffffffd R09: 0000000000000000 [ 88.100920][ T4487] R10: 0000000000000390 R11: 0000000000000246 R12: 0000000000000001 [ 88.108901][ T4487] R13: 00007f6abffd6218 R14: 00007f6abffd6180 R15: 00007fffaf2e9728 [ 88.116903][ T4487] [ 88.607655][ T4469] loop1: detected capacity change from 0 to 32768 [ 88.697397][ T4469] XFS: attr2 mount option is deprecated. [ 89.662852][ T4506] FAULT_INJECTION: forcing a failure. [ 89.662852][ T4506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.676127][ T4506] CPU: 1 PID: 4506 Comm: syz.3.37 Not tainted syzkaller #0 [ 89.683336][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.693399][ T4506] Call Trace: [ 89.696691][ T4506] [ 89.699640][ T4506] dump_stack_lvl+0x168/0x22e [ 89.704355][ T4506] ? show_regs_print_info+0x12/0x12 [ 89.709573][ T4506] ? load_image+0x3b0/0x3b0 [ 89.714131][ T4506] ? __lock_acquire+0x7c50/0x7c50 [ 89.719193][ T4506] should_fail_ex+0x399/0x4d0 [ 89.723904][ T4506] _copy_from_user+0x2c/0x170 [ 89.728611][ T4506] __sys_connect+0x132/0x410 [ 89.733230][ T4506] ? __sys_connect_file+0x170/0x170 [ 89.738475][ T4506] __x64_sys_connect+0x76/0x80 [ 89.743267][ T4506] do_syscall_64+0x4c/0xa0 [ 89.747710][ T4506] ? clear_bhb_loop+0x60/0xb0 [ 89.752414][ T4506] ? clear_bhb_loop+0x60/0xb0 [ 89.757124][ T4506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.763050][ T4506] RIP: 0033:0x7f6abfd8eba9 [ 89.767481][ T4506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.787103][ T4506] RSP: 002b:00007f6ac0c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 89.795518][ T4506] RAX: ffffffffffffffda RBX: 00007f6abffd6090 RCX: 00007f6abfd8eba9 [ 89.803503][ T4506] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008 [ 89.811487][ T4506] RBP: 00007f6ac0c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 89.819463][ T4506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.827439][ T4506] R13: 00007f6abffd6128 R14: 00007f6abffd6090 R15: 00007fffaf2e9728 [ 89.835438][ T4506] [ 91.042212][ T4509] loop1: detected capacity change from 0 to 512 [ 93.767693][ T4509] EXT4-fs (loop1): Test dummy encryption mode enabled [ 93.851449][ T4509] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 93.905030][ T4509] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 93.918102][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.855454][ T4537] loop4: detected capacity change from 0 to 128 [ 95.091379][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 95.477266][ T4547] loop2: detected capacity change from 0 to 512 [ 95.602053][ T4501] kworker/u4:10: attempt to access beyond end of device [ 95.602053][ T4501] loop4: rw=1, sector=145, nr_sectors = 880 limit=128 [ 95.702741][ T4552] loop1: detected capacity change from 0 to 256 [ 95.772353][ T27] audit: type=1800 audit(1757830611.743:3): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file1" dev="loop1" ino=1048610 res=0 errno=0 [ 95.866279][ T4555] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 95.874135][ T4555] FAT-fs (loop1): Filesystem has been set read-only [ 95.881338][ T4555] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 96.260336][ T4554] loop0: detected capacity change from 0 to 256 [ 96.370316][ T27] audit: type=1800 audit(1757830612.343:4): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.52" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 96.751374][ T4561] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 96.759003][ T4561] FAT-fs (loop0): Filesystem has been set read-only [ 96.765721][ T4561] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 97.059439][ T4565] loop2: detected capacity change from 0 to 256 [ 97.107864][ T27] audit: type=1800 audit(1757830613.083:5): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 97.194158][ T4568] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 97.203693][ T4568] FAT-fs (loop2): Filesystem has been set read-only [ 97.213851][ T4568] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 97.220577][ T4569] loop4: detected capacity change from 0 to 2048 [ 97.271662][ T4569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.584203][ T4587] loop3: detected capacity change from 0 to 64 [ 98.739003][ T4277] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 98.794394][ T4277] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 100.009448][ T4591] loop1: detected capacity change from 0 to 2048 [ 100.218423][ T4594] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.232939][ T4591] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 100.420501][ T4591] Remounting filesystem read-only [ 100.466813][ T4591] NILFS (loop1): mounting fs with errors [ 100.500385][ T4348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.533525][ T4591] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 100.533632][ T4591] Remounting filesystem read-only [ 100.600668][ T4348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.719881][ T4348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.822435][ T4606] loop1: detected capacity change from 0 to 256 [ 100.878878][ T27] audit: type=1800 audit(1757830616.853:6): pid=4606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 100.879960][ T4348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.092505][ T4608] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 101.092565][ T4608] FAT-fs (loop1): Filesystem has been set read-only [ 101.092585][ T4608] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.800429][ T4611] loop1: detected capacity change from 0 to 256 [ 101.838385][ T27] audit: type=1800 audit(1757830617.813:7): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 