last executing test programs: 18.050584573s ago: executing program 3 (id=329): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = semget$private(0x0, 0x5, 0x480) semctl$IPC_RMID(r1, 0x0, 0x0) getdents64(r0, 0x0, 0x0) r2 = eventfd2(0x8000, 0x800) write$eventfd(r2, &(0x7f0000000080)=0xfffffffffffffffb, 0x65) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xffff}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a090400040000000000000200000014000480100001800c0001007061796c6f6164000c00034000000000000000040900020073797a3200000000140002001100014000000000000000000000000a"], 0x68}}, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 16.422864985s ago: executing program 3 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) 15.202560429s ago: executing program 3 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4106, 0x100a}], 0x1) 15.098969236s ago: executing program 1 (id=333): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 13.330003072s ago: executing program 1 (id=336): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180), 0x3, 0x470, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 13.329671752s ago: executing program 3 (id=338): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0xffffff51}, 0x1, 0x0, 0x0, 0x2000c014}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000280)="3562547ac6b644a1775d0e6cbf8eeccaa8afd8b5be55606900bc4d904906da590cd409", 0x23, 0x4c800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @local}, 0x14) 9.237283396s ago: executing program 1 (id=344): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x20000400) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 9.237151527s ago: executing program 3 (id=345): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r2 = socket(0x10, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.350465691s ago: executing program 1 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.518144681s ago: executing program 0 (id=349): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) 6.492223376s ago: executing program 2 (id=350): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) 5.407357976s ago: executing program 0 (id=352): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r4, &(0x7f00000001c0)={0x0, 0xf, 0x1}) 5.406880626s ago: executing program 2 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0xa0012, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) 4.217215266s ago: executing program 2 (id=354): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99ce", 0x65}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93d", 0x51}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ad", 0x2c}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.003015041s ago: executing program 0 (id=355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) ioctl$COMEDI_LOCK(r0, 0x6405) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x1508, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x1, 0x1, 0xc, 0x1b, 'syz1\x00', "2c2ab4d3dd31b49cf02ce9427abfe4621f75102e271e84246d9a56f9942b2dcd", "0160d107ad0330e39d3639a9419c926192c56afe282eee7e7d8094fef80304e5", [{0xfffd, 0x14a0, {0x1, 0x9}}, {0x3}, {0x9, 0x20, {0x0, 0x4}}, {0x3, 0x0, {0x1, 0x4}}, {0x9, 0x2, {0x2, 0x2}}, {0x1, 0x696a, {0x3, 0x8}}, {0x0, 0x6, {0x1, 0xfff}}, {0x89f6, 0x1, {0x7, 0x5}}, {0x6, 0x8, {0x3, 0x4}}, {0x401, 0x5, {0x3, 0x6}}, {0xb, 0xb0a0, {0x0, 0x3}}, {0x3, 0x9, {0x2, 0xd8e}}, {0x4, 0x9, {0x3, 0x3}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xe, 0x2, {0x0, 0xc}}, {0x4, 0x9, {0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x101, 0x5, {0x2, 0x6}}, {0x7, 0x1000, {0x2, 0x460}}, {0x20e, 0x5, {0x0, 0x7fff}}, {0xbc9, 0xb, {0x1, 0xff}}, {0x0, 0x1, {0x2, 0xb}}, {0x7, 0x401, {0x3, 0x5}}, {0x5, 0x10, {0x0, 0x10001}}, {0x8, 0x0, {0x3, 0xae}}, {0x80, 0x9, {0x2, 0x6}}, {0x7fc0, 0x7, {0x2, 0x3}}, {0x101, 0x101, {0x2, 0x3}}, {0x1, 0xfff9, {0x2, 0x4}}, {0x7, 0x400, {0x2}}, {0x9, 0xb0, {0x1, 0x4}}, {0x7ff, 0xb438, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x5}}, {0xa0e, 0x6, {0x1, 0x2}}, {0x4, 0x7, {0x2, 0x3}}, {0x9, 0x0, {0x0, 0x5}}, {0x768f, 0xd, {0x0, 0x1}}, {0x200, 0x0, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x8}}, {0xa8d8, 0x800, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x2, 0x5, 0x39, 0x800, 0x6, 'syz1\x00', "9fc52f6daecb2651ede80bfbaf0169f27357dfaf59e3f49647fda1a9d37843fc", "559bbf6debe2ebfdd525ea32a68c5783d8996045641a1172c381199cf4a1a5d1", [{0x1800, 0x2, {0x3, 0x8bf1}}, {0x4, 0x5}, {0x8, 0x2, {0x3}}, {0x3, 0x8, {0x1, 0xd}}, {0x6, 0x2, {0x0, 0x5}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x7, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x1}}, {0x7, 0x8, {0x1, 0x3}}, {0x3, 0x3, {0x2, 0x7fffffff}}, {0x0, 0x6, {0x0, 0x3}}, {0x800, 0x0, {0x1, 0x8}}, {0xffff, 0x1, {0x1, 0x1}}, {0x60c2, 0x3, {0x1, 0x1ff}}, {0x3, 0x6, {0x2, 0xa0d}}, {0x4, 0x6, {0x0, 0x6}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x5}}, {0xb3, 0x8, {0x2, 0x4332d02f}}, {0x3, 0x29, {0x1, 0xfffffffa}}, {0x2, 0x0, {0x1, 0x100}}, {0x7, 0x2, {0x0, 0x101}}, {0xfff8, 0x6, {0x1, 0xc}}, {0x3ff, 0x6, {0x0, 0x2}}, {0xd, 0x5, {0x0, 0x7}}, {0x2, 0x7, {0x1, 0x800000}}, {0xa2, 0x4, {0x3, 0x1ff}}, {0x56, 0x7, {0x1, 0x87b2}}, {0x5, 0x5, {0x2}}, {0xffff, 0x800, {0x0, 0x100}}, {0x5, 0x1, {0x2, 0x101}}, {0x0, 0x5, {0x2, 0x7e70}}, {0x4, 0x9088, {0x3, 0xb31}}, {0x7fff, 0x2, {0x0, 0x2}}, {0x2, 0x535, {0x1, 0x7}}, {0x81, 0x9f, {0x0, 0x8d2}}, {0x25a0, 0xfc5b, {0x2, 0x1}}, {0x100, 0xfffb, {0x1}}, {0x9, 0x80, {0x0, 0x2}}, {0x9, 0x8, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xb249}, 0xe, 0x3, 0xffff, 0x3fe1, 0x1e, 'syz1\x00', "9adaa18042571dea59f5204a8800ce87b0b7e7afb9f4dc385a5a8ebf9f8dce8a", "79f5a09f8ca8fec775d971787dc27a5510fa497f9c6fbd78cc2f86f2f3a27f3b", [{0x8, 0x7, {0x1, 0x2c00}}, {0x100, 0x4180, {0x3, 0x1000}}, {0x4, 0x9, {0x0, 0x81}}, {0x100, 0x3, {0x0, 0x4}}, {0x9a, 0x0, {0x1}}, {0x7ff, 0xfff, {0x3, 0x100}}, {0x2c00, 0x0, {0x3, 0x9}}, {0x3, 0x3bbf, {0x0, 0x9}}, {0x7, 0x117, {0x2, 0x7fffffff}}, {0x2, 0x4, {0x0, 0x7}}, {0x76, 0x0, {0x0, 0x400}}, {0x81, 0x121, {0x3, 0x8e}}, {0x1, 0x0, {0x3, 0x6}}, {0x0, 0x4, {0x3, 0x9}}, {0xfffd, 0x4120}, {0x1ff, 0xa18c, {0x1, 0xa}}, {0x9, 0x0, {0x2, 0xd0000000}}, {0x3183, 0x400, {0x1, 0x8}}, {0xffff, 0x17f5, {0x0, 0x8c45}}, {0x46b, 0x3ff, {0x0, 0x41806f89}}, {0x1, 0x2, {0x0, 0x1}}, {0x7, 0x8, {0x3, 0x800000}}, {0x2, 0x200, {0x1, 0x3}}, {0x7, 0xa, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x926a}}, {0x5, 0x0, {0x3, 0x767}}, {0x6, 0x7f, {0x3, 0x3}}, {0x5, 0x1, {0x2}}, {0x6, 0x9, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x7}}, {0x3, 0x502, {0x0, 0x5}}, {0x9, 0x80, {0x3, 0x9}}, {0x6, 0xbe, {0x0, 0x4}}, {0x800, 0x4, {0x3, 0x8000}}, {0x7fff, 0xc}, {0xb, 0xfff8, {0x1, 0x2}}, {0x7, 0x7, {0x0, 0x3}}, {0x9, 0xdf, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0xffffffff}}, {0x3, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xfe, 0x3, 0x9c25, 0x8, 0x26, 'syz0\x00', "4886d29e77655b438621e28bc67f52dab4cc155bac1840a853b099076563ea73", "2dac0df0cdd4197241fab61e2c24aa339c6bdcbc99501e276caf677cd82587c8", [{0x800, 0x7ff, {0x2, 0x1}}, {0x8, 0x7, {0x1, 0x5}}, {0xff68, 0x217f, {0x3, 0x7f}}, {0x5c, 0x5, {0x0, 0x6}}, {0x8001, 0x3, {0x1}}, {0x6, 0xa, {0x1, 0xf0000000}}, {0x81, 0xfffd, {0x2, 0x5}}, {0x1, 0x0, {0x2, 0xfae}}, {0x9, 0x8, {0xd14d209d1884419, 0x4}}, {0x50a2, 0x0, {0x0, 0x6}}, {0x9, 0x5, {0x3, 0x6}}, {0x1ce5, 0x1, {0x1, 0x8}}, {0x1, 0x4ce, {0x1, 0x1}}, {0xe317, 0x6, {0x1, 0x1a}}, {0x769d, 0x0, {0x0, 0x7fff}}, {0x5, 0x0, {0x0, 0xb4c9}}, {0x87f, 0x40, {0x3}}, {0x2, 0x100, {0x3, 0x5}}, {0x8, 0x9, {0x2, 0x5}}, {0x101, 0x6, {0x1, 0x6}}, {0x2, 0x101, {0x3, 0x40}}, {0x485e, 0x7, {0x0, 0x4}}, {0x5, 0x8000, {0x3, 0x3712}}, {0x3, 0xd8, {0x1, 0xc}}, {0x0, 0x3, {0x0, 0x875}}, {0xc, 0x200, {0x3, 0x8}}, {0x5, 0xfffa, {0x0, 0x7ff}}, {0x0, 0xcc1, {0x2, 0x2}}, {0x90fc, 0x9, {0x2, 0xffffffff}}, {0x7, 0x1, {0x2, 0x1}}, {0xa, 0x0, {0x3, 0xd}}, {0x9, 0xfffd, {0x2, 0x1}}, {0x9, 0x0, {0xd20c460d8476fc89, 0xfffffffd}}, {0xce, 0x0, {0x3, 0x9}}, {0x5, 0x4, {0x3, 0x7}}, {0x2e, 0x205a, {0x0, 0x1}}, {0x2, 0x3, {0x3, 0xc}}, {0x8, 0x8, {0x3, 0x7}}, {0x4, 0xb, {0x1, 0x4}}, {0xfff9, 0x0, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x7, 0x4, 0xd, 0xe, 'syz1\x00', "378c9251613448636ec37d8d9dd05e6ec1013de1c3ad37742b3ae1f74d7a483d", "16b067138357e0909d50f56156f63a1595678155f0da62a386d9e43d80cc7ea1", [{0x101, 0x4, {0x0, 0x1}}, {0x7f, 0xad, {0x2, 0x7}}, {0xfffa, 0x3, {0x0, 0x1}}, {0x3ff, 0xa, {0x2, 0x9}}, {0x2, 0x6, {0x3, 0x7f}}, {0x9, 0x9, {0x0, 0x9}}, {0x0, 0x9, {0x2, 0x5}}, {0x5, 0x3, {0x0, 0x5}}, {0x101, 0xfff, {0x3, 0x7fffffff}}, {0x3, 0x9, {0x3, 0x7}}, {0x4, 0xbf2, {0x3, 0x8}}, {0xa0, 0x9, {0x1, 0x3ff}}, {0x4, 0x3, {0x3, 0x3}}, {0x7, 0x401, {0x1, 0x31}}, {0x2, 0x5, {0x3, 0x6a9f}}, {0x9, 0x2, {0x1, 0x9}}, {0x8, 0x2, {0x0, 0xe}}, {0xfff9, 0xf982, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x8e9}}, {0xeb, 0x9001, {0x0, 0x6}}, {0xffff, 0xe1, {0xfb554788f9dac68d}}, {0x7f, 0x3, {0x0, 0x603}}, {0x6, 0x4, {0x3, 0x800}}, {0x5, 0x81, {0x3, 0x8}}, {0x8, 0x523e, {0x3, 0x2}}, {0x8, 0x9b6, {0x0, 0x4ec0}}, {0x5, 0x3, {0x2, 0x200}}, {0xecf, 0x4, {0x2, 0x2}}, {0x8, 0xffff, {0x0, 0x800}}, {0x6, 0xc000, {0x0, 0x2412}}, {0x9, 0x5, {0x0, 0x80}}, {0x9, 0x1, {0x2, 0x2}}, {0x1, 0xfffc, {0x1, 0xd}}, {0x7, 0x3, {0x1, 0x81}}, {0xa, 0x4, {0x2, 0x800}}, {0xde0f, 0x3, {0x0, 0x1}}, {0x3, 0x8, {0x1, 0xea26}}, {0xb999, 0x800, {0x7c48ba8a6319ef8e, 0x8}}, {0x2, 0x7, {0x2, 0x8}}, {0x0, 0x1ff, {0x4, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x3, 0x1, 0x75c0, 0x12, 'syz1\x00', "27c357d600d6e0ce33e318b4a9445dc21dd01a1a893f7cafddf3ab22c7654ac5", "502e137d0dcce16db6a5db2b658b3e81cdce03f39f972ebf9d7668c80d5124b3", [{0x7ff, 0x8000, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x8000}}, {0x80, 0x3, {0x3, 0x2}}, {0x9, 0x10, {0x3, 0x8}}, {0x4, 0x5, {0x2, 0xfd2}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xffff, 0xf, {0x3, 0x4}}, {0x7db, 0x8001, {0x0, 0x40}}, {0x8, 0x100, {0x0, 0x3}}, {0x7, 0x80f, {0x2, 0x1ff}}, {0x9, 0x2, {0x3, 0xffffffbe}}, {0xcc66, 