last executing test programs: 57.693383109s ago: executing program 0 (id=1): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x3c}}, 0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x11c) r4 = socket$isdn(0x22, 0x3, 0x1) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000040)={0x4004, 0x6, 0x1, 0xfff}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r5]) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2b00, 0x0) ppoll(&(0x7f0000000600)=[{r6, 0x1400}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x5, 0x7}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x2, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 55.853597561s ago: executing program 0 (id=6): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {0xffff}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x14008848) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x3, 0x7}, {0xffe0}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x240400c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r10}) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r11) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {@resuid}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000280)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) bind$inet(r11, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0xff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 53.148025754s ago: executing program 0 (id=11): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x80, r2, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}]}, 0x80}}, 0x0) 52.245755376s ago: executing program 0 (id=13): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='exofs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x28, 0x9, 0x8, 0xfffff034}, {0x50, 0x0, 0x40, 0xfffffa4b}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000070000000000021"], 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x58, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x2000, 0x0, 0x7, {[@mss={0x1e, 0x4, 0x2}, @md5sig={0x13, 0x12, "a1cbd12aa50e39de3b5624a87fb75f32"}, @md5sig={0x13, 0x12, "7a045b9c55c800000000004000"}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @generic={0x13, 0x7, "544c16f2fb"}]}}}}}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) 48.462482197s ago: executing program 32 (id=13): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='exofs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x28, 0x9, 0x8, 0xfffff034}, {0x50, 0x0, 0x40, 0xfffffa4b}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000070000000000021"], 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x58, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x2000, 0x0, 0x7, {[@mss={0x1e, 0x4, 0x2}, @md5sig={0x13, 0x12, "a1cbd12aa50e39de3b5624a87fb75f32"}, @md5sig={0x13, 0x12, "7a045b9c55c800000000004000"}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @generic={0x13, 0x7, "544c16f2fb"}]}}}}}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) 11.339326078s ago: executing program 1 (id=106): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 10.409199038s ago: executing program 1 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b40), 0x840, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000b80)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000500)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0xc}], 0x10}, 0x0) r3 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2de}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x12c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc0, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x12c}}, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0xfffffffffffffee7) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d15, &(0x7f0000000140)=0x51) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x402000) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r8, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) 10.239809411s ago: executing program 2 (id=110): add_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$binder_debug(0xffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 8.886903894s ago: executing program 1 (id=113): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001000130700000000000000000a010102000000000000000000000000fe8000000000000000000000000000bb0008fffffffe00000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x40) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfff6, 0xc, 0x7, 0x5, r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000017c0)=ANY=[@ANYBLOB='mpol=prefer']) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r4, &(0x7f00000003c0)="a16452da91356a8e09b8f2d04ad833a1bfcc23f6abedd39a869f72caafa8aacdb4858b9a05549e467e06de6ae7bd72d0e02997a74b28ca9397d176dbf0f613d6a2668fc1f97b0b9243797576743fb14d3d0caf8e7a333cfe087c72e018aef48a2c01cea30c2f2aa6dec9d6db5dc34335ecc889b85c1cf87741d5", 0x7a, 0x800, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) syz_open_pts(0xffffffffffffffff, 0x40) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = syz_io_uring_setup(0x15d0, &(0x7f0000000900)={0x0, 0x1b5, 0x800, 0x2, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)) r7 = syz_open_dev$vim2m(&(0x7f0000000480), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x4, 0x0, 0x3, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47f4, 0x0, 0x0, 0x0, 0x0) 8.646801939s ago: executing program 5 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8.337607915s ago: executing program 2 (id=116): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x7}, {0x6, 0x8, 0x2, 0x7ffffdbd}]}) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x20000015}) recvmmsg$unix(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x43, 0x0) syz_mount_image$squashfs(&(0x7f0000001ac0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1cc, &(0x7f00000001c0)="$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") shutdown(r0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8000000090601020000000000000000030000005800078008000940000000d108000b400000000c08000a40000000050c00148008000140000000b026060004404e2200000500150033000000140017006d6163766c616e3100000000000000000500010007000000180007800c00018008000140ac14140c08000b400000000505000100070000000c00078006001d408001000004ff01000700"/168], 