102.136689][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.145807][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.153973][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.161822][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.171426][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.181945][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.576506][ T4617] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 102.586549][ T4617] FAT-fs (loop1): Filesystem has been set read-only [ 102.593319][ T4617] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 103.119555][ T4631] FAULT_INJECTION: forcing a failure. [ 103.119555][ T4631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.132872][ T4631] CPU: 0 PID: 4631 Comm: syz.1.69 Not tainted syzkaller #0 [ 103.140087][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.150151][ T4631] Call Trace: [ 103.153442][ T4631] [ 103.156386][ T4631] dump_stack_lvl+0x168/0x22e [ 103.161085][ T4631] ? show_regs_print_info+0x12/0x12 [ 103.166330][ T4631] ? load_image+0x3b0/0x3b0 [ 103.170866][ T4631] ? __lock_acquire+0x7c50/0x7c50 [ 103.175919][ T4631] ? verify_lock_unused+0x140/0x140 [ 103.181138][ T4631] ? lock_acquire+0x20f/0x490 [ 103.185838][ T4631] should_fail_ex+0x399/0x4d0 [ 103.190551][ T4631] _copy_from_user+0x2c/0x170 [ 103.195269][ T4631] ___sys_sendmsg+0x155/0x290 [ 103.199971][ T4631] ? __sys_sendmsg+0x270/0x270 [ 103.204788][ T4631] ? __fdget+0x17c/0x200 [ 103.209050][ T4631] __sys_sendmmsg+0x272/0x490 [ 103.213757][ T4631] ? __ia32_sys_sendmsg+0x80/0x80 [ 103.218815][ T4631] ? mutex_unlock+0x10/0x10 [ 103.223340][ T4631] ? __fget_files+0x44a/0x4d0 [ 103.228048][ T4631] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 103.234051][ T4631] ? lock_chain_count+0x20/0x20 [ 103.238961][ T4631] __x64_sys_sendmmsg+0x9c/0xb0 [ 103.243847][ T4631] do_syscall_64+0x4c/0xa0 [ 103.248285][ T4631] ? clear_bhb_loop+0x60/0xb0 [ 103.252989][ T4631] ? clear_bhb_loop+0x60/0xb0 [ 103.257690][ T4631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.263616][ T4631] RIP: 0033:0x7fed7698eba9 [ 103.268050][ T4631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.287682][ T4631] RSP: 002b:00007fed7774c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.296123][ T4631] RAX: ffffffffffffffda RBX: 00007fed76bd6090 RCX: 00007fed7698eba9 [ 103.304116][ T4631] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000009 [ 103.312109][ T4631] RBP: 00007fed7774c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.320099][ T4631] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 103.328096][ T4631] R13: 00007fed76bd6128 R14: 00007fed76bd6090 R15: 00007ffede51e258 [ 103.336103][ T4631] [ 105.040983][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 105.402314][ T4648] loop2: detected capacity change from 0 to 2048 [ 105.490037][ T4652] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.578616][ T4648] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 105.654461][ T4648] Remounting filesystem read-only [ 105.772763][ T4658] loop0: detected capacity change from 0 to 256 [ 105.844842][ T27] audit: type=1800 audit(1757830621.813:8): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.78" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 105.963663][ T4662] FAULT_INJECTION: forcing a failure. [ 105.963663][ T4662] name failslab, interval 1, probability 0, space 0, times 0 [ 106.007472][ T4662] CPU: 0 PID: 4662 Comm: syz.3.79 Not tainted syzkaller #0 [ 106.014720][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.024791][ T4662] Call Trace: [ 106.028081][ T4662] [ 106.031018][ T4662] dump_stack_lvl+0x168/0x22e [ 106.035705][ T4662] ? show_regs_print_info+0x12/0x12 [ 106.040911][ T4662] ? load_image+0x3b0/0x3b0 [ 106.045426][ T4662] ? __might_sleep+0xd0/0xd0 [ 106.050043][ T4662] ? __lock_acquire+0x7c50/0x7c50 [ 106.055104][ T4662] should_fail_ex+0x399/0x4d0 [ 106.059794][ T4662] should_failslab+0x5/0x20 [ 106.064309][ T4662] slab_pre_alloc_hook+0x59/0x310 [ 106.069343][ T4662] ? iter_file_splice_write+0x185/0xc50 [ 106.074899][ T4662] __kmem_cache_alloc_node+0x4f/0x260 [ 106.080273][ T4662] ? iter_file_splice_write+0x185/0xc50 [ 106.085822][ T4662] __kmalloc+0xa0/0x240 [ 106.089986][ T4662] iter_file_splice_write+0x185/0xc50 [ 106.095371][ T4662] ? splice_from_pipe+0x150/0x150 [ 106.100407][ T4662] ? rcu_read_lock_any_held+0xb0/0x120 [ 106.105870][ T4662] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 106.111172][ T4662] ovl_splice_write+0x3cb/0x660 [ 106.116055][ T4662] ? ovl_fsync+0x1f0/0x1f0 [ 106.120482][ T4662] ? fsnotify_perm+0x5a/0x550 [ 106.125168][ T4662] ? ovl_fsync+0x1f0/0x1f0 [ 106.129602][ T4662] do_splice+0xe5a/0x1630 [ 106.133958][ T4662] ? __fget_files+0x28/0x4d0 [ 106.138563][ T4662] ? __fget_files+0x44a/0x4d0 [ 106.143255][ T4662] ? wait_for_space+0x2c0/0x2c0 [ 106.148117][ T4662] ? __fdget+0x17c/0x200 [ 106.152724][ T4662] __se_sys_splice+0x327/0x410 [ 106.157504][ T4662] ? __x64_sys_splice+0xf0/0xf0 [ 106.162369][ T4662] ? __x64_sys_splice+0x1d/0xf0 [ 106.167231][ T4662] do_syscall_64+0x4c/0xa0 [ 106.171660][ T4662] ? clear_bhb_loop+0x60/0xb0 [ 106.176343][ T4662] ? clear_bhb_loop+0x60/0xb0 [ 106.181038][ T4662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.186947][ T4662] RIP: 0033:0x7f6abfd8eba9 [ 106.191368][ T4662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.210972][ T4662] RSP: 002b:00007f6ac0c0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 106.219388][ T4662] RAX: ffffffffffffffda RBX: 00007f6abffd6090 RCX: 00007f6abfd8eba9 [ 