0x6, {0x9fc5eccf7c7a9e07, 0x4}}, {0x5, 0x6, {0x3, 0x3}}, {0xfffb, 0x6, {0x0, 0x1000}}, {0xb, 0x1, {0x0, 0x4}}, {0xf, 0xff, {0x2, 0x80000000}}, {0x2, 0x8, {0x3, 0xfffffffa}}, {0xc, 0x1000, {0x2, 0x9}}, {0x8, 0x9598, {0x3, 0x5}}, {0x5, 0x10, {0x1, 0x101}}, {0x9, 0x2, {0x1, 0x73d}}, {0xbf6e, 0x7ff, {0x0, 0x8e}}, {0x3, 0xa, {0x1, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x9}}, {0x400, 0xf800, {0x2, 0x7}}, {0x4, 0x8000, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x6}}, {0x4, 0x5f83, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0xc8}}, {0x9dc, 0xbdc, {0x2, 0x7}}, {0x41fa, 0xf, {0x1, 0x9a}}, {0x3, 0x5, {0x2, 0x144}}, {0xfffd, 0xe, {0x3, 0x10001}}, {0x9, 0xc, {0x2, 0xb}}, {0x0, 0xfff8, {0x1, 0x1}}, {0xa, 0x101, {0x3, 0xfff}}, {0x8, 0x7, {0x2, 0x1}}, {0xe, 0x0, {0x2, 0x7ff}}, {0x7f17, 0x6, {0x1, 0x81}}, {0x295, 0x11, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x40b4}, 0x40, 0xb, 0x2, 0x8, 0x15, 'syz0\x00', "d87f3eba32db69e75efbee28a08cc128db73a387206beb408720a810453e9647", "23e26a05842faf629ba616fe3e6072d5c3f9d05ecf26692ec898ccda1575db65", [{0x6, 0x8000, {0x0, 0x5}}, {0x5, 0x9, {0x0, 0xe0}}, {0x6, 0x200, {0x2, 0x5}}, {0x6cd6, 0x401, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0xfffffffc}}, {0x6fe1, 0x6, {0x0, 0x6}}, {0x0, 0x94, {0x2, 0x1}}, {0x1, 0x6, {0x3, 0x400}}, {0xf800, 0x100, {0x0, 0x6}}, {0x8, 0x200, {0x1}}, {0x3, 0x83, {0x3, 0x2}}, {0x831b, 0x5, {0x1, 0xc5d8}}, {0x2, 0xf, {0x3, 0x7}}, {0xe, 0x1ff, {0x1, 0x9}}, {0x5, 0x9}, {0x401, 0x3, {0x3, 0xf}}, {0x10, 0x5, {0x0, 0xff}}, {0xd454, 0x1000, {0x1, 0x5}}, {0x772, 0x6, {0x3, 0x4}}, {0x7ff, 0x8000, {0x3, 0x9}}, {0xde6e, 0x1, {0x2, 0x80}}, {0x0, 0x1, {0x0, 0x4}}, {0x4, 0x5, {0x0, 0x7fffffff}}, {0x4, 0x2, {0x2, 0x9}}, {0xbd82, 0x0, {0x2, 0x9}}, {0xfc01, 0x6, {0x3, 0x8}}, {0x1, 0x5b1c, {0x3, 0xffffcfd0}}, {0x5, 0x8, {0x1, 0x6}}, {0x9, 0x5, {0x1, 0xfffffffd}}, {0x3ff, 0x7, {0x2, 0x101}}, {0x7fff, 0x2, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x5}}, {0x3a, 0x7, {0x1, 0x200000}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x8, 0x8, {0x2, 0x8}}, {0xf, 0x5acf, {0x3}}, {0x5, 0x5, {0x0, 0xbec}}, {0x2, 0x1, {0x2, 0x3ff}}, {0x3e, 0xff96, {0x3, 0xa6e}}, {0xa, 0x4, {0x1, 0x100}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x5, 0xf7, 0x691, 0x1, 0x24, 'syz0\x00', "0ce49199bc82ed5d11140ca6c16756c2ac9e589211c032479334e80446a05786", "ca162a19c3255c23dca9a13f911ce4bb9a195787ca0713d9e9a9c7e8efc7ec5a", [{0x1, 0x7, {0x3, 0x2}}, {0x6, 0x401, {0x2, 0x6}}, {0x2eb, 0x9d27, {0x3, 0x8}}, {0x3, 0x56, {0x1, 0x4}}, {0x4, 0xa59d, {0x1, 0xe46}}, {0xfffd, 0xf77c, {0x0, 0xa}}, {0xfffc, 0x3eef, {0x2, 0x4}}, {0x7, 0x9, {0x1, 0x9}}, {0x2, 0xfff, {0x1, 0xfffffff7}}, {0x5, 0xffff, {0x1, 0xb03a}}, {0x7ff, 0xff, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x8001}}, {0x3, 0x2, {0x1, 0x4}}, {0x7, 0x401, {0x0, 0x7fffffff}}, {0x1, 0x5, {0x1, 0x7}}, {0x149, 0x6}, {0x8001, 0x8, {0x1, 0x7fff}}, {0x0, 0x4, {0x3}}, {0x4, 0x6, {0x1}}, {0x3, 0x9, {0x2, 0x2}}, {0x8e3, 0x7fff, {0x2, 0x38}}, {0xfffa, 0x1, {0x0, 0x8}}, {0x2, 0x3, {0x1, 0x77}}, {0x100, 0xec4, {0x387ab4415f93248f, 0x9}}, {0x3, 0x2, {0x1, 0x9}}, {0x4, 0x4, {0x3, 0xfff}}, {0x4, 0x1, {0x2}}, {0x101, 0xa, {0x2, 0x100}}, {0x6, 0x9, {0x2, 0x8}}, {0x365e, 0xffff, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x9}}, {0x7, 0xbd1, {0x2, 0x7}}, {0x2, 0x8000, {0x3, 0x5}}, {0x6, 0xff, {0x2, 0x7}}, {0x240, 0x7, {0x1, 0xc3}}, {0x4087, 0x10, {0x3, 0x2}}, {0xc, 0x800, {0x0, 0x367}}, {0xfff7, 0xf, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0xc525}}, {0x0, 0x0, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x8, 0x1, 0x9, 0x7, 0x26, 'syz1\x00', "01b022b776924a7d9f233f423e0033e91c9774478cabe0f0514b59a9e1580c12", "9e2f42fbe6c1937e283d9f0581250ffe2b1e2c9e7055e984c83887ff46ba5fbf", [{0x4, 0x2143, {0x2, 0x7}}, {0x65a, 0x40, {0x3, 0x10000}}, {0x9711, 0x7, {0x0, 0xff}}, {0x9, 0x40, {0x1, 0x6}}, {0x0, 0x9, {0x3, 0x3}}, {0x800, 0x0, {0x2, 0x7}}, {0x3, 0x8000, {0x2, 0xffff0000}}, {0x6, 0xe9be, {0x2, 0xfffffffb}}, {0x4250, 0x5, {0x0, 0x1f}}, {0x5, 0x8001, {0x0, 0x7}}, {0x5, 0x2, {0x0, 0xffffffff}}, {0x7, 0xd, {0x3, 0xfffffff9}}, {0x150, 0x89a, {0x1, 0x9}}, {0x6, 0x5, {0x1, 0x6}}, {0x5, 0xc, {0x2, 0xfffffff7}}, {0x401, 0x81, {0x1, 0x101}}, {0x7ff, 0x3, {0x2, 0x7c}}, {0x6aae, 0x1, {0x2, 0x2}}, {0x5, 0x81, {0x4, 0x2}}, {0x2, 0x98f, {0x3, 0x2c1}}, {0x0, 0x9, {0x1, 0x1ff}}, {0x7f, 0x7, {0x0, 0x8}}, {0xff, 0x80, {0x3, 0x5}}, {0x8, 0x6, {0x1, 0x5}}, {0x40, 0x7, {0x1, 0x400}}, {0x1000, 0x7, {0x1, 0xb}}, {0x6, 0x101, {0x1, 0xf}}, {0x8, 0xfbb, {0x3, 0x1}}, {0x8, 0x6, {0x2, 0x8000}}, {0x9, 0x6, {0x3, 0x3ff}}, {0xf, 0xfffc, {0x2, 0x2c2}}, {0x9, 0x2, {0x2, 0x4}}, {0xff9d, 0x9, {0x3, 0x3}}, {0x5, 0xdcc, {0x2, 0xe}}, {0x9, 0x0, {0x2, 0xe}}, {0xb, 0x0, {0x1, 0x101}}, {0x40, 0x4, {0x1, 0x6}}, {0x9, 0x8, {0x2, 0xff}}, {0x9, 0x9, {0x2, 0x81}}, {0x3, 0x3, {0x2, 0x20002000}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000480)={0x119, 0x0, 'client0\x00', 0x0, "238ce6e7702b9338", "a62585ae77772caa7965bb840c7f2db4f3b148f5dc746d2d46fc3b04b44115e0", 0x1, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000002140)={{0x7, 0x8}, {0x8, 0x8}, 0x8, 0x3, 0x8}) syz_emit_ethernet(0x56, &(0x7f0000000340)={@link_local, @random="0000fc00f5d6", @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x4, [{@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0xe5, 0x3, 0x2}, @generic={0x86, 0x2}, @lsrr={0x83, 0x17, 0xb7, [@empty, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @private=0xa010101, @broadcast]}]}}, {0x11, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) 3.693392783s ago: executing program 0 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f000100"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 3.693226823s ago: executing program 2 (id=357): ioperm(0x0, 0xd, 0x4000000000000020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) iopl(0x3) socket(0x26, 0x1, 0xe6c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xf7fffff8, 0xf21f96a5, 0xe5a, 0x7d, 0xe, "00000000001a00f5ff7d0d00", 0x8, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r3, 0xb19, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20008080) ioperm(0x0, 0x5, 0x92) 3.495097776s ago: executing program 1 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) alarm(0x8) 2.279066129s ago: executing program 0 (id=359): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noac']) 2.121387966s ago: executing program 2 (id=360): syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x6b7a, 0x80, 0x1, 0x3df}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 1.704399096s ago: executing program 1 (id=361): socket(0x1e, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r1, &(0x7f00000003c0), 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 969.886428ms ago: executing program 0 (id=362): userfaultfd(0x80801) r0 = fanotify_init(0x200, 0x2) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00004e3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(r1) fanotify_mark(r0, 0x1, 0x48000046, r3, 0x0) r4 = dup(r3) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x78) 969.047248ms ago: executing program 2 (id=363): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 0s ago: executing program 3 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000280)=""/85, 0x55) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 72.400689][ T5760] cgroup: Unknown subsys name 'net' [ 72.554545][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.234973][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.766594][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.779403][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.788522][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.796804][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.828997][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.852159][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.859801][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.867141][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.876983][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.877496][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.884454][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.892355][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.903008][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.905572][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.913474][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.919658][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.926610][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.941030][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.941960][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.958703][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.980144][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.990217][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.998600][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.006194][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.384623][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.534646][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.603635][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.613712][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.634027][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.641370][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.648773][ T5777] bridge_slave_0: entered allmulticast mode [ 76.656065][ T5777] bridge_slave_0: entered promiscuous mode [ 76.702741][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.710004][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.717147][ T5777] bridge_slave_1: entered allmulticast mode [ 76.724248][ T5777] bridge_slave_1: entered promiscuous mode [ 76.771697][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.778949][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.786090][ T5775] bridge_slave_0: entered allmulticast mode [ 76.795552][ T5775] bridge_slave_0: entered promiscuous mode [ 