0xa8}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8.309309839s ago: executing program 3 (id=117): readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="c3f81421f86532a6c239250356b757df2ef4f55fcce2b1185408c1a865e41d2d2effa877056f2487a875744e5042d817688cb155b5422267202c5712ce62bcba161e8d3c8e782010c14cd8", @ANYRESDEC=0x0, @ANYRES32, @ANYRES64, @ANYBLOB="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"/497, @ANYRESHEX=0x0, @ANYRESDEC], 0xfd, 0x1e6, &(0x7f0000000880)="$eJzsVc2KE0EQ/rrT2Rl/kD17Nbh70WRnQXwD9wF8AEN2XBdn/dkZ0A0BRw/m4kF8iYBP4UHUuwcRwUtyUNBDPAYkUt01kx5syRg8ROgPkvrqt2umprtvpffTAMDP6aCHTWgInMUnIaAAbAljm20Y+YPlnPFFGX2H7S9ZTlimJ/33z4hI9G93kyQ+Tk+WECGAZTEVUiuoPnn3pGoR+FeVVySQgNOVNcxL/t31vGIJXDGc6668BoT6c7jkSgW/1gnmT73WuJv4kys0W8gxFONyzstBACJNTlna/McX9Zt3k7X9Emwi/yorBc80vfZY4rtWPkwHPSI3+BQj2775FVtCx5Dy2oo5r4AcEA3MyzrKjBpbANrZ0b22Qv/S4VH3ID6I70TR7pXO2zM88rjTvnmYxI/OWUtIIgolaJ+estqk4X9e+HNYEFZrhNOAsHPp/C0O5+0LdhadxYtcu4aJeFXWCNhGr+I6LoK+3wc5uSO2tnS1p6F+wD0INKBAz7mjKivOMEGoHZd7d5P9IQQER3ZGUJB4UzTQhGRPNLaU3avl4w9Ztlju6f8QI9bHLIu7q7iTlK7wjbXtHNjAw26WHevLy7DSFpW2aLNcWfKqxW1YnBitAB4eHh4eHh4e/wl+BQAA//8OMkKH") openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x10800, 0x22) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x18, 0x1, 0x2, {r1}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x4c050}}], 0x1, 0x24045801) get_mempolicy(0x0, 0x0, 0xd0c, &(0x7f0000ffd000/0x2000)=nil, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001500)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r5, 0x301, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRESDEC=r5], 0x64}}, 0x24002800) 8.060710799s ago: executing program 5 (id=118): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) 7.746705252s ago: executing program 4 (id=119): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0xe, 0x8, 0x0, 0xffff821a, 0xfef, 0x6, "993397e5351f69df5cfe273293b33a39", 0x4, 0xfb, 0x81, 0x3, 0x43, 0xc8, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.600075823s ago: executing program 1 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) 6.599426487s ago: executing program 3 (id=121): add_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.599170864s ago: executing program 4 (id=122): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4}, 0x3422a61a}], 0x1, 0x10102, 0x0) 6.324158335s ago: executing program 2 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b40), 0x840, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000b80)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000500)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0xc}], 0x10}, 0x0) r3 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2de}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x12c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc0, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x12c}}, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0xfffffffffffffee7) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d15, &(0x7f0000000140)=0x51) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x402000) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r8, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) 6.019289335s ago: executing program 5 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(0x0, 0x6, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.961808848s ago: executing program 4 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) (fail_nth: 2) 4.993487235s ago: executing program 1 (id=126): r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000180)=0x80000028, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) r5 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r5, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x0, 0x1}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xffffffff}, {}, {}, @control={0x6, 0x3, 0x8}}, {0x0, 0x0, 0x6, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) read(r5, &(0x7f0000000000)=""/153, 0x99) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000000080)={[{@discard}, {@discard}, {@discard}, {@snapshot={'cp', 0x3d, 0x2}}, {@nobarrier}, {@norecovery}, {@errors_continue}, {@order_relaxed}]}, 0x1, 0xa0d, &(0x7f0000002080)="$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") r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_BALANCE(r7, 0x8004b708, 0x0) write$sndseq(r5, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) syz_emit_ethernet(0xfc0, &(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) 4.775271742s ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) 4.727060823s ago: executing program 3 (id=128): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x25, &(0x7f0000000040)=0xa5c, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={&(0x7f0000000180)=""/210, 0xd2, 0x0, &(0x7f0000000280)=""/1, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000019080000000000006b110c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x700, 0x8000, 0x2, 0x725, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2}}}}) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2000000000000098, &(0x7f0000000540)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @ringbuf_query, @exit, @tail_call]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xd, 0xfffffffffffffffe, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r6], 0x40c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000c4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000340)) r12 = dup(r11) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000000)={0x1, r12}) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f00000003c0)={0x1, r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x26, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2e3, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @alu={0x4, 