106.227356][ T4662] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 106.235327][ T4662] RBP: 00007f6ac0c0b090 R08: 00001fffffffffff R09: 0000000000000000 [ 106.243293][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.251265][ T4662] R13: 00007f6abffd6128 R14: 00007f6abffd6090 R15: 00007fffaf2e9728 [ 106.259285][ T4662] [ 106.426121][ T4664] loop2: detected capacity change from 0 to 1024 [ 106.472482][ T4664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.481473][ T4664] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.498694][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 3) [ 106.514595][ T4664] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 106.526932][ T4664] EXT4-fs (loop2): This should not happen!! Data will be lost [ 106.526932][ T4664] [ 106.539425][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.560355][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.574704][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.589481][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.670048][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.708970][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.726517][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.796902][ T4670] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 106.811568][ T4670] FAT-fs (loop0): Filesystem has been set read-only [ 106.824569][ T4670] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 107.074817][ T4664] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.089616][ T4663] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.80: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.096490][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 107.163385][ T4615] chnl_net:caif_netlink_parms(): no params data found [ 107.284127][ T4673] loop1: detected capacity change from 0 to 256 [ 107.315547][ T27] audit: type=1800 audit(1757830623.283:9): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 107.336091][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.110168][ T4679] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.120441][ T4679] overlayfs: missing 'lowerdir' [ 108.171580][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.456675][ T4680] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 108.471670][ T4682] loop3: detected capacity change from 0 to 512 [ 108.490536][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.490536][ T41] [ 108.532737][ T4680] FAT-fs (loop1): Filesystem has been set read-only [ 108.542059][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 108.557067][ T4682] EXT4-fs: Ignoring removed nobh option [ 108.602673][ T4680] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 108.666709][ T4682] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.81: iget: bad i_size value: 38620345925642 [ 108.703179][ T4691] tipc: Started in network mode [ 108.708164][ T4691] tipc: Node identity 9eaa1e6a89f, cluster identity 4711 [ 108.715569][ T4691] tipc: Enabled bearer , priority 0 [ 108.723001][ T4691] device syzkaller0 entered promiscuous mode [ 108.758326][ T4682] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.81: couldn't read orphan inode 15 (err -117) [ 108.796189][ T4694] FAULT_INJECTION: forcing a failure. [ 108.796189][ T4694] name failslab, interval 1, probability 0, space 0, times 0 [ 108.827786][ T4694] CPU: 0 PID: 4694 Comm: syz.2.82 Not tainted syzkaller #0 [ 108.835030][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.845101][ T4694] Call Trace: [ 108.848401][ T4694] [ 108.851356][ T4694] dump_stack_lvl+0x168/0x22e [ 108.856069][ T4694] ? show_regs_print_info+0x12/0x12 [ 108.861295][ T4694] ? load_image+0x3b0/0x3b0 [ 108.865832][ T4694] ? __might_sleep+0xd0/0xd0 [ 108.870458][ T4694] ? __lock_acquire+0x7c50/0x7c50 [ 108.875537][ T4694] should_fail_ex+0x399/0x4d0 [ 108.880256][ T4694] should_failslab+0x5/0x20 [ 108.884791][ T4694] slab_pre_alloc_hook+0x59/0x310 [ 108.885329][ T4682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.889822][ T4694] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 108.889869][ T4694] __kmem_cache_alloc_node+0x4f/0x260 [ 108.889893][ T4694] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 108.889918][ T4694] __kmalloc+0xa0/0x240 [ 108.889966][ T4694] tomoyo_realpath_from_path+0xdf/0x5d0 [ 108.890005][ T4694] tomoyo_path_number_perm+0x1e3/0x600 [ 108.930807][ T4694] ? tomoyo_path_number_perm+0x1b6/0x600 [ 108.936462][ T4694] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 108.941935][ T4694] ? ksys_write+0x1bd/0x240 [ 108.946449][ T4694] ? common_file_perm+0x171/0x1c0 [ 108.951510][ T4694] ? __fget_files+0x28/0x4d0 [ 108.956113][ T4694] security_file_ioctl+0x6c/0xa0 [ 108.961054][ T4694] __se_sys_ioctl+0x48/0x170 [ 108.965664][ T4694] do_syscall_64+0x4c/0xa0 [ 108.970100][ T4694] ? clear_bhb_loop+0x60/0xb0 [ 108.974775][ T4694] ? clear_bhb_loop+0x60/0xb0 [ 108.979452][ T4694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.985353][ T4694] RIP: 0033:0x7fc164b8eba9 [ 108.989772][ T4694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.009375][ T4694] RSP: 002b:00007fc1659ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.017795][ T4694] RAX: ffffffffffffffda RBX: 00007fc164dd6090 RCX: 00007fc164b8eba9 [ 109.025767][ T4694] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 109.033742][ T4694] RBP: 00007fc1659ae090 R08: 0000000000000000 R09: 0000000000000000 [ 109.041716][ T4694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.049687][ T4694] R13: 00007fc164dd6128 R14: 00007fc164dd6090 R15: 00007fff2d2008d8 [ 109.057668][ T4694] [ 109.079141][ T4682] EXT4-fs (loop3): unmounting filesystem. [ 109.116745][ T4694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.176661][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 109.195124][ T4348] device hsr_slave_0 left promiscuous mode [ 109.483084][ T4348] device hsr_slave_1 left promiscuous mode [ 109.666128][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.714501][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.773591][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.880619][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.952220][ T4348] device bridge_slave_1 left promiscuous mode [ 110.000790][ T4679] loop3: detected capacity change from 0 to 4096 [ 110.008791][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.120842][ T4348] device bridge_slave_0 left promiscuous mode [ 110.163904][ T4721] Zero length message leads to an empty skb [ 110.188457][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.335764][ T4375] tipc: Node number set to 391781994 [ 110.510340][ T4348] device veth1_macvtap left promiscuous mode [ 110.570539][ T4348] device veth0_macvtap left promiscuous mode [ 110.624457][ T4348] device veth1_vlan left promiscuous mode [ 110.654713][ T4348] device veth0_vlan left promiscuous mode [ 111.099946][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 111.131922][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 111.164931][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.200510][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.259026][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 111.541631][ T4348] bond0 (unregistering): Released all slaves [ 111.614918][ T4694] tipc: Resetting bearer [ 111.633641][ T4705] tipc: Enabling of bearer rejected, failed to enable media [ 111.656936][ T4690] tipc: Resetting bearer [ 111.710789][ T4690] tipc: Disabling bearer [ 111.774104][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.803998][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.854504][ T4615] device bridge_slave_0 entered promiscuous mode [ 111.883668][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.913947][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.946079][ T4615] device bridge_slave_1 entered promiscuous mode [ 111.994194][ T4732] loop0: detected capacity change from 0 to 2048 [ 112.034241][ T4738] binder: 4735:4738 ioctl c0306201 2000000003c0 returned -14 [ 112.043999][ T4737] loop2: detected capacity change from 0 to 128 [ 112.051300][ T4738] FAULT_INJECTION: forcing a failure. [ 112.051300][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 112.084247][ T4615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.096149][ T4740] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.124789][ T4738] CPU: 1 PID: 4738 Comm: syz.1.92 Not tainted syzkaller #0 [ 112.132018][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.142085][ T4738] Call Trace: [ 112.145365][ T4738] [ 112.148300][ T4738] dump_stack_lvl+0x168/0x22e [ 112.152999][ T4738] ? show_regs_print_info+0x12/0x12 [ 112.158203][ T4738] ? load_image+0x3b0/0x3b0 [ 112.162715][ T4738] ? __might_sleep+0xd0/0xd0 [ 112.167316][ T4738] ? __lock_acquire+0x7c50/0x7c50 [ 112.172379][ T4738] should_fail_ex+0x399/0x4d0 [ 112.177071][ T4738] should_failslab+0x5/0x20 [ 112.181588][ T4738] slab_pre_alloc_hook+0x59/0x310 [ 112.186615][ T4738] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 112.192368][ T4738] __kmem_cache_alloc_node+0x4f/0x260 [ 112.197755][ T4738] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 112.203485][ T4738] __kmalloc+0xa0/0x240 [ 112.207698][ T4738] tomoyo_realpath_from_path+0xdf/0x5d0 [ 112.213262][ T4738] tomoyo_path_number_perm+0x1e3/0x600 [ 112.218734][ T4738] ? tomoyo_path_number_perm+0x1b6/0x600 [ 112.224382][ T4738] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 112.229847][ T4738] ? ksys_write+0x1bd/0x240 [ 112.234354][ T4738] ? common_file_perm+0x171/0x1c0 [ 112.239403][ T4738] ? __fget_files+0x28/0x4d0 [ 112.244011][ T4738] security_file_ioctl+0x6c/0xa0 [ 112.248959][ T4738] __se_sys_ioctl+0x48/0x170 [ 112.253573][ T4738] do_syscall_64+0x4c/0xa0 [ 112.257997][ T4738] ? clear_bhb_loop+0x60/0xb0 [ 112.262671][ T4738] ? clear_bhb_loop+0x60/0xb0 [ 112.267350][ T4738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.273259][ T4738] RIP: 0033:0x7fed7698eba9 [ 112.277682][ T4738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.297392][ T4738] RSP: 002b:00007fed7776d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.305820][ T4738] RAX: ffffffffffffffda RBX: 00007fed76bd5fa0 RCX: 00007fed7698eba9 [ 112.313807][ T4738] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 112.321797][ T4738] RBP: 00007fed7776d090 R08: 0000000000000000 R09: 0000000000000000 [ 112.329779][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.337758][ T4738] R13: 00007fed76bd6038 R14: 00007fed76bd5fa0 R15: 00007ffede51e258 [ 112.345748][ T4738] [ 112.391980][ T4732] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 112.439980][ T4732] Remounting filesystem read-only [ 112.475205][ T4615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.876230][ T4738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.958540][ T4359] kworker/u4:7: attempt to access beyond end of device [ 112.958540][ T4359] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 113.274977][ T4748] loop1: detected capacity change from 0 to 32768 [ 113.496957][ T4615] team0: Port device team_slave_0 added [ 113.526598][ C1] Unknown status report in ack skb [ 113.549086][ T4615] team0: Port device team_slave_1 added [ 113.647604][ T4752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 113.676904][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.693083][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.985790][ T4615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.192680][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.275573][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.566965][ T4615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.295474][ T4615] device hsr_slave_0 entered promiscuous mode [ 115.307313][ T4615] device hsr_slave_1 entered promiscuous mode [ 115.326477][ T4615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.334071][ T4615] Cannot create hsr debugfs directory [ 116.559317][ T4771] loop0: detected capacity change from 0 to 64 [ 116.631909][ T4769] binder: 4768:4769 ioctl c0306201 200000000440 returned -14 [ 116.812938][ T4615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.896893][ T4774] loop1: detected capacity change from 0 to 512 [ 116.932527][ T4615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.978701][ T4615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.079916][ T4780] FAULT_INJECTION: forcing a failure. [ 117.079916][ T4780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.093525][ T4780] CPU: 1 PID: 4780 Comm: syz.3.102 Not tainted syzkaller #0 [ 117.100838][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.110914][ T4780] Call Trace: [ 117.114231][ T4780] [ 117.117180][ T4780] dump_stack_lvl+0x168/0x22e [ 117.121884][ T4780] ? show_regs_print_info+0x12/0x12 [ 117.127111][ T4780] ? load_image+0x3b0/0x3b0 [ 117.131656][ T4780] ? __lock_acquire+0x7c50/0x7c50 [ 117.136736][ T4780] should_fail_ex+0x399/0x4d0 [ 117.141454][ T4780] _copy_from_user+0x2c/0x170 [ 117.146160][ T4780] core_sys_select+0x4d0/0x8b0 [ 117.150970][ T4780] ? poll_select_set_timeout+0x150/0x150 [ 117.156653][ T4780] ? sigprocmask+0x190/0x190 [ 117.161283][ T4780] ? __fget_files+0x44a/0x4d0 [ 117.165994][ T4780] __se_sys_pselect6+0x2ed/0x3a0 [ 117.170970][ T4780] ? __x64_sys_pselect6+0xf0/0xf0 [ 117.176030][ T4780] ? __x64_sys_pselect6+0x1d/0xf0 [ 117.181090][ T4780] do_syscall_64+0x4c/0xa0 [ 117.185534][ T4780] ? clear_bhb_loop+0x60/0xb0 [ 117.190236][ T4780] ? clear_bhb_loop+0x60/0xb0 [ 117.194942][ T4780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.200871][ T4780] RIP: 0033:0x7f6abfd8eba9 [ 117.205309][ T4780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.224953][ T4780] RSP: 002b:00007f6ac0c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 117.233392][ T4780] RAX: ffffffffffffffda RBX: 00007f6abffd6090 RCX: 00007f6abfd8eba9 [ 117.241388][ T4780] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 117.249382][ T4780] RBP: 00007f6ac0c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 117.257369][ T4780] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 117.265359][ T4780] R13: 00007f6abffd6128 R14: 00007f6abffd6090 R15: 00007fffaf2e9728 [ 117.273366][ T4780] [ 117.362839][ T4615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.592881][ T4774] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 119.055010][ T4794] loop3: detected capacity change from 0 to 128 [ 119.082866][ T4615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.103856][ T4796] binder: 4795:4796 ioctl c0306201 2000000003c0 returned -14 [ 119.437672][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.475553][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.508620][ T4500] kworker/u4:9: attempt to access beyond end of device [ 119.508620][ T4500] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 119.540325][ T4615] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.637592][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.699637][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.734691][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.741867][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.778289][ T4802] loop2: detected capacity change from 0 to 256 [ 119.786857][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.808585][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.837172][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.844324][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.892287][ T27] audit: type=1800 audit(1757830635.863:10): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.108" name="file1" dev="loop2" ino=1048619 res=0 errno=0 [ 119.926857][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.941892][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.056851][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.815703][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.830263][ T4808] loop3: detected capacity change from 0 to 256 [ 120.841172][ T4813] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 120.850336][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.862398][ T4813] FAT-fs (loop2): Filesystem has been set read-only [ 120.876773][ T4813] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.908477][ T27] audit: type=1800 audit(1757830636.883:11): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 121.172596][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.222568][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.255114][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.270787][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.283827][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.297658][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.313063][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.505728][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.545617][ T4817] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 121.553141][ T4817] FAT-fs (loop3): Filesystem has been set read-only [ 121.561801][ T4817] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 124.511182][ T4850] loop1: detected capacity change from 0 to 2048 [ 124.939300][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.963118][ T4852] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.972537][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.984918][ T4850] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 125.020507][ T4615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.074738][ T4850] Remounting filesystem read-only [ 125.619645][ T4860] loop1: detected capacity change from 0 to 512 [ 126.789804][ T4860] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 126.821913][ T4868] loop0: detected capacity change from 0 to 128 [ 127.729638][ T4572] kworker/u4:16: attempt to access beyond end of device [ 127.729638][ T4572] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 127.797620][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.818861][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.875067][ T4615] device veth0_vlan entered promiscuous mode [ 128.016341][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.064089][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.121614][ T4886] loop2: detected capacity change from 0 to 256 [ 128.150513][ T4615] device veth1_vlan entered promiscuous mode [ 128.238342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.246214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.347665][ T27] audit: type=1800 audit(1757830644.323:12): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.122" name="file1" dev="loop2" ino=1048622 res=0 errno=0 [ 128.347712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.092257][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.105358][ T4896] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 129.119787][ T4896] FAT-fs (loop2): Filesystem has been set read-only [ 129.126596][ T4896] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 129.681518][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.707377][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.778208][ T4615] device veth0_macvtap entered promiscuous mode [ 129.799775][ T4615] device veth1_macvtap entered promiscuous mode [ 129.963806][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.021677][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.043842][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.090470][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.126385][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.399192][ C0] ------------[ cut here ]------------ [ 130.404789][ C0] WARNING: CPU: 0 PID: 4906 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 130.414923][ C0] Modules linked in: [ 130.418934][ C0] CPU: 0 PID: 4906 Comm: syz.2.124 Not tainted syzkaller #0 [ 130.426311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.436522][ C0] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 130.442906][ C0] Code: ff ff ff e8 30 36 e4 f7 0f 0b 48 8b 7c 24 20 e8 d4 a4 7f fe e9 dd e9 ff ff e8 1a 36 e4 f7 0f 0b e9 f1 ee ff ff e8 0e 36 e4 f7 <0f> 0b e9 61 f2 ff ff e8 02 36 e4 f7 48 c7 c7 f0 7e fa 8d 4c 89 f6 [ 130.462635][ C0] RSP: 0000:ffffc900000078a0 EFLAGS: 00010246 [ 130.468806][ C0] RAX: ffffffff899c9a82 RBX: 0000000000000000 RCX: ffff8880197ed940 [ 130.476863][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.484882][ C0] RBP: ffffc90000007aa8 R08: ffff8880197ed940 R09: 0000000000000003 [ 130.492958][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff92000000f2c [ 130.501033][ C0] R13: dffffc0000000000 R14: ffff88805396e258 R15: ffff88807a86fe00 [ 130.509122][ C0] FS: 00007fc1659cf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 130.518164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.524787][ C0] CR2: fffffffffffffe70 CR3: 000000007ab74000 CR4: 00000000003506f0 [ 130.532913][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.540998][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.549082][ C0] Call Trace: [ 130.552418][ C0] [ 130.555348][ C0] ? verify_lock_unused+0x140/0x140 [ 130.560676][ C0] ? verify_lock_unused+0x140/0x140 [ 130.565938][ C0] ? __ieee80211_beacon_get+0xad/0x1f50 [ 130.571648][ C0] ? ieee80211_beacon_get_template+0x40/0x40 [ 130.577843][ C0] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 130.583387][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 130.589034][ C0] ? read_lock_is_recursive+0x10/0x10 [ 130.594504][ C0] __iterate_interfaces+0x243/0x500 [ 130.599792][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 130.606107][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 130.613410][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 130.619770][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 130.626910][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 130.632179][ C0] __hrtimer_run_queues+0x554/0xd60 [ 130.637553][ C0] ? hw_scan_work+0xf30/0xf30 [ 130.642304][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 130.647544][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 130.653753][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 130.659010][ C0] handle_softirqs+0x2a1/0x920 [ 130.663865][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 130.668879][ C0] ? do_softirq+0x200/0x200 [ 130.673476][ C0] __irq_exit_rcu+0x12f/0x220 [ 130.678316][ C0] ? irq_exit_rcu+0x20/0x20 [ 130.682915][ C0] irq_exit_rcu+0x5/0x20 [ 