76.813211][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.820648][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.828435][ T5775] bridge_slave_1: entered allmulticast mode [ 76.835204][ T5775] bridge_slave_1: entered promiscuous mode [ 76.912690][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.924825][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.973852][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.983217][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.990750][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.001210][ T5776] bridge_slave_0: entered allmulticast mode [ 77.008389][ T5776] bridge_slave_0: entered promiscuous mode [ 77.015835][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.023409][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030898][ T5772] bridge_slave_0: entered allmulticast mode [ 77.037772][ T5772] bridge_slave_0: entered promiscuous mode [ 77.055448][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.074529][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.082165][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.089611][ T5776] bridge_slave_1: entered allmulticast mode [ 77.096410][ T5776] bridge_slave_1: entered promiscuous mode [ 77.103424][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.111279][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.118842][ T5772] bridge_slave_1: entered allmulticast mode [ 77.125621][ T5772] bridge_slave_1: entered promiscuous mode [ 77.135564][ T5777] team0: Port device team_slave_0 added [ 77.155245][ T5775] team0: Port device team_slave_0 added [ 77.196704][ T5777] team0: Port device team_slave_1 added [ 77.205261][ T5775] team0: Port device team_slave_1 added [ 77.235111][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.265879][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.277108][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.306544][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.313753][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.339873][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.354196][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.361774][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.388010][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.402130][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.423737][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.431267][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.459675][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.501833][ T5776] team0: Port device team_slave_0 added [ 77.511455][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.518764][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.544825][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.584269][ T5776] team0: Port device team_slave_1 added [ 77.624317][ T5775] hsr_slave_0: entered promiscuous mode [ 77.631992][ T5775] hsr_slave_1: entered promiscuous mode [ 77.641663][ T5772] team0: Port device team_slave_0 added [ 77.650950][ T5772] team0: Port device team_slave_1 added [ 77.657688][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.664639][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.691241][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.715013][ T5777] hsr_slave_0: entered promiscuous mode [ 77.722382][ T5777] hsr_slave_1: entered promiscuous mode [ 77.728710][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.736517][ T5777] Cannot create hsr debugfs directory [ 77.751733][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.758950][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.785198][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.847761][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.854764][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.883160][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.896796][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.903980][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.930000][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.998560][ T51] Bluetooth: hci2: command tx timeout [ 78.004453][ T5087] Bluetooth: hci0: command tx timeout [ 78.077017][ T5776] hsr_slave_0: entered promiscuous mode [ 78.083357][ T51] Bluetooth: hci1: command tx timeout [ 78.087860][ T5087] Bluetooth: hci3: command tx timeout [ 78.095345][ T5776] hsr_slave_1: entered promiscuous mode [ 78.104377][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.112655][ T5776] Cannot create hsr debugfs directory [ 78.141576][ T5772] hsr_slave_0: entered promiscuous mode [ 78.150991][ T5772] hsr_slave_1: entered promiscuous mode [ 78.158439][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.166160][ T5772] Cannot create hsr debugfs directory [ 78.478624][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.492436][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.507588][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.521612][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.580121][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.596731][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.607246][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.619359][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.681861][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.707411][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.744458][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.754391][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.805553][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.825735][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.837333][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.850352][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.933792][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.993379][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.041043][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.048395][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.061191][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.068369][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.120306][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.193207][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.216946][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.224157][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.246370][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.282718][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.289947][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.312774][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.351073][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.370228][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.377379][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.412807][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.420030][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.479745][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.516098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.523327][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.571814][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.609077][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.616213][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.655981][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.863500][ T5775] veth0_vlan: entered promiscuous mode [ 79.909377][ T5775] veth1_vlan: entered promiscuous mode [ 79.974670][ T5775] veth0_macvtap: entered promiscuous mode [ 80.023607][ T5775] veth1_macvtap: entered promiscuous mode [ 80.083232][ T5087] Bluetooth: hci0: command tx timeout [ 80.085459][ T51] Bluetooth: hci2: command tx timeout [ 80.123211][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.134736][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.160375][ T51] Bluetooth: hci1: command tx timeout [ 80.160385][ T5087] Bluetooth: hci3: command tx timeout [ 80.175042][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.215574][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.233489][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243458][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.252956][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.262885][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.326167][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.339679][ T5776] veth0_vlan: entered promiscuous mode [ 80.377613][ T5776] veth1_vlan: entered promiscuous mode [ 80.431392][ T5777] veth0_vlan: entered promiscuous mode [ 80.498217][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.520078][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.545632][ T5777] veth1_vlan: entered promiscuous mode [ 80.574770][ T5772] veth0_vlan: entered promiscuous mode [ 80.579380][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.592906][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.658739][ T5772] veth1_vlan: entered promiscuous mode [ 80.673880][ T5776] veth0_macvtap: entered promiscuous mode [ 80.686450][ T5776] veth1_macvtap: entered promiscuous mode [ 80.700349][ T5777] veth0_macvtap: entered promiscuous mode [ 80.731763][ T5777] veth1_macvtap: entered promiscuous mode [ 80.753571][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.769686][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.800891][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.925767][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.941809][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.964925][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.996107][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.011961][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.025375][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.044718][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.069966][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.081540][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.092848][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.107477][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.120700][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.131867][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.146403][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.156114][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.165449][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.174376][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.201508][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.210946][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.221698][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.231068][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.269476][ T5772] veth0_macvtap: entered promiscuous mode [ 81.288645][ T5772] veth1_macvtap: entered promiscuous mode [ 81.355825][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.370593][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.380867][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.391537][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404316][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.415192][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.427237][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.477978][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.489795][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.500197][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.510902][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.521802][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.532357][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.543984][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.556086][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.565752][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574949][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.584110][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.614441][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.626297][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.655248][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.674210][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.759866][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.785330][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.933940][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.987843][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.072489][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.108816][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.198291][ T51] Bluetooth: hci2: command tx timeout [ 82.203830][ T5087] Bluetooth: hci0: command tx timeout [ 82.237996][ T5087] Bluetooth: hci1: command tx timeout [ 82.243478][ T5087] Bluetooth: hci3: command tx timeout [ 83.410337][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.462610][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.842366][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.851449][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.503933][ T5087] Bluetooth: hci0: command tx timeout [ 84.514590][ T5087] Bluetooth: hci2: command tx timeout [ 84.530780][ T51] Bluetooth: hci3: command tx timeout [ 84.536462][ T51] Bluetooth: hci1: command tx timeout [ 84.920938][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.928335][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.936669][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.944002][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.065441][ T5864] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.083551][ T5853] team0: Port device bridge0 added [ 85.166295][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.186809][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.065168][ T787] cfg80211: failed to load regulatory.db [ 89.837635][ C0] sched: RT throttling activated [ 90.368277][ T788] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 90.567036][ T5907] UBIFS error (pid: 5907): cannot open "./file0", error -22 [ 90.605981][ T788] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 90.776275][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.884590][ T788] usb 1-1: Product: syz [ 91.006158][ T788] usb 1-1: Manufacturer: syz [ 91.126165][ T788] usb 1-1: SerialNumber: syz [ 91.173940][ T788] usb 1-1: config 0 descriptor?? [ 91.295072][ T788] usb 1-1: can't set config #0, error -71 [ 91.353842][ T788] usb 1-1: USB disconnect, device number 2 [ 91.384043][ T5913] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 91.392794][ T5913] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 91.403109][ T5913] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 92.681755][ T5929] binder_alloc: 5928: binder_alloc_buf, no vma [ 92.775058][ T5925] syz.2.26: vmalloc error: size 18446744073709551614, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 92.816407][ T5925] CPU: 0 PID: 5925 Comm: syz.2.26 Not tainted syzkaller #0 [ 92.823700][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.834072][ T5925] Call Trace: [ 92.837391][ T5925] [ 92.840357][ T5925] dump_stack_lvl+0x18c/0x250 [ 92.845103][ T5925] ? show_regs_print_info+0x20/0x20 [ 92.850375][ T5925] ? load_image+0x420/0x420 [ 92.854949][ T5925] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 92.861425][ T5925] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 92.867979][ T5925] warn_alloc+0x246/0x340 [ 92.872386][ T5925] ? zone_watermark_ok_safe+0x230/0x230 [ 92.878011][ T5925] ? __mutex_trylock_common+0x159/0x260 [ 92.883632][ T5925] __vmalloc_node_range+0x126/0x1330 [ 92.888982][ T5925] ? tomoyo_path_number_perm+0x217/0x620 [ 92.894673][ T5925] ? rcu_is_watching+0x15/0xb0 [ 92.899486][ T5925] ? trace_contention_end+0x39/0xe0 [ 92.904815][ T5925] ? __mutex_lock+0x315/0xcc0 [ 92.906005][ T5934] syz.0.29[5934]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.909520][ T5925] ? tomoyo_path_number_perm+0x5b4/0x620 [ 92.909576][ T5925] ? dvb_dvr_do_ioctl+0x79/0x220 [ 92.909609][ T5925] ? tomoyo_path_number_perm+0x217/0x620 [ 92.909641][ T5925] ? free_vm_area+0x50/0x50 [ 92.935036][ T5932] Zero length message leads to an empty skb [ 92.939437][ T5925] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 92.939473][ T5925] vmalloc+0x79/0x90 [ 92.939500][ T5925] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 92.939523][ T5925] dvb_dvr_do_ioctl+0x12e/0x220 [ 92.939553][ T5925] dvb_usercopy+0x195/0x2b0 [ 92.939576][ T5925] ? dvb_dvr_release+0x3e0/0x3e0 [ 92.939609][ T5925] ? dvb_generic_ioctl+0xb0/0xb0 [ 92.939656][ T5925] ? dvb_dvr_poll+0x230/0x230 [ 92.939682][ T5925] dvb_dvr_ioctl+0x29/0x30 [ 92.939708][ T5925] __se_sys_ioctl+0xfd/0x170 [ 92.939738][ T5925] do_syscall_64+0x55/0xa0 [ 92.939758][ T5925] ? clear_bhb_loop+0x40/0x90 [ 92.939783][ T5925] ? clear_bhb_loop+0x40/0x90 [ 92.939810][ T5925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.939836][ T5925] RIP: 0033:0x7f661ed9c819 [ 92.939858][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.939875][ T5925] RSP: 002b:00007f661fc30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.939900][ T5925] RAX: ffffffffffffffda RBX: 00007f661f016090 RCX: 00007f661ed9c819 [ 92.939915][ T5925] RDX: fffffffffffffffe RSI: 0000000000006f2d RDI: 0000000000000004 [ 92.939930][ T5925] RBP: 00007f661ee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 92.939943][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.939956][ T5925] R13: 00007f661f016128 R14: 00007f661f016090 R15: 00007ffedc4ee888 [ 92.939990][ T5925] [ 92.981532][ T5925] Mem-Info: [ 93.005037][ T5934] loop0: detected capacity change from 0 to 16 [ 93.033009][ T5925] active_anon:6434 inactive_anon:0 isolated_anon:0 [ 93.033009][ T5925] active_file:1008 inactive_file:39933 isolated_file:0 [ 93.033009][ T5925] unevictable:768 dirty:1770 writeback:0 [ 93.033009][ T5925] slab_reclaimable:10003 slab_unreclaimable:90424 [ 93.033009][ T5925] mapped:25685 shmem:1677 pagetables:547 [ 93.033009][ T5925] sec_pagetables:0 bounce:0 [ 93.033009][ T5925] kernel_misc_reclaimable:0 [ 93.033009][ T5925] free:1366132 free_pcp:9864 free_cma:0 [ 93.129907][ T5934] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.217201][ T5934] sch_fq: defrate 0 ignored. [ 93.217677][ T5925] Node 0 active_anon:26328kB inactive_anon:0kB active_file:4032kB inactive_file:159532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101344kB dirty:7120kB writeback:0kB shmem:5224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10680kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 93.318028][ T5925] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 93.358856][ T5925] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.393822][ T5925] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 93.404001][ T5925] Node 0 DMA32 free:1555352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22888kB inactive_anon:0kB active_file:4232kB inactive_file:158704kB unevictable:1536kB writepending:7204kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:21408kB local_pcp:17560kB free_cma:0kB [ 93.450701][ T5925] lowmem_reserve[]: 0 0 0 0 0 [ 93.497716][ T5925] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:16kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 93.551579][ T5925] lowmem_reserve[]: 0 0 0 0 0 [ 93.556409][ T5925] Node 1 Normal free:3891492kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23072kB local_pcp:12256kB free_cma:0kB [ 93.627092][ T5925] lowmem_reserve[]: 0 0 0 0 0 [ 93.637868][ T5941] process 'syz.0.32' launched './file1' with NULL argv: empty string added [ 93.660327][ T5925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 93.683752][ T5925] Node 0 DMA32: 346*4kB (UM) 924*8kB (UE) 190*16kB (UE) 3*32kB (UME) 1*64kB (M) 4*128kB (UM) 6*256kB (M) 8*512kB (UME) 4*1024kB (ME) 4*2048kB (UME) 372*4096kB (UM) = 1554120kB [ 93.703402][ T5925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 93.742231][ T5925] Node 1 Normal: 239*4kB (UME) 59*8kB (UME) 41*16kB (UME) 42*32kB (UME) 23*64kB (UME) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3891492kB [ 93.768335][ T5925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.778186][ T5925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.828467][ T5925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.864543][ T5925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.884419][ T5925] 43557 total pagecache pages [ 93.894568][ T5925] 0 pages in swap cache [ 93.898910][ T5925] Free swap = 124996kB [ 93.908847][ T5925] Total swap = 124996kB [ 93.913216][ T5925] 2097051 pages RAM [ 93.918484][ T5925] 0 pages HighMem/MovableOnly [ 93.932385][ T5925] 416927 pages reserved [ 93.936605][ T5925] 0 pages cma reserved [ 94.243741][ T5942] loop1: detected capacity change from 0 to 32768 [ 94.402314][ T5942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.31 (5942) [ 94.551031][ T5942] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.577340][ T5942] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 94.772314][ T5942] BTRFS info (device loop1): setting nodatasum [ 94.865385][ T5942] BTRFS info (device loop1): force zlib compression, level 3 [ 95.354389][ T5942] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.427069][ T5942] BTRFS info (device loop1): use lzo compression, level 0 [ 95.468434][ T5942] BTRFS info (device loop1): turning on flush-on-commit [ 95.478618][ T5942] BTRFS info (device loop1): enabling auto defrag [ 95.497812][ T5942] BTRFS info (device loop1): max_inline at 4096 [ 95.504254][ T5942] BTRFS info (device loop1): using free space tree [ 96.181203][ T5980] loop2: detected capacity change from 0 to 16 [ 96.350091][ T5942] BTRFS info (device loop1): enabling ssd optimizations [ 96.474358][ T5980] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.652287][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.690029][ T5987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.41'. [ 96.757200][ T5987] netlink: 76 bytes leftover after parsing attributes in process `syz.3.41'. [ 96.769209][ T5987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.41'. [ 98.568311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 101.537906][ T6016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.48'. [ 104.173693][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 104.267295][ T6042] netlink: 63 bytes leftover after parsing attributes in process `syz.0.46'. [ 104.857838][ T6050] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.372887][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 105.461573][ T6052] 8021q: VLANs not supported on xfrm0 [ 105.584005][ T5762] IPVS: starting estimator thread 0... [ 105.621456][ T6065] loop1: detected capacity change from 0 to 512 [ 105.701050][ T6065] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.61: corrupted in-inode xattr: invalid ea_ino [ 105.714789][ T6063] IPVS: using max 18 ests per chain, 43200 per kthread [ 105.737871][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.777226][ T6065] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.61: couldn't read orphan inode 15 (err -117) [ 105.836657][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.928541][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 105.944284][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 105.975115][ T5810] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 106.002622][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.027813][ T5810] usb 1-1: Product: syz [ 106.032094][ T5810] usb 1-1: Manufacturer: syz [ 106.036728][ T5810] usb 1-1: SerialNumber: syz [ 106.061763][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.072589][ T5810] usb 1-1: config 0 descriptor?? [ 106.089128][ T6057] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.119913][ T5810] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 106.549002][ T5810] usb 1-1: USB disconnect, device number 3 [ 106.989195][ T6089] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 107.061704][ T6089] vlan2: entered allmulticast mode [ 107.095672][ T6089] veth1_vlan: entered allmulticast mode [ 107.633959][ T6100] syzkaller0: entered promiscuous mode [ 107.639776][ T6100] syzkaller0: entered allmulticast mode [ 107.698794][ T6101] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.269449][ T6097] tipc: Started in network mode [ 108.283592][ T6097] tipc: Node identity 56f5bc364bf6, cluster identity 4711 [ 108.315157][ T6097] tipc: Enabled bearer , priority 0 [ 108.369909][ T6096] tipc: Resetting bearer [ 108.515472][ T6096] tipc: Disabling bearer [ 108.554204][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 111.465146][ T6133] loop0: detected capacity change from 0 to 2048 [ 112.489391][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.995119][ T3451] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 115.018274][ T3451] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 115.039924][ T3451] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.039924][ T3451] [ 115.072694][ T3451] EXT4-fs (loop0): Total free blocks count 0 [ 115.092876][ T3451] EXT4-fs (loop0): Free/Dirty block details [ 115.262725][ T3451] EXT4-fs (loop0): free_blocks=2415919504 [ 115.277837][ T3451] EXT4-fs (loop0): dirty_blocks=48 [ 115.284337][ T3451] EXT4-fs (loop0): Block reservation details [ 115.294531][ T3451] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 115.309883][ T1139] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 116.716347][ T6164] bond_slave_1: entered promiscuous mode [ 116.814392][ T6164] bond_slave_1: left promiscuous mode [ 116.886631][ T6166] (null): rxe_set_mtu: Set mtu to 1024 [ 117.064147][ T6166] infiniband syz2: set down [ 117.069060][ T6166] infiniband syz2: added ipvlan0 [ 117.195591][ T6166] RDS/IB: syz2: added [ 118.051556][ T6166] smc: adding ib device syz2 with port count 1 [ 118.058156][ T6166] smc: ib device syz2 port 1 has pnetid [ 118.156848][ T6178] syz.3.88: attempt to access beyond end of device [ 118.156848][ T6178] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.490487][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 118.513269][ T6178] unable to read squashfs_super_block [ 119.900682][ T6194] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 120.009400][ T6194] macvtap1: entered allmulticast mode [ 121.014590][ T6202] loop1: detected capacity change from 0 to 512 [ 121.037519][ T6202] EXT4-fs: Ignoring removed orlov option [ 121.048903][ T6202] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.055484][ T6202] ext4: Unknown parameter 'obj_user' [ 123.315250][ T6214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.465593][ T6222] loop1: detected capacity change from 0 to 256 [ 124.498026][ T6222] exfat: Deprecated parameter 'utf8' [ 124.524548][ T6222] exfat: Deprecated parameter 'utf8' [ 124.555225][ T6222] exfat: Deprecated parameter 'namecase' [ 124.610961][ T6222] exfat: Deprecated parameter 'utf8' [ 124.990342][ T6222] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 125.924370][ T6239] syzkaller0: entered promiscuous mode [ 125.939016][ T6239] syzkaller0: entered allmulticast mode [ 126.644594][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'. [ 126.731087][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 126.788405][ T6247] veth3: entered promiscuous mode [ 126.793589][ T6247] veth3: entered allmulticast mode [ 127.219172][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 127.428452][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.404989][ T6267] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.423268][ T6271] fuse: Bad value for 'fd' [ 128.452170][ T6267] syz_tun: entered promiscuous mode [ 128.503396][ T6267] vlan2: entered promiscuous mode [ 131.598672][ T6299] loop1: detected capacity change from 0 to 32768 [ 131.624590][ T6299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.124 (6299) [ 131.642023][ T6299] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.652839][ T6299] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 131.662063][ T6299] BTRFS info (device loop1): using free space tree [ 131.756255][ T6299] BTRFS info (device loop1): enabling ssd optimizations [ 131.763473][ T6299] BTRFS info (device loop1): auto enabling async discard [ 133.129483][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.136547][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.073700][ T5776] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.967986][ T5762] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.168356][ T5762] usb 1-1: Using ep0 maxpacket: 8 [ 136.181749][ T5762] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 136.190475][ T5762] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 136.202179][ T5762] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 136.212525][ T5762] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 136.267901][ T5762] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 136.372766][ T5762] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.386817][ T5762] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.397056][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.562636][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 136.647937][ T5762] usb 1-1: usb_control_msg returned -32 [ 136.658600][ T5762] usbtmc 1-1:16.0: can't read capabilities [ 137.111154][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 137.143197][ T6360] usbtmc 1-1:16.0: Unable to send data, error -71 [ 137.165045][ T6360] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 137.188168][ T9] usb 1-1: USB disconnect, device number 4 [ 139.457756][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 139.644804][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 139.657233][ T9] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 139.684586][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 139.702062][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.742432][ T9] usb 1-1: Product: syz [ 139.765200][ T9] usb 1-1: Manufacturer: syz [ 139.770505][ T9] usb 1-1: SerialNumber: syz [ 140.768138][ T9] usb 1-1: USB disconnect, device number 5 [ 141.720692][ T6404] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 147.116122][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 149.569313][ T28] audit: type=1326 audit(1776140696.678:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.594486][ T28] audit: type=1326 audit(1776140696.678:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.627782][ T28] audit: type=1326 audit(1776140696.678:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.661025][ T28] audit: type=1326 audit(1776140696.