0x0, 0xd, 0xa, 0xe, 0xffffffffffffffff, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x200, 0x11, &(0x7f0000000540)=""/17, 0x0, 0x0, '\x00', r4, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r7, 0x3, &(0x7f00000006c0)=[r5, r5], &(0x7f0000000700)=[{0x5, 0x2, 0x4, 0x5}, {0x0, 0x3, 0x4, 0xc}, {0x2, 0x5, 0x6, 0x9}], 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xf, 0x3, 0x2) r13 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r13, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x1) 4.494277274s ago: executing program 4 (id=129): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xffff, @loopback}, 0xe) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01762dbd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000050074000300000008001400", @ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 4.285757155s ago: executing program 5 (id=130): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001000130700000000000000000a010102000000000000000000000000fe8000000000000000000000000000bb0008fffffffe00000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x40) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfff6, 0xc, 0x7, 0x5, r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000017c0)=ANY=[@ANYBLOB='mpol=prefer']) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r4, &(0x7f00000003c0)="a16452da91356a8e09b8f2d04ad833a1bfcc23f6abedd39a869f72caafa8aacdb4858b9a05549e467e06de6ae7bd72d0e02997a74b28ca9397d176dbf0f613d6a2668fc1f97b0b9243797576743fb14d3d0caf8e7a333cfe087c72e018aef48a2c01cea30c2f2aa6dec9d6db5dc34335ecc889b85c1cf87741d5", 0x7a, 0x800, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) syz_open_pts(0xffffffffffffffff, 0x40) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = syz_io_uring_setup(0x15d0, &(0x7f0000000900)={0x0, 0x1b5, 0x800, 0x2, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)) r7 = syz_open_dev$vim2m(&(0x7f0000000480), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x4, 0x0, 0x3, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47f4, 0x0, 0x0, 0x0, 0x0) 3.320993756s ago: executing program 3 (id=131): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000019080000000000006b110c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 3.320697601s ago: executing program 4 (id=132): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000019080000000000006b110c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (fail_nth: 1) 3.064068481s ago: executing program 2 (id=133): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x11}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040010}, 0x4010) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="065bb77aaf49983c0178dc715cd9b6d1dc07ac114dc94b3f4d34f108a2f78034f6332a5d5cc236a7b71e1f96613f38fe21cac0526da1e677d6d40f4a69327bc98f99cc58552fd48e0549264c4ea4b390527467245cba87bcb5ba909d7f7033e1443cd2404138b11901c88c6e52b523b674add8386e20438696dd87a9808b98576d57172a1c3228f94327157a3cbfba3818d3", 0x92}, {&(0x7f0000000240)="c21b715a6ce7163877a345845ba01d721d467bba1c32033166dd8fe2ee83c4567f773e9d35a16021c29c1c14beccd89396571e5ad692954f5ec7edd439c11526b1d4712f48024d598e905c64c042f679d07b826e937fa77fd7bab891aef04d82fc7c076a43e91aa4b8ac55af41dea907f2942eafebbfeb884d3374e16a363b7b60ee4ad137987452f25734be8035be02e35815e1734794c03ea52e6b251c3a662245c25396fca7177c041dee698e46d07e91b9bc8d722e70850950fd4afaf0b1d7927aced49185c0e95623dcc4b11133b3b53598b4198a9983a29169b8f501223ba1723e782240560d01804a891edced4d0046725ec9b1022c", 0xf9}, {&(0x7f0000000340)="bc59ba744bc705985abad45d8588948f594724dfa3f1e65a1f966e19daa5d2a58cfd1bf960b2b01b5c71bd5d3ded2de878165361081d16dec7a83e5549ac7a11599efc8e460495f2a8e952669132ddaf64cbee9f694d4c51218dd8031325a8aade631ed16a1e41ed0c9a9479287d7536f23dd805e51fdd53ba5cf9349cb6bc4797a4b9f79658773ec0a38f45f93afb13fc0ee928dcd17e1b8d7b405eabb6da4af0e5e9c045da943a6fd421daa3133dddb790958575a585e65e6207", 0xbb}], 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can={0x1d, r2}, @in={0x2, 0x4e20, @loopback}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000480)='xfrm0\x00', 0x7, 0xc, 0x200}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x1002411, &(0x7f0000002780)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x800}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@allow_other}, {@allow_other}], [{@dont_measure}, {@appraise}, {@euid_lt={'euid<', r5}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '}-(/,'}}, {@fowner_eq={'fowner', 0x3d, r7}}]}}) execve(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002a40)={[&(0x7f0000002900)='max_read', &(0x7f0000002940)='xfrm0\x00', &(0x7f0000002980)='{%\x00', &(0x7f00000029c0)='fuse\x00', &(0x7f0000002a00)='user_id']}, &(0x7f0000002ac0)={[&(0x7f0000002a80)='&&-$&.\\\\{,{*&++\x00']}) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002b40)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000002c40)=0xe4) lchown(&(0x7f0000002b00)='./file0\x00', r9, r4) ioprio_set$uid(0x0, r5, 0x6000) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r10 = syz_open_procfs(r6, &(0x7f0000002c80)='clear_refs\x00') prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002cc0)={'gretap0\x00', 0x100}) r11 = openat$zero(0xffffff9c, &(0x7f0000002d00), 0x20080, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d80), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x68, r12, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xfffffff8, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x480c0}, 0xc044) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002f80)={'syztnl0\x00', &(0x7f0000002ec0)={'sit0\x00', r8, 0x8000, 0x10, 0x3, 0xf, {{0x23, 0x4, 0x3, 0x9, 0x8c, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@rr={0x7, 0xf, 0x9c, [@rand_addr=0x64010101, @rand_addr=0x64010102, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x9c, [@dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @local, @multicast2]}, @ssrr={0x89, 0xb, 