130.687269][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 130.692959][ C0] [ 130.695933][ C0] [ 130.698965][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.705009][ C0] RIP: 0010:__kasan_check_read+0x0/0x10 [ 130.710665][ C0] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 a4 7a 5a 8c eb 0a 48 c7 c7 02 c4 43 8c 48 89 de e8 d8 42 3b 08 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 a3 ec ff ff 0f 1f 00 89 f6 48 8b 0c 24 [ 130.730473][ C0] RSP: 0000:ffffc90003bf7040 EFLAGS: 00000293 [ 130.736680][ C0] RAX: ffffffff81b5ac04 RBX: dffffc0000000000 RCX: ffff8880197ed940 [ 130.744714][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001311a80 [ 130.752777][ C0] RBP: 0000000000000000 R08: 0000000000001000 R09: ffffea0001311a80 [ 130.760859][ C0] R10: 0000000000000000 R11: 0000000000000200 R12: ffffea0001311a88 [ 130.768956][ C0] R13: ffffea0001311a80 R14: ffffea0001311a80 R15: 1ffffd4000262351 [ 130.777073][ C0] ? shmem_write_end+0x124/0x6d0 [ 130.782093][ C0] shmem_write_end+0x131/0x6d0 [ 130.786950][ C0] ? shmem_write_begin+0x1b4/0x3f0 [ 130.792142][ C0] generic_perform_write+0x372/0x560 [ 130.797533][ C0] ? atime_needs_update+0x780/0x780 [ 130.802822][ C0] ? generic_file_direct_write+0x660/0x660 [ 130.808781][ C0] ? __file_remove_privs+0x5b0/0x5b0 [ 130.814157][ C0] ? preempt_count_add+0x8d/0x190 [ 130.819302][ C0] ? rwsem_write_trylock+0x12f/0x1b0 [ 130.824659][ C0] ? clear_nonspinnable+0x60/0x60 [ 130.829795][ C0] ? generic_write_checks_count+0x3d9/0x4c0 [ 130.835766][ C0] __generic_file_write_iter+0x172/0x430 [ 130.841548][ C0] generic_file_write_iter+0xab/0x2e0 [ 130.847063][ C0] __kernel_write_iter+0x26d/0x630 [ 130.852255][ C0] ? vfs_read+0x920/0x920 [ 130.856732][ C0] ? dump_user_range+0x5a9/0x7f0 [ 130.861721][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 130.866543][ C0] dump_user_range+0x3ea/0x7f0 [ 130.871415][ C0] ? dump_skip+0x40/0x40 [ 130.875702][ C0] ? dump_emit+0x74/0xe0 [ 130.880100][ C0] ? dump_emit+0xa2/0xe0 [ 130.884395][ C0] ? elf_core_dump+0x295e/0x3490 [ 130.889443][ C0] elf_core_dump+0x2f77/0x3490 [ 130.894327][ C0] ? load_elf_binary+0x26d0/0x26d0 [ 130.899581][ C0] ? verify_lock_unused+0x140/0x140 [ 130.904870][ C0] ? mas_next_entry+0xe13/0xea0 [ 130.909881][ C0] ? preempt_count_add+0x8d/0x190 [ 130.915019][ C0] ? rcu_read_lock_any_held+0xb0/0x120 [ 130.920593][ C0] ? 0xffffffffff600000 [ 130.924834][ C0] do_coredump+0x15ff/0x22b0 [ 130.929591][ C0] ? nfs_ssc_unregister+0x30/0x30 [ 130.934721][ C0] ? lock_chain_count+0x20/0x20 [ 130.939723][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 130.944978][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 130.950337][ C0] get_signal+0x10aa/0x1350 [ 130.954971][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 130.960786][ C0] ? force_sig_fault+0xc4/0x110 [ 130.965710][ C0] ? force_sig_fault_to_task+0x110/0x110 [ 130.971488][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.977575][ C0] ? get_sigframe_size+0x10/0x10 [ 130.982569][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.988757][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 130.994335][ C0] exit_to_user_mode_loop+0x70/0x110 [ 130.999770][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 131.005397][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 131.010987][ C0] exc_page_fault+0x88/0x100 [ 131.015678][ C0] asm_exc_page_fault+0x22/0x30 [ 131.020675][ C0] RIP: 0033:0x7fc164b8ebb1 [ 131.025152][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 131.044894][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 131.051123][ C0] RAX: 0000000000000000 RBX: 00007fc164dd5fa0 RCX: 00007fc164b8eba9 [ 131.059211][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 131.067350][ C0] RBP: 00007fc164c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.075403][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.083618][ C0] R13: 00007fc164dd6038 R14: 00007fc164dd5fa0 R15: 00007fff2d2008d8 [ 131.091755][ C0] [ 131.094850][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.102132][ C0] CPU: 0 PID: 4906 Comm: syz.2.124 Not tainted syzkaller #0 [ 131.109406][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.119455][ C0] Call Trace: [ 131.122728][ C0] [ 131.125564][ C0] dump_stack_lvl+0x168/0x22e [ 131.130259][ C0] ? memcpy+0x3c/0x60 [ 131.134247][ C0] ? show_regs_print_info+0x12/0x12 [ 131.139438][ C0] ? load_image+0x3b0/0x3b0 [ 131.143945][ C0] panic+0x2c9/0x710 [ 131.147867][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 131.152389][ C0] __warn+0x2f8/0x4f0 [ 131.156383][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 131.162151][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 131.167897][ C0] report_bug+0x2ba/0x4f0 [ 131.172239][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 131.177983][ C0] handle_bug+0x3a/0x70 [ 131.182145][ C0] exc_invalid_op+0x16/0x40 [ 131.186661][ C0] asm_exc_invalid_op+0x16/0x20 [ 131.191513][ C0] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 131.197861][ C0] Code: ff ff ff e8 30 36 e4 f7 0f 0b 48 8b 7c 24 20 e8 d4 a4 7f fe e9 dd e9 ff ff e8 1a 36 e4 f7 0f 0b e9 f1 ee ff ff e8 0e 36 e4 f7 <0f> 0b e9 61 f2 ff ff e8 02 36 e4 f7 48 c7 c7 f0 7e fa 8d 4c 89 f6 [ 131.217484][ C0] RSP: 0000:ffffc900000078a0 EFLAGS: 00010246 [ 131.223545][ C0] RAX: ffffffff899c9a82 RBX: 0000000000000000 RCX: ffff8880197ed940 [ 131.231527][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.239493][ C0] RBP: ffffc90000007aa8 R08: ffff8880197ed940 R09: 0000000000000003 [ 131.247462][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff92000000f2c [ 131.255430][ C0] R13: dffffc0000000000 R14: ffff88805396e258 R15: ffff88807a86fe00 [ 131.263402][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 131.269143][ C0] ? verify_lock_unused+0x140/0x140 [ 131.274353][ C0] ? verify_lock_unused+0x140/0x140 [ 131.279556][ C0] ? __ieee80211_beacon_get+0xad/0x1f50 [ 131.285100][ C0] ? ieee80211_beacon_get_template+0x40/0x40 [ 131.291096][ C0] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 131.296560][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 131.302102][ C0] ? read_lock_is_recursive+0x10/0x10 [ 131.307480][ C0] __iterate_interfaces+0x243/0x500 [ 131.312674][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 131.318912][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 131.326122][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 131.332378][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 131.339415][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 131.344641][ C0] __hrtimer_run_queues+0x554/0xd60 [ 131.349848][ C0] ? hw_scan_work+0xf30/0xf30 [ 131.354525][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 131.359632][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 131.365706][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 131.370827][ C0] handle_softirqs+0x2a1/0x920 [ 131.375595][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 131.380454][ C0] ? do_softirq+0x200/0x200 [ 131.384968][ C0] __irq_exit_rcu+0x12f/0x220 [ 131.389653][ C0] ? irq_exit_rcu+0x20/0x20 [ 131.394171][ C0] irq_exit_rcu+0x5/0x20 [ 131.398417][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 131.404064][ C0] [ 131.406993][ C0] [ 131.409920][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.415905][ C0] RIP: 0010:__kasan_check_read+0x0/0x10 [ 131.421475][ C0] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 a4 7a 5a 8c eb 0a 48 c7 c7 02 c4 43 8c 48 89 de e8 d8 42 3b 08 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 a3 ec ff ff 0f 1f 00 89 f6 48 8b 0c 24 [ 131.441073][ C0] RSP: 0000:ffffc90003bf7040 EFLAGS: 00000293 [ 131.447133][ C0] RAX: ffffffff81b5ac04 RBX: dffffc0000000000 RCX: ffff8880197ed940 [ 131.455121][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001311a80 [ 131.463089][ C0] RBP: 0000000000000000 R08: 0000000000001000 R09: ffffea0001311a80 [ 131.471054][ C0] R10: 0000000000000000 R11: 0000000000000200 R12: ffffea0001311a88 [ 131.479018][ C0] R13: ffffea0001311a80 R14: ffffea0001311a80 R15: 1ffffd4000262351 [ 131.486987][ C0] ? shmem_write_end+0x124/0x6d0 [ 131.491925][ C0] shmem_write_end+0x131/0x6d0 [ 131.496707][ C0] ? shmem_write_begin+0x1b4/0x3f0 [ 131.501819][ C0] generic_perform_write+0x372/0x560 [ 131.507103][ C0] ? atime_needs_update+0x780/0x780 [ 131.512307][ C0] ? generic_file_direct_write+0x660/0x660 [ 131.518110][ C0] ? __file_remove_privs+0x5b0/0x5b0 [ 131.523400][ C0] ? preempt_count_add+0x8d/0x190 [ 131.528422][ C0] ? rwsem_write_trylock+0x12f/0x1b0 [ 131.533724][ C0] ? clear_nonspinnable+0x60/0x60 [ 131.538766][ C0] ? generic_write_checks_count+0x3d9/0x4c0 [ 131.544687][ C0] __generic_file_write_iter+0x172/0x430 [ 131.550325][ C0] generic_file_write_iter+0xab/0x2e0 [ 131.555699][ C0] __kernel_write_iter+0x26d/0x630 [ 131.560814][ C0] ? vfs_read+0x920/0x920 [ 131.565158][ C0] ? dump_user_range+0x5a9/0x7f0 [ 131.570095][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 131.574774][ C0] dump_user_range+0x3ea/0x7f0 [ 131.579553][ C0] ? dump_skip+0x40/0x40 [ 131.583811][ C0] ? dump_emit+0x74/0xe0 [ 131.588089][ C0] ? dump_emit+0xa2/0xe0 [ 131.592335][ C0] ? elf_core_dump+0x295e/0x3490 [ 131.597283][ C0] elf_core_dump+0x2f77/0x3490 [ 131.602067][ C0] ? load_elf_binary+0x26d0/0x26d0 [ 131.607180][ C0] ? verify_lock_unused+0x140/0x140 [ 131.612388][ C0] ? mas_next_entry+0xe13/0xea0 [ 131.617265][ C0] ? preempt_count_add+0x8d/0x190 [ 131.622311][ C0] ? rcu_read_lock_any_held+0xb0/0x120 [ 131.627772][ C0] ? 0xffffffffff600000 [ 131.631934][ C0] do_coredump+0x15ff/0x22b0 [ 131.636543][ C0] ? nfs_ssc_unregister+0x30/0x30 [ 131.641584][ C0] ? lock_chain_count+0x20/0x20 [ 131.646438][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.651638][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 131.656846][ C0] get_signal+0x10aa/0x1350 [ 131.661365][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 131.667003][ C0] ? force_sig_fault+0xc4/0x110 [ 131.671857][ C0] ? force_sig_fault_to_task+0x110/0x110 [ 131.677493][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 131.683484][ C0] ? get_sigframe_size+0x10/0x10 [ 131.688432][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 131.694513][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 131.699979][ C0] exit_to_user_mode_loop+0x70/0x110 [ 131.705266][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 131.710817][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 131.716287][ C0] exc_page_fault+0x88/0x100 [ 131.720887][ C0] asm_exc_page_fault+0x22/0x30 [ 131.725735][ C0] RIP: 0033:0x7fc164b8ebb1 [ 131.730164][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 131.749768][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 131.755830][ C0] RAX: 0000000000000000 RBX: 00007fc164dd5fa0 RCX: 00007fc164b8eba9 [ 131.763798][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 131.771770][ C0] RBP: 00007fc164c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.779744][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.787712][ C0] R13: 00007fc164dd6038 R14: 00007fc164dd5fa0 R15: 00007fff2d2008d8 [ 131.795774][ C0] [ 131.799093][ C0] Kernel Offset: disabled [ 131.803467][ C0] Rebooting in 86400 seconds..