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.685140][ T28] audit: type=1326 audit(1776140696.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.707699][ T28] audit: type=1326 audit(1776140696.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.730943][ T28] audit: type=1326 audit(1776140696.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.780386][ T28] audit: type=1326 audit(1776140696.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 149.859684][ T28] audit: type=1326 audit(1776140696.678:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 150.023176][ T28] audit: type=1326 audit(1776140696.678:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 153.062685][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 153.160428][ T6495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.180711][ T6500] bond1: entered promiscuous mode [ 153.194680][ T6500] bond1: entered allmulticast mode [ 153.227486][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.264575][ T6500] team0: Port device bond1 added [ 153.335882][ T6495] vxcan3: entered promiscuous mode [ 153.346743][ T6495] bond1: (slave vxcan3): refused to change device type [ 153.518890][ T6502] syz_tun: entered allmulticast mode [ 153.625942][ T6504] syzkaller0: entered promiscuous mode [ 153.632723][ T6504] syzkaller0: entered allmulticast mode [ 157.227383][ T6530] loop3: detected capacity change from 0 to 32768 [ 158.888973][ T6530] (syz.3.183,6530,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.936212][ T6530] (syz.3.183,6530,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.480558][ T6530] JBD2: Ignoring recovery information on journal [ 160.701706][ T6530] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 161.005858][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 161.105916][ T6561] fuse: Bad value for 'fd' [ 161.282514][ T6565] netlink: 'syz.3.193': attribute type 5 has an invalid length. [ 161.798771][ T6570] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.142753][ T6605] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 164.305429][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.382419][ T6609] macvlan2: entered promiscuous mode [ 164.401469][ T6609] macvlan2: entered allmulticast mode [ 164.433888][ T6609] bond1: entered promiscuous mode [ 164.470926][ T6609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.564866][ T6609] bond1: left promiscuous mode [ 164.861240][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 165.566415][ T6605] bond1: (slave ip6gretap1): making interface the new active one [ 165.727868][ T6605] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 167.945995][ T27] IPVS: starting estimator thread 0... [ 168.167904][ T6660] IPVS: using max 18 ests per chain, 43200 per kthread [ 168.373256][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 168.532666][ T6663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.724946][ T6674] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 169.817019][ T6674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.833503][ T6671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.217'. [ 169.847123][ T6677] vlan2: entered promiscuous mode [ 170.527705][ T6677] bond3: entered promiscuous mode [ 170.532994][ T6677] vlan2: entered allmulticast mode [ 170.574111][ T6677] bond3: entered allmulticast mode [ 170.655756][ T6674] bond3: (slave bridge1): making interface the new active one [ 170.675648][ T6674] bridge1: entered promiscuous mode [ 170.682922][ T6674] bridge1: entered allmulticast mode [ 170.696474][ T6674] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 170.818494][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 171.923578][ T6680] bridge1: port 1(erspan0) entered blocking state [ 171.941989][ T6680] bridge1: port 1(erspan0) entered disabled state [ 171.968162][ T6680] erspan0: entered allmulticast mode [ 171.976812][ T6680] erspan0: entered promiscuous mode [ 171.996857][ T6680] bridge1: port 1(erspan0) entered blocking state [ 172.004115][ T6680] bridge1: port 1(erspan0) entered forwarding state [ 175.664689][ T6719] loop1: detected capacity change from 0 to 256 [ 175.694225][ T6719] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.762496][ T6719] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 175.813316][ T6719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 176.011600][ T6722] syzkaller0: entered promiscuous mode [ 176.035539][ T6719] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 176.045942][ T6722] syzkaller0: entered allmulticast mode [ 176.076486][ T6719] exFAT-fs (loop1): Filesystem has been set read-only [ 176.105714][ T6719] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 178.549309][ T6743] loop0: detected capacity change from 0 to 4096 [ 178.583099][ T6743] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.718093][ T5834] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 179.007672][ T5834] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 179.327119][ T5834] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 180.199729][ T5834] usb 4-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 180.247169][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.259080][ T6743] EXT4-fs: Ignoring removed orlov option [ 180.274859][ T6743] ext4: Unknown parameter 'func' [ 180.288413][ T5834] usb 4-1: Product: syz [ 180.293128][ T5834] usb 4-1: Manufacturer: syz [ 180.308498][ T5834] usb 4-1: SerialNumber: syz [ 180.610240][ T27] usb 4-1: USB disconnect, device number 2 [ 180.761522][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 182.105834][ T6795] loop0: detected capacity change from 0 to 512 [ 182.148902][ T6795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.176352][ T6795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 183.291773][ T6795] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.323845][ T6795] ======================================================= [ 183.323845][ T6795] WARNING: The mand mount option has been deprecated and [ 183.323845][ T6795] and is ignored by this kernel. Remove the mand [ 183.323845][ T6795] option from the mount to silence this warning. [ 183.323845][ T6795] ======================================================= [ 184.254717][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 184.254744][ T28] audit: type=1326 audit(1776140731.198:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 184.597972][ T28] audit: type=1326 audit(1776140731.198:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 184.664353][ T6795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 184.748128][ T28] audit: type=1326 audit(1776140731.198:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 184.984310][ T28] audit: type=1326 audit(1776140731.198:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.014660][ T28] audit: type=1326 audit(1776140731.198:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.099912][ T28] audit: type=1326 audit(1776140731.198:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.190730][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 185.292265][ T28] audit: type=1326 audit(1776140731.198:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.814454][ T28] audit: type=1326 audit(1776140731.198:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.856284][ T6824] loop3: detected capacity change from 0 to 512 [ 185.895692][ T28] audit: type=1326 audit(1776140731.198:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.917873][ T6824] EXT4-fs: Ignoring removed i_version option [ 185.930145][ T28] audit: type=1326 audit(1776140731.198:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c70b9c819 code=0x7ffc0000 [ 185.934802][ T6824] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.985845][ T6824] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.002176][ T5878] IPVS: starting estimator thread 0... [ 186.045061][ T6824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 186.077433][ T6824] System zones: 1-12 [ 186.082370][ T6824] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.107736][ T6828] IPVS: using max 18 ests per chain, 43200 per kthread [ 186.116431][ T6824] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.255: invalid indirect mapped block 2 (level 2) [ 186.135405][ T6830] fuse: Bad value for 'fd' [ 186.226275][ T6824] EXT4-fs (loop3): Remounting filesystem read-only [ 186.254778][ T6824] EXT4-fs (loop3): 1 truncate cleaned up [ 186.265684][ T6824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 186.567211][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 190.647503][ T6869] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 190.671783][ T6869] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 190.751330][ T6869] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 190.760195][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.768623][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.788582][ T6869] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 190.813630][ T6869] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 190.834468][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.842036][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.851072][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.858322][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.918792][ T6869] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 190.933771][ T6869] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 190.955644][ T6875] team0: Port device bridge0 added [ 190.961887][ T6869] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 191.630628][ T6869] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 191.780988][ T6875] bridge1: port 1(erspan0) entered disabled state [ 191.812848][ T6875] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 191.847142][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.867223][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.885250][ T6875] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 191.902330][ T6875] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 192.827242][ T6887] syzkaller0: entered promiscuous mode [ 192.847952][ T6887] syzkaller0: entered allmulticast mode [ 194.565691][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.576754][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.475310][ T6905] syzkaller0: entered promiscuous mode [ 195.490980][ T6905] syzkaller0: entered allmulticast mode [ 196.585172][ T6920] fuse: Bad value for 'fd' [ 197.563532][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 197.767462][ T6929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.803924][ T6931] bond2: entered promiscuous mode [ 197.817789][ T6931] bond2: entered allmulticast mode [ 197.874748][ T6931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.898241][ T6931] team0: Port device bond2 added [ 197.926102][ T6932] vxcan3: entered promiscuous mode [ 197.967969][ T6932] bond2: (slave vxcan3): refused to change device type [ 199.043111][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 199.064006][ T6939] syz_tun (unregistering): left allmulticast mode [ 202.008110][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 202.014446][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 202.021283][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 202.027487][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 202.513168][ T5785] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 202.629334][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 202.709449][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.191465][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 203.255959][ T6984] bond1: entered promiscuous mode [ 203.293869][ T6984] bond1: entered allmulticast mode [ 203.345583][ T6984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.491757][ T6984] team0: Port device bond1 added [ 203.714544][ T6980] vxcan3: entered promiscuous mode [ 203.730051][ T6980] bond1: (slave vxcan3): refused to change device type [ 207.290737][ T5785] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 207.299547][ T5785] Bluetooth: hci0: Injecting HCI hardware error event [ 207.309165][ T5785] Bluetooth: hci0: hardware error 0x00 [ 207.318638][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 207.318654][ T28] audit: type=1326 audit(1776140752.138:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.100969][ T28] audit: type=1326 audit(1776140752.138:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.182379][ T28] audit: type=1326 audit(1776140752.138:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.204958][ T28] audit: type=1326 audit(1776140752.138:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.228752][ T28] audit: type=1326 audit(1776140752.138:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.251078][ T28] audit: type=1326 audit(1776140752.148:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.290250][ T28] audit: type=1326 audit(1776140752.148:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.407360][ T28] audit: type=1326 audit(1776140752.148:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.528558][ T28] audit: type=1326 audit(1776140752.148:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 209.605777][ T28] audit: type=1326 audit(1776140752.158:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365819c819 code=0x7ffc0000 [ 210.192334][ T7013] bond_slave_1: entered promiscuous mode [ 210.213778][ T7013] bond_slave_1: left promiscuous mode [ 211.367736][ T5785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 212.595569][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 212.626346][ T7054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.827556][ T7054] bond4: entered promiscuous mode [ 213.841473][ T7054] bond4: entered allmulticast mode [ 213.865722][ T7054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.914253][ T7054] team0: Port device bond4 added [ 214.010485][ T7061] vxcan3: entered promiscuous mode [ 214.100938][ T7061] bond4: (slave vxcan3): refused to change device type [ 215.829448][ T7073] syzkaller0: entered promiscuous mode [ 215.835009][ T7073] syzkaller0: entered allmulticast mode [ 215.999814][ T7078] overlayfs: failed to clone upperpath [ 217.808045][ T7097] loop3: detected capacity change from 0 to 1024 [ 217.873204][ T7097] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 217.883277][ T7097] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 218.926092][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.000409][ T7113] bridge_slave_0: left allmulticast mode [ 219.006234][ T7113] bridge_slave_0: left promiscuous mode [ 219.027841][ T7097] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.3.329: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 219.043344][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.082947][ T7113] bridge_slave_1: left allmulticast mode [ 219.090404][ T7113] bridge_slave_1: left promiscuous mode [ 219.099782][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.130049][ T7113] bond0: (slave bond_slave_0): Releasing backup interface [ 219.206839][ T7113] bond0: (slave bond_slave_1): Releasing backup interface [ 219.220117][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.311179][ T7113] team0: Port device team_slave_0 removed [ 219.344310][ T7113] team0: Port device team_slave_1 removed [ 219.438899][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.447182][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.476636][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.499950][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.640736][ T7113] team0: Port device bond1 removed [ 219.842386][ T7111] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 220.330107][ T7111] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 222.651933][ T7135] loop1: detected capacity change from 0 to 512 [ 222.670494][ T7135] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 222.687117][ T7135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.211268][ T7135] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.336: bad orphan inode 131083 [ 223.227342][ T7135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.417776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 225.419116][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.695683][ T7152] mmap: syz.0.340 (7152) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.247079][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 227.247147][ T28] audit: type=1326 audit(1776140774.138:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 227.881317][ T28] audit: type=1326 audit(1776140774.138:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 227.968944][ T28] audit: type=1326 audit(1776140774.168:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 228.180303][ T28] audit: type=1326 audit(1776140774.168:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 228.203055][ T28] audit: type=1326 audit(1776140774.168:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 228.314753][ T28] audit: type=1326 audit(1776140774.168:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 228.337093][ T28] audit: type=1326 audit(1776140774.168:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 228.434223][ T28] audit: type=1326 audit(1776140774.168:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 229.040359][ T28] audit: type=1326 audit(1776140774.348:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 229.128191][ T28] audit: type=1326 audit(1776140774.348:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661ed9c819 code=0x7ffc0000 [ 229.234814][ T7185] netlink: 'syz.1.347': attribute type 13 has an invalid length. [ 231.830170][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 232.590957][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 233.358743][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 233.358761][ T28] audit: type=1326 audit(1776140780.128:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 233.487699][ T28] audit: type=1326 audit(1776140780.128:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 233.587788][ T28] audit: type=1326 audit(1776140780.128:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 233.687756][ T28] audit: type=1326 audit(1776140780.128:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 233.873727][ T28] audit: type=1326 audit(1776140780.128:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 233.907029][ T28] audit: type=1326 audit(1776140780.128:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 234.637905][ T28] audit: type=1326 audit(1776140780.128:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 235.609723][ T28] audit: type=1326 audit(1776140780.128:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 235.676881][ T28] audit: type=1326 audit(1776140780.138:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7e3fb9c819 code=0x7ffc0000 [ 236.091528][ C1] ------------[ cut here ]------------ [ 236.097282][ C1] WARNING: CPU: 1 PID: 7243 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 236.107788][ C1] Modules linked in: [ 236.111702][ C1] CPU: 1 PID: 7243 Comm: syz.3.364 Not tainted syzkaller #0 [ 236.119051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.129386][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 236.135736][ C1] Code: 24 4c 89 e7 e8 8e 80 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 be 82 f7 0f 0b e9 f6 f7 ff ff e8 6d be 82 f7 <0f> 0b e9 48 fb ff ff e8 61 be 82 f7 48 c7 c7 00 85 64 8e 4c 89 e6 [ 236.155462][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 236.161555][ C1] RAX: ffffffff8a046393 RBX: ffffffff8a045196 RCX: ffff888027f21e00 [ 236.169550][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.177537][ C1] RBP: 0000000000000000 R08: ffff888027f21e00 R09: 0000000000000003 [ 236.185564][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ea4a3c0 [ 236.193673][ C1] R13: dffffc0000000000 R14: ffff88805ea4a8b0 R15: ffff88805f16a424 [ 236.201709][ C1] FS: 00007f1c71b286c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 236.210689][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.217275][ C1] CR2: 00007f3658f4da08 CR3: 0000000021260000 CR4: 00000000003506e0 [ 236.225272][ C1] Call Trace: [ 236.228579][ C1] [ 236.231433][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 236.236995][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 236.242538][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 236.249353][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 236.254995][ C1] __iterate_interfaces+0x243/0x500 [ 236.260234][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 236.266482][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 236.273728][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 236.280028][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 236.287084][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 236.292336][ C1] __hrtimer_run_queues+0x520/0xc40 [ 236.297610][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 236.303647][ C1] ? hw_scan_work+0xf60/0xf60 [ 236.308374][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 236.313488][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 236.319601][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 236.324793][ C1] handle_softirqs+0x280/0x820 [ 236.329584][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 236.334354][ C1] ? do_softirq+0x1a0/0x1a0 [ 236.338905][ C1] __irq_exit_rcu+0xd3/0x190 [ 236.343502][ C1] ? irq_exit_rcu+0x20/0x20 [ 236.348030][ C1] irq_exit_rcu+0x9/0x20 [ 236.352300][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 236.357956][ C1] [ 236.360911][ C1] [ 236.363858][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.369966][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 236.376160][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c f5 03 0d 48 89 de 5b e9 e3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 236.395813][ C1] RSP: 0018:ffffc9000baffa78 EFLAGS: 00000246 [ 236.401921][ C1] RAX: ffffffff8870de61 RBX: 0000000000000000 RCX: 0000000000080000 [ 236.409925][ C1] RDX: ffffc9000baffd28 RSI: 000000000007ffff RDI: 0000000000080000 [ 236.417921][ C1] RBP: ffffc9000baffc70 R08: ffffc9000baffb17 R09: 1ffff9200175ff62 [ 236.425986][ C1] R10: dffffc0000000000 R11: fffff5200175ff63 R12: ffffc9000baffd20 [ 236.433981][ C1] R13: dffffc0000000000 R14: 1ffff9200175ffa5 R15: 1ffff9200175ff58 [ 236.441993][ C1] ? ___sys_recvmsg+0x411/0x590 [ 236.446858][ C1] ___sys_recvmsg+0x411/0x590 [ 236.451705][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 236.456519][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 236.461590][ C1] ? __might_fault+0xc6/0x120 [ 236.466279][ C1] ? __might_fault+0xaa/0x120 [ 236.470992][ C1] do_recvmmsg+0x39a/0x870 [ 236.475438][ C1] ? __sys_recvmmsg+0x290/0x290 [ 236.480360][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 236.486295][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 236.491991][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 236.497023][ C1] ? do_recvmmsg+0x870/0x870 [ 236.501636][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 236.506838][ C1] do_syscall_64+0x55/0xa0 [ 236.511272][ C1] ? clear_bhb_loop+0x40/0x90 [ 236.515948][ C1] ? clear_bhb_loop+0x40/0x90 [ 236.520644][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.526542][ C1] RIP: 0033:0x7f1c70b9c819 [ 236.530986][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.550628][ C1] RSP: 002b:00007f1c71b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 236.559072][ C1] RAX: ffffffffffffffda RBX: 00007f1c70e16090 RCX: 00007f1c70b9c819 [ 236.567055][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 236.575138][ C1] RBP: 00007f1c70c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 236.583124][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 236.591120][ C1] R13: 00007f1c70e16128 R14: 00007f1c70e16090 R15: 00007ffd574b1378 [ 236.599120][ C1] [ 236.602139][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.609414][ C1] CPU: 1 PID: 7243 Comm: syz.3.364 Not tainted syzkaller #0 [ 236.616775][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.626912][ C1] Call Trace: [ 236.630190][ C1] [ 236.633032][ C1] dump_stack_lvl+0x18c/0x250 [ 236.637746][ C1] ? show_regs_print_info+0x20/0x20 [ 236.642969][ C1] ? load_image+0x420/0x420 [ 236.647517][ C1] panic+0x2dc/0x730 [ 236.651418][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 236.655929][ C1] __warn+0x2e0/0x470 [ 236.659904][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 236.665622][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 236.671347][ C1] report_bug+0x2be/0x4f0 [ 236.675757][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 236.681658][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 236.687377][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 236.693093][ C1] handle_bug+0xcf/0x120 [ 236.697345][ C1] exc_invalid_op+0x1a/0x50 [ 236.701843][ C1] asm_exc_invalid_op+0x1a/0x20 [ 236.706713][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 236.713044][ C1] Code: 24 4c 89 e7 e8 8e 80 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 be 82 f7 0f 0b e9 f6 f7 ff ff e8 6d be 82 f7 <0f> 0b e9 48 fb ff ff e8 61 be 82 f7 48 c7 c7 00 85 64 8e 4c 89 e6 [ 236.732645][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 236.738719][ C1] RAX: ffffffff8a046393 RBX: ffffffff8a045196 RCX: ffff888027f21e00 [ 236.746705][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.754670][ C1] RBP: 0000000000000000 R08: ffff888027f21e00 R09: 0000000000000003 [ 236.762638][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ea4a3c0 [ 236.770616][ C1] R13: dffffc0000000000 R14: ffff88805ea4a8b0 R15: ffff88805f16a424 [ 236.778584][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 236.784127][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 236.789853][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 236.795580][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 236.801141][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 236.806633][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 236.813502][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 236.819079][ C1] __iterate_interfaces+0x243/0x500 [ 236.824287][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 236.830531][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 236.837731][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 236.844009][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 236.851049][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 236.856245][ C1] __hrtimer_run_queues+0x520/0xc40 [ 236.861453][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 236.867529][ C1] ? hw_scan_work+0xf60/0xf60 [ 236.872226][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 236.877347][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 236.883417][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 236.888534][ C1] handle_softirqs+0x280/0x820 [ 236.893299][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 236.898082][ C1] ? do_softirq+0x1a0/0x1a0 [ 236.902597][ C1] __irq_exit_rcu+0xd3/0x190 [ 236.907180][ C1] ? irq_exit_rcu+0x20/0x20 [ 236.911703][ C1] irq_exit_rcu+0x9/0x20 [ 236.915956][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 236.921604][ C1] [ 236.924531][ C1] [ 236.927457][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.933451][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 236.939518][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c f5 03 0d 48 89 de 5b e9 e3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 236.959130][ C1] RSP: 0018:ffffc9000baffa78 EFLAGS: 00000246 [ 236.965195][ C1] RAX: ffffffff8870de61 RBX: 0000000000000000 RCX: 0000000000080000 [ 236.973169][ C1] RDX: ffffc9000baffd28 RSI: 000000000007ffff RDI: 0000000000080000 [ 236.981253][ C1] RBP: ffffc9000baffc70 R08: ffffc9000baffb17 R09: 1ffff9200175ff62 [ 236.989236][ C1] R10: dffffc0000000000 R11: fffff5200175ff63 R12: ffffc9000baffd20 [ 236.997222][ C1] R13: dffffc0000000000 R14: 1ffff9200175ffa5 R15: 1ffff9200175ff58 [ 237.005199][ C1] ? ___sys_recvmsg+0x411/0x590 [ 237.010069][ C1] ___sys_recvmsg+0x411/0x590 [ 237.014753][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 237.019542][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 237.024574][ C1] ? __might_fault+0xc6/0x120 [ 237.029248][ C1] ? __might_fault+0xaa/0x120 [ 237.033920][ C1] do_recvmmsg+0x39a/0x870 [ 237.038376][ C1] ? __sys_recvmmsg+0x290/0x290 [ 237.043248][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 237.049160][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 237.054808][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 237.059925][ C1] ? do_recvmmsg+0x870/0x870 [ 237.064536][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 237.069751][ C1] do_syscall_64+0x55/0xa0 [ 237.074214][ C1] ? clear_bhb_loop+0x40/0x90 [ 237.078902][ C1] ? clear_bhb_loop+0x40/0x90 [ 237.083596][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.089562][ C1] RIP: 0033:0x7f1c70b9c819 [ 237.093986][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.114118][ C1] RSP: 002b:00007f1c71b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 237.122537][ C1] RAX: ffffffffffffffda RBX: 00007f1c70e16090 RCX: 00007f1c70b9c819 [ 237.130507][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 237.138477][ C1] RBP: 00007f1c70c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 237.146443][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 237.154424][ C1] R13: 00007f1c70e16128 R14: 00007f1c70e16090 R15: 00007ffd574b1378 [ 237.162418][ C1] [ 237.165660][ C1] Kernel Offset: disabled [ 237.170055][ C1] Rebooting in 86400 seconds..