0xcd, [@local, @rand_addr=0x64010100]}, @noop, @noop, @timestamp_prespec={0x44, 0x44, 0x5e, 0x3, 0x6, [{@local, 0xd}, {@multicast2, 0xb4a7}, {@private=0xa010100, 0x8}, {@remote, 0x3}, {@local, 0x1}, {@broadcast, 0x3}, {@broadcast, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x7}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003380)={r10, 0xe0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000003100)=[0x0], &(0x7f0000003140)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000003180)=[{}], 0x8, 0x10, &(0x7f00000031c0), &(0x7f0000003200), 0x8, 0x52, 0x8, 0x8, &(0x7f0000003240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003440)={0x17, 0x2, &(0x7f0000002fc0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000003000)='syzkaller\x00', 0xb8, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000003040)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003080)={0x3, 0x5, 0x3}, 0x10, r13, r10, 0x1, &(0x7f00000033c0)=[r3, r3, r11, r3, r10], &(0x7f0000003400)=[{0x3, 0x4, 0xe, 0x2}], 0x10, 0x1ff, @void, @value}, 0x94) 2.804302899s ago: executing program 1 (id=134): r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r1, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000002c0)=""/245) socket$kcm(0x29, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) 2.166339387s ago: executing program 5 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) (fail_nth: 2) 2.113841239s ago: executing program 3 (id=136): r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x8c00) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-x86\x00'}, 0x58) r1 = accept4$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x0) (async) write$tun(r0, &(0x7f0000000140)={@void, @val={0x0, 0x80, 0x8, 0xf2d, 0x8, 0x5}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x2}}, {@arp={0x806, @generic={0x1b, 0x890d, 0x6, 0x2, 0x8, @multicast, "143f", @random="e012b28b0eb1", "d7e7d55ba8f4f51ca33858"}}}}}, 0x41) (async) r2 = getpid() wait4(r2, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000400)=""/226, 0xe2}], 0x3, &(0x7f0000000540)=""/248, 0xf8}, 0xfffff618}], 0x1, 0x2020, &(0x7f0000000680)={0x77359400}) (async) read$msr(r0, &(0x7f00000006c0)=""/57, 0x39) (async) socket$unix(0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x1359, &(0x7f0000000700)={0x0, 0x4586, 0x2000, 0x2, 0x2fb, 0x0, r0}, &(0x7f0000000780), &(0x7f00000007c0)) (async) r6 = openat$bsg(0xffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000880)={{0x8, 0x6, 0x3, 0x4, 'syz1\x00', 0x8}, 0x2, 0x2, 0x7, r2, 0x7, 0x7ff, 'syz1\x00', &(0x7f0000000840)=[']@-9(^@[@,\x00', '^\x00', '\xbb\xbb\xbb\xbb\xbb\xbb', '/dev/bsg\x00', '\'(\x00', '[%\x00', '\xbb\xbb\xbb\xbb\xbb\xbb'], 0x28}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000009c0)={@hyper}) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x1405, 0x800, 0x70bd27, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x4ecc}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b40)={0x0, 0x2596}, &(0x7f0000000b80)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000bc0)={r7, 0x480}, 0x8) (async) r8 = geteuid() (async) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r0, &(0x7f0000000d40)='./file0\x00', 0x800, 0x80, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x22010, &(0x7f0000000e80)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x768}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@uid_gt={'uid>', r11}}, {@appraise}]}}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001040)=0x0) (async) fcntl$getownex(r6, 0x10, &(0x7f0000001080)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000002c00)={0x0, 0x1, 0xffffffffffffffff}) (async) r17 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002c40)=0xffffffffffffffff, 0x4) (async) r18 = syz_open_dev$dri(&(0x7f0000002c80), 0x6, 0x40000) (async) r19 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r0, &(0x7f0000002f80)={&(0x7f0000001000)=@kern={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000002bc0)=[{&(0x7f00000010c0)={0x290, 0x34, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x12e, 0xbd, 0x0, 0x1, [@nested={0x4, 0x12}, @typed={0x8, 0xdc, 0x0, 0x0, @pid=r2}, @generic="65ef5efcaf9fcecf273142b95903ef0aa02bc26d5483ef172a0cbceff910b4953fcde41d9e99149edb7af00e291efba7d6361c9448c3bb448da29c38eed6abb5a146067643b72c5752903ab77c1ea9059d953ee7e97470ad49ba407a0b7bae96df12b82b898868fcac8b8b5d05ce698269918a1cc7", @typed={0x8, 0x55, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xaa, 0x0, 0x0, @pid=r14}, @typed={0x8, 0xe1, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xe1}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r15}, @generic="b8b2b5b2412d47eaad2b37b3373f161b440e5607645bcb121dd51a05202226d918b952dc97f80698f7ab50b6b9ea506b6daa8abeef6be5c13b6d25acf2e095c79dcb34a6d45c1625b08086111cc877f67931d55805d7458d2586461fc0cc9278ba105714b59f4cdd14885efc99049420b45f6cc06941a70f2ef74795464354861d6f835844"]}, @typed={0x4, 0xaa}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0xcf0a}, @generic="3c21b996e7ee7ca5254f23d4983e41419dcbad88717cf78a1fa6ef7ba6d00f444f76768e0f58ff5dd252173ba758f86f1cf0fec8810cbd33d2b93c1cfa9dff9120e066f672ba26550276702692d3e3763c4b9cdbf488d28e64f6d96873a9285c8d4640e86bcdfeeb250ab266583e7a7ddeb369aae1befc6a6fc6b3e8abc4cd62481bfafbd2d2a0940374ed01c6c457728b69f40e8db2ceec3ce0d4f8256fb8e31d10", @generic="8f87a02c22d8a5b344fd04103f23544b81102232b34e2daa6fde353281d7b6c0f7e385c67e1fcde161eba4a4bfe321b4efaf816bb4cc1ef05749dc83226b3b0e1c6de2a3ae616259bccc001f12a4511527cf07880dd1b5b99d39c3155d5c5a9277146ed1f1f490fe157dc740d160a0805c5e29efe08f9edf13ecd721af84d811fae4f436ab324c80753a92ade0019255a1f701b675515377d877458777d2a997"]}, 0x290}, {&(0x7f0000001380)={0x18c, 0x18, 0x108, 0x70bd27, 0x25dfdbff, "", [@nested={0x17a, 0xff, 0x0, 0x1, [@generic="cba97484ea44412edb99bd78a03443e9693d2954eccb85b1c5f29300ad410c20da7f87523e0f8e38da2f7f567ab2b11b895aa0f7c3a8bd38d068d6c2e29ae1bdcf8bd94e1059ea83141f554e7a5bb0dddb354f896832ca92040f4a3b2a9357f0e91ebd2970849b4c3c0f126a6de0a35b9443a721f2cbe237dfa420ed9fe1e2798408532fe874768444f7994479aa1afe1595ae9318d57a69cb3bcf6eb36e4817604ce579528d981a11e7", @generic="61ea9d06391ed7d7332657415e3f1f073155c219658bdbd01ed8be161a6bad65a7189c6237334117e1854b8f9b6bc69390af54a2a79487f57212bbb0c305adf815ff77b0180fe228745124087d2712e48df52f02e601e24da90ab1fce166da7b0d51157d1dc1af2b433db04bcb9785faacf277bb227a454e89cb17d2a5598a736768622351efade412f3057526cc5a4a028540807f33086b6cd01ac617a9be2daf98cde3d93d40a74ed36862c788ff3039581b4ca2e937352dff2cda1f09450dfc34ecf45e0bbef035dc0ed7"]}]}, 0x18c}, {&(0x7f0000001540)={0x13b0, 0x31, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1113, 0xf6, 0x0, 0x1, [@typed={0x6, 0xa2, 0x0, 0x0, @str='fd'}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="da63c9", @generic="9f3866c8c6ee358cebd9dd28bebcc28c7620257009e8fab41a4860ecf7c5580ba51e2593", @typed={0xaa, 0xac, 0x0, 0x0, @binary="2d5473286791a8aec23b602845b8020024df72ea66ae184e62c3e39c5fdde3f9301d0453cbf36f142703bb8337c29e401dcfede032c021189567fd6d63e9b7800d45f2324e31e025bdc67da57fff99dd57efe5c452e7260c03d8193b0b11835e0fe55a6377575d2884e87caf021f4028347322c15975f6d503badec51f6d20b6871a1c0e6b7bb049ce7f6db73d56fc7dd3a93a39ea386cdc48049a542e2bb2b2a16fed380f7f"}, @nested={0x4, 0xc8}, @typed={0x1004, 0xf6, 0x0, 0x0, @binary="e6873d19869c3beb9b08dc37f500b54bd13a38f78917a5afb0dcf708ab675da7fb51695c109d2341baf8ae62ab1130d0776c3867dc8b8cb5d30321be751ee584305bab34a122056a0b0deeb11d2400c1f0b3f00717f27a61856880e1e893a28784d709327aa28c4ff189e96c3b81fab6ca8b48a048ba678aff3486f5ac4f4a1fa38932d1cc239088c647168aa723ad306896af950cbca34b5e13089a0eeb8623a7127e6b4d1ee8aa54c973b60d8a161c71ecff6b61fad7813807896bc198c87b99a53ad426eadde4d3bb445ecfd2b06b78f7931eef7d405f5b29955cc284e2dd09b0468058e9bbb81d40d849181e606bd8e9e0623a3dd1124dbf9c3f2636124d22eb03cda15c24375bb887780d35f3d7c82c95394e73909af75af9111404d75b4ff23257a619af1ac75022598b71bc4d7802df99c59443ca22b3dadbd525a7b4eb64fc332119bc5598af41a87125ba3198b68a57866effe4d6be67a22a5ae3d18c0698ad1883fb3567c231af5fec6e0550ff052dd1b3085415dfbf7557145f2275874dd51769e0d793e72f3b0ff5b0371768e13d76ea482424ebcc2179811e2f540ec40409352434f40cd544fb37303e25a7375ddd378496c2a22c3799a9e9f4ff6b1c1d70b4c6cbf04c2e8d2645d08a19dac209c2071c9d05eb51ab5c3c359922f904d81022cb714081e75cd96804e276e70836661c3ca2de2a44b163542972ee37f9c6bc9eb42870764484bcd538328d4b1f76f063b59a2e30bc4257d25561f77fb4b0565cde0b4b4029787fcb412e58cdc5db92df03e787a49827f3dfa0e7002ba44f86fea3c2bf1306a88c5bbf938880ae3d0bb78b3da7e4bd4ac228e4a1b9d5d011f3c15a9bedb3f65da2e0a6b50cc5fd22c5be32ab115fcadc16bd946957b95c15caf5f4c34dc4426a8788e5d68fadee2a61a31eb4dbb4a5a45af57ae092c29d82607c555431129dea467a420fe24516dbf68396aa9d74edbed79dbeb5162fdab20069877620ac0f67b89460b37f480b65d7d73fc5ff7742dadc716473134bab8f2d538fe3e41b75f9ce096d9e30d18e1195b46d2985491bf547608cabf5f45256554fc6916c52e0513b79709b5eeea25bc1941fed30f9e2051c8450d1d7c8204561ce478856728f8b14073dcd598b9da42d96bc3a35e09cebfd62a84bdf9f4d1ec54e98212860edb145534b78d1e18dde8d5710f1825b532cde9fa9e27e8b4e4f9930efe6f62f5dca7fb6ffadce4e0e1e84835c51f5e7c50a627a3bf5a73e1ca43b74d9fafc34b8564ed30b0d6b375222a90ebf167628a0178f2f3cd13b8ce00f441ef8b7631d5d17c9152612961d1a23f160612b1299b5c7452a4bcf167bf32f5ff1b9fe6dcf244dab45a30eb51b5cac6509be9c55df22677c18b6d53bcc1d22ceb7afd3ad2eb352d08da87bdcf589227a7677b4cfb13def7aed39c2adf4d69746bae961355a8d162d779eb2532d52308edae6893399897afb246d70067a0b130f875f103a5e86084aed0f6aac9ad2e24d7e6b4c74a81eebc74aa160c65e64aec6f908fcbb1c3c765401441f33e8d5b43a01f0764b6c1150056fc53aafcba74a7c42808167c6e00f0216d1372d9d023eb34fcb1d16b371b49dd418f72d82fe657b638fa7921e6045d6a3a993c26d19af843f5c609f945bab36eeba0b381086d9204dd07f2a7cd02c724fc2c551e9caecc7cf5b9f9b2068203faeb7e0e7672e0de54cfb4fdf09f757a7ebdf5794149db8ed929dca5d38ab3b0a3faefac8113127a15acc0b61974aa9ef62ef468329f77fc5ed6b8b8853d20d474a6d3a3e7978e99ecfcaa9c76c9c8369bdfd1c07c4d0cd1bdd6487d6231965b4eb2db5e12ddf5299155007354300420e5cd8ecb812dfe3ea4f4c5e887c396379af6023b65729ff36dd615068eaa1edf534e8d131556ffa6333228d45d71283d6e0ac3a14853e2a0301925dc92cbe4cca760b2428522668de9c2fb17b49ccfd9453e8a8ff4de3630cfbd72190a53e86bcdba27182ca262cfc389dc5872f0a5ea77fef8833108bdefd1c6085c08c46a1ff82678cedc5ef1431313e53db7da9afcb1b314050a039631db6b652cef8ebe8d63f5b852ff685b291419ef036a41459d2e3e18796b1b8d92dc78d9afe158ef90e164c1a321b33db356071423302aed9d82c332bd363393b9dbda4cfa8e56a9c236e5c0457589c6a4900fadd437c33e2aeb48c1397fbf32fbfd4dbd156fa71c4ab57fae2d03ed9445b58b2a5e657aa7d5ac53113b9d634ae9a9a22fa8d3bcf09f0222a3d183f7aa375ae913002a6d91cdb2ef696c508ecb6b44c9558e8d3ed3ffb7593006767b6cd04ea8bc6f652a6b97137e6129e346536f03ead690f015217eaa3bd9442d13031e178484cc9ae9106d15d3b69d0e679ec25043559e2c4a65e5fec9e227108c5c6e0ee93acf1d2dd4b10c4bc175795106c56b2b2a61abb8dacc59c535ede53dfedb2e8d3cd0540ad89bcee3788072d5c011521e9310e97e9eafd7b77a3f5af613d188a282c2e59c0c5e8c921842ab9f4532806e09bbf042e21299bf184159d50000bf85d3ff01006aa4ada4e446c866681b6444fdae63ad4dbcd8e0c212835b3e1c25c9e380a02367c035a52c3f302667a9f2864133d300199df4a0bb43db155f99b0625ab4d604916545e5d68b6912919733f57589d9f2a42dad84afe5a96d5089319d46b7c0138a12b282a742d46b950e254f1c109f794b51649249f247e1750853d9c35e64965ccc64bc674ec6cd0660e43c9b0366b9c863bba2e6dbe3fe1dc2048927b30f4477d3f0c26b3a8b033c9c8734c5cd9b01ea7c21ce8e56a7dfdee0885632defe6b921ffae4552acc2b7ece88a09637344c769655f60b9532e5a5839b3e6716019f59169ed04aab4808e5e59790fe9b875fabf474f550f4a1acd2685675abb1969b3fa3d5bdc42254e006db6c14b2c38dcf8dceaa65f7d3af139f8c35435867ffa94a6bfae15a2d2e00ee1a84ff69d4d98fb4492507484de26dd9cdb106a9816eb0adac61275de1877ecf2b73fd6ce91b8fc6c85b163b5c053fb72196d1c9ad5d181d8f767ece2f94dc694dc6eeb2a66eec6e3f9250afbb3068b15a894fad719b474ef7a485dde76582cb2eba8372a70b55356eef188dfb3661046149f74cb570f8777b53250f476abf69529b5a17a4e1e3443f2d20c8e1a5e7d38b3543942ae7f6a8fdfa92e8719cfb4ed2cb6ee722f42fea3c5bd428823dcf4996431d6d312044b98c6a1c930a0cd1b7f5d6e0cc9350777547d080f75b379476e4dec2501bb95c10b840367ada45a8623d8370d7477a716799790b9bb95043cb355898e516de666b5cb212f67ab96f34f19ac85441d69e5922236520a52331e266bd07b25f70e5de40db4d59f3dd37a05a3bbac2a9c440d3476b7978a7b6877f8eb147fc6df97624746d3f5cf3b27d5b1b7694803d5a9ac4f6604881417ad2f88f17ba6f52c9c6aca3e4be8fdfd19812a3d0da837081b4d543986fd9b8fcc52c7b81053848ab9cca7b54b593f70dc7f83866cf8116b815262500031aa8a4cb389affd211d7c87c05f6b1d473ad4d4af5f8da4164339433580d9044952053020392ac9ebd5bc950ec4ef8c322ef4f44202dc2ee10c3eae8a8652f50f887081a93bc7efe93dbd7d84b761a4bbb826e64310e19948feb1d93d83276de9d12ba2498ea83b65fd5a30c81527dce2657e4df0253e5fed0195344fcb152bdb829605ef2c02001ee65d12fa4e7f27e1068be192779f7ab9349af2cea53463c31fb90af9ff6dfd76c593503f4a8f52f9bcd97cd62eb93741b8a3d8734ceea55130c1741f9906edefc7fe6a506bfd7ca65bf5258ed8d7e818f48e28e0fd1ab3cfc624dbb65c3ba8a5be2313f51466ae6515127cbf0a078fdfe43d8726515918001a926b4f99f1a307cde2ec5949c93de22bf851e190f79a28870b436bb9857519fa4160ea57f4877c2ff7ae33afc837e2bfab32e20be262f35c8a0febfdb5786be595043b57a151fa381cc6263fb9a2e985336617d3f1686a375bf2c0778a6e32d617a31ef6641bdcf77e1b691c2c56f503a1df8f754597ae953f59d48ed36964064272e655561432ff06e0cc166dde5c7c50b1844c9a0fc953edd56777578f9d9480d350e064c57b74ca5bfd53a99b11687a402dd1377a71ee6ca9c9d6da490d8fc015302bb74888ae9e098e3f6e1d0dfcc7b4c338468c310c30e4fc73a25086f98e134cf9a9530e1003eb0ceeb2f0520c9a9ee15918e7d2420330476bcbfe39e17e8a74ab1e8655be7b9fce6c244ee83c41681d070239a6dc778f3bc04d5252fad828d9d20b9e905523760da9046d731714c28b27659dbf854a45026c36c5d3728cfef99b1c35e77d1656b7a1480fb7dcc21588c1c39a6365ba6e28763fea4d74d2e7efc7d11286e6bf1b522c94d2a807aac603ab9b7b5e153ab39c432076a9fb34c119ba3f306c6a2b4d1dc31a059859fb8474c383382171ad90671f0b7c66ccfef9ed4c3b844c87d1718dc91b1348c37ac3e33279acc42c4e07df25c0926d3c0ac3ced60c9d77cc1e35bff0b3bdaf8bdcb13b6e8ba54a1ee2eed5a36a49a0a302b6e0c63964738f1e2a337b9a835712da218beb736287a902d1904152750f0c17939d4e568fad6692427bd7bec5ba125e54b82ee2603ff997efecbd12767eaab0610123f4f100a547c7fb393cf4ad47206700b1bb24931e7e0473285cd43497f2ca1fc6d00a5ce3984059681b9bdbe5ef4b08002afb1a24043ca810ba49294a4712ae7964ca67465213b8f2b3221646c5b377e761fa9a92292ad4d7a1aecde967941ef73318aa56c36e63647a0335542d16cdfb1d328cf77a174ad33b85eb2e5e36dc16147d713d38d3d020c2f5029a3316cddfb5a5bca77991e917374ee95f6699ba484d55a44248b8230b7cb5950e1c9a39146eba32b625f2c3935a17c4f1fdc3069183bea450feaf044282c7c6f05486027bd502b8606486a28a0b3818d8e52a01efb1efd75204002439dc63de8a4c4564d5c8c87d19105c195620cb557b288e8070776a0edd02252e5bdb1f72465e749947b026fe3189433b9d8ac2ee3c5b6c61a904c93496098bf32618afe1ce36d42437ada34d6014e0ac2567547c596f64f6278780ba95c4d3a8cd5fa2856bb26419b0b20aa7ded58ed30644051cef6e9f868286f14fbe0837d4d94415c5e1acf2bc8395f39df59bc6da992a4e75c25326b2e93104b0a24d32b893e3f361ae43e6f79fb078e22bab614a100b0f6ad48123dd9ff23b8c7bc3cbbe7ee9e05594266a4556c3ac6bdef6e4fb448125b1c9d035547844db255e0443b6dd99f370bf76728689caa43051e166ce10bfe994c4ea42d33eff218989d2f14fbe9d53fb929cc95c7b9b751b2659e426e5cc4aa0e84e1b1c717240959c4fd04ccc13cf57322c63fc0c15c288f1cbd8c999a57cc274fc3f3ad2ab23b51d5cbcbfd521e1d5c95de658d50c8c7236679acc469b28bcf862d4227bc65a0adfa28fb76aeb2266daae2892d887c67a5185b090ba43de4c35ccb4880ea2b3b0eea6d0c810faf14d3d566e5041a6190fcdc27c6030ae79adb8accbb88d8ef1d63636f52ff6340533650d5b27dde54b28b4def64372dc0c3da9c1f15f5c6a18be353f6453fd3221563087f80b3e998ccdb6a597a25f2cb6cabc294562796e6e032f4c59497647b77adee09d3172abd1d2a0754e17f2638521cef652889b063be26825b2869106c183c7dab82189e4bbc9031bbb09860c87b3622c5612aad03fb764de7defa29b6258bc"}, @nested={0x4, 0x5f}, @typed={0x14, 0x32, 0x0, 0x0, @str='/dev/input/mice\x00'}]}, @generic="63841aa3ff46ca0e39b9baf35fd509c4e4de77368cd4a9a97ab2083ec7a9eb4344741a3bbbe6d836409d8f692f980a4396a47d77b30b6cd9b524aba966fc3834a0e53931e16e52d2e92ea9a9b718540bdbb01958b6a278df8f48e38cd0036630db51eb17e21a964bb15ea3c90482af5d9fe1ec8887c3a2146178f00edaa2126711f693c3136a98034f10c4d00d7b9130e84ad6ed7a71e775f19876aee6c8f76c0c649ff527f273c4bc7acd04938762765b7420d22de2fae5c53464b5eef13813e9668dc96fc292a1719505ebb85713c470368ccfd9", @generic="611cd9cc72acd6563c1ead48dac171c74c2c29f2d70074655203fafe45f0fe9b549736c77cbcbe24fa0bf4ed6fe1da35f5305859cf3eba315eed560cf2bde41e0acc558450da717fe00b385b5d71a1f34a6201245a381c2bd9e0c3eb8888faa78d72caf2663b", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x11e, 0x13a, 0x0, 0x1, [@generic="8b8f028c24e17e1117b425fc3ea19c88aab7ae4bcac03abbf47bcf4d05b8b28c0dcb5cdd0a75d8f1669d19420681619745a496e945c617ff9d648b23648a518c6732204f22ab40b60d534eaa1f6122a94442677356e943429a94241e2778f82187282c706cae9e105316159fbe07226ef556144a5b51d11ea5f11c6df5b4f7a11dfef6f6f0a09226dc24723966aa301e451e2feb1b45596b6b0791500829422a0dc72349ac4537f2784916375483bc238d88", @nested={0x4, 0xed}, @nested={0x4, 0xc9}, @nested={0x4, 0xea}, @typed={0x5, 0x29, 0x0, 0x0, @str='\x00'}, @generic="e465c122946fd64f306cd168e368fee7e60566df542841708bad1c55b42620a6f30e0be00360413dbbc5caed63a6ea650c5108c0f648a489cea6b954a4c671619a8f0e3455f6b061a783465641f53c636621a01a"]}, @generic="bca50d41aba1cf1de5ab51317fd3ddf54eb8fa361f4b755bfd5b5a"]}, 0x13b0}, {&(0x7f0000002900)={0x288, 0x2d, 0x2, 0x70bd2d, 0x25dfdbff, "", [@generic="908b98dad9b8b4207f137dcf", @generic="6d4765e1b85cb57144c4bb712b7a8827d9ea691456965aae5742a7cc2ce7265727a9f86093fa0515c5a30f2ea04e86bf07b958c4a62b101c1ab721d87b7a892aad60942c9f6a07a25831bea8c3688e1d92ad8731e14c09e02c88aa396b596d51e6d0e48dc477bdc7582f75f8bd8ac84ab7c41d93b4c74ecbc0699fabe4baa60a0071d44298224ac1a34cad0df55e60256df9360f53ff21d9cf9643e7f6c4d78b3113f852a5152ac1f01b55c920aa7dc669", @generic="7f385b4f11b920335b771133ed288aaaa8675a6db8e6c7f825e4492b07a3ed47223663119d00438a38ac6f56d90f730e34c03568263754bee461108edeed30a9", @nested={0x102, 0x9e, 0x0, 0x1, [@generic="50a6fef728b11cdf3a16b8c4b813b93eedc86de5ca6ddbc13fc2d12cee927b9c346890f8bc6201b5bbd10187e9349f3e109b69438d85b1217d0de72b385b11bb345e170d6eda46ea183f89ad77edc6d6dafccb0686490d5fbb99fa4fbd9eb9592eafb989aca31ab2b3104acec9685674b2ab523ceb1f1480e709823c3d1c06360e82a93d67aaec1cd187e4f728fbfb7ea01163a27cb69909e67a5f57be884d81d620cf014925ccc98eab3c8fef7ef16f89c275fdaf9d", @generic="0df701de1e050f3fe8fd5ecf90afa52db7f4221f1a427d77134251cb1a341576c26c0ce89e19f2540b0b042f84", @nested={0x4, 0xb1}, @generic="980266eebccbfec61f7ff11ec233e4e10bd04dfbc95d5a"]}, @generic="fc6711d136389bdf23f97059e2d62399199e649d4ad10ff7bd074b3907d69a90c29fbcb3298b6565d7379d2e0143704cc9c3c03d401bfa54a9d2b7e436e0c8c5e9b0e74793fa0b9852067d701577432261adbfe2fe7ea47f556c7a3727e1321919cde042fdc90af6b816fa", @typed={0x4, 0x23}, @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x288}], 0x4, &(0x7f0000002e40)=[@rights={{0x24, 0x1, 0x1, [r6, r16, r3, r0, r6, r13]}}, @rights={{0x14, 0x1, 0x1, [r4, r1]}}, @rights={{0x14, 0x1, 0x1, [r13, r4]}}, @rights={{0xc}}, @cred={{0x18, 0x1, 0x2, {r2, r8}}}, @rights={{0x34, 0x1, 0x1, [r6, r17, 0xffffffffffffffff, r6, r13, r1, r18, r5, r19, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r3, 0xffffffffffffffff, r4]}}, @cred={{0x18, 0x1, 0x2, {r2, r11, r12}}}, @cred={{0x18, 0x1, 0x2, {r2, r9, r12}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}], 0x108, 0x8000}, 0x4000000) 1.491301708s ago: executing program 4 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b40), 0x840, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000b80)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000500)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0xc}], 0x10}, 0x0) r3 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2de}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x12c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc0, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x12c}}, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0xfffffffffffffee7) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d15, &(0x7f0000000140)=0x51) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x402000) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r8, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) 1.393256169s ago: executing program 2 (id=138): add_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.006178372s ago: executing program 3 (id=139): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@umask}, {@nobarrier}, {}, {@umask={'umask', 0x3d, 0xd}}, {@nls={'nls', 0x3d, 'macturkish'}}, {@nobarrier}]}, 0x1, 0x6ed, &(0x7f00000039c0)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 5 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(0x0, 0x6, 0x1, 0x0, &(0x7f0000000100)=0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 186.797353][ T5765] cgroup: Unknown subsys name 'net' [ 186.974857][ T5765] cgroup: Unknown subsys name 'cpuset' [ 186.999176][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.400483][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.407532][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.434972][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 244.587127][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.596955][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.605067][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.614440][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.623718][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.641563][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.651025][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.661723][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.670177][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.684248][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.691871][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.694963][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.703905][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.715295][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.723908][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.740322][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.756332][ T5079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.769851][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.793403][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.816364][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.826765][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.837805][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.848790][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.938222][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.950567][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.099887][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 246.774406][ T5789] Bluetooth: hci2: command tx timeout [ 246.868561][ T5789] Bluetooth: hci0: command tx timeout [ 246.874880][ T52] Bluetooth: hci1: command tx timeout [ 246.936057][ T5789] Bluetooth: hci3: command tx timeout [ 247.009704][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 247.034036][ T5789] Bluetooth: hci4: command tx timeout [ 247.092723][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.100772][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.108975][ T5782] bridge_slave_0: entered allmulticast mode [ 247.119099][ T5782] bridge_slave_0: entered promiscuous mode [ 247.146772][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.154652][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.162317][ T5782] bridge_slave_1: entered allmulticast mode [ 247.172163][ T5782] bridge_slave_1: entered promiscuous mode [ 247.344973][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 247.470988][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.484739][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 247.575942][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.590232][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 247.926608][ T5782] team0: Port device team_slave_0 added [ 247.972103][ T5782] team0: Port device team_slave_1 added [ 248.266720][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.274139][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.301991][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.448968][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.458331][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.466343][ T5783] bridge_slave_0: entered allmulticast mode [ 248.476311][ T5783] bridge_slave_0: entered promiscuous mode [ 248.497360][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.504802][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.534723][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.605799][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.613888][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.621652][ T5790] bridge_slave_0: entered allmulticast mode [ 248.631458][ T5790] bridge_slave_0: entered promiscuous mode [ 248.648559][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.657532][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.665776][ T5783] bridge_slave_1: entered allmulticast mode [ 248.675860][ T5783] bridge_slave_1: entered promiscuous mode [ 248.693480][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.701230][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.709231][ T5790] bridge_slave_1: entered allmulticast mode [ 248.719285][ T5790] bridge_slave_1: entered promiscuous mode [ 248.883478][ T5789] Bluetooth: hci2: command tx timeout [ 248.933165][ T5789] Bluetooth: hci0: command tx timeout [ 248.938496][ T52] Bluetooth: hci1: command tx timeout [ 249.020255][ T52] Bluetooth: hci3: command tx timeout [ 249.071920][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.123415][ T52] Bluetooth: hci4: command tx timeout [ 249.136963][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.228145][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.278338][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.286227][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.294458][ T5793] bridge_slave_0: entered allmulticast mode [ 249.304226][ T5793] bridge_slave_0: entered promiscuous mode [ 249.319633][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.327729][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.335569][ T5793] bridge_slave_1: entered allmulticast mode [ 249.345740][ T5793] bridge_slave_1: entered promiscuous mode [ 249.364881][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.376023][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.383894][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.391630][ T5781] bridge_slave_0: entered allmulticast mode [ 249.401493][ T5781] bridge_slave_0: entered promiscuous mode [ 249.427335][ T5782] hsr_slave_0: entered promiscuous mode [ 249.438084][ T5782] hsr_slave_1: entered promiscuous mode [ 249.552539][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.560372][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.568320][ T5781] bridge_slave_1: entered allmulticast mode [ 249.578085][ T5781] bridge_slave_1: entered promiscuous mode [ 249.603669][ T5790] team0: Port device team_slave_0 added [ 249.768393][ T5790] team0: Port device team_slave_1 added [ 249.817683][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.840570][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.857959][ T5783] team0: Port device team_slave_0 added [ 250.018243][ T5783] team0: Port device team_slave_1 added [ 250.079300][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.128060][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.135850][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.162492][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.195026][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.202266][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.230304][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.328212][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.401333][ T5793] team0: Port device team_slave_0 added [ 250.412394][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.419875][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.452133][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.572617][ T5781] team0: Port device team_slave_0 added [ 250.589378][ T5793] team0: Port device team_slave_1 added [ 250.600173][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.607709][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.634726][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.693659][ T5781] team0: Port device team_slave_1 added [ 250.934799][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.942188][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.969102][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.974881][ T52] Bluetooth: hci2: command tx timeout [ 251.013522][ T52] Bluetooth: hci0: command tx timeout [ 251.019452][ T52] Bluetooth: hci1: command tx timeout [ 251.093275][ T52] Bluetooth: hci3: command tx timeout [ 251.102390][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.109904][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.136618][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.162330][ T5790] hsr_slave_0: entered promiscuous mode [ 251.171365][ T5790] hsr_slave_1: entered promiscuous mode [ 251.180497][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.183618][ T52] Bluetooth: hci4: command tx timeout [ 251.188411][ T5790] Cannot create hsr debugfs directory [ 251.207199][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.214698][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.241849][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.258884][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.266527][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.293197][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.657641][ T5793] hsr_slave_0: entered promiscuous mode [ 251.668290][ T5793] hsr_slave_1: entered promiscuous mode [ 251.677318][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.685263][ T5793] Cannot create hsr debugfs directory [ 251.707171][ T5783] hsr_slave_0: entered promiscuous mode [ 251.717796][ T5783] hsr_slave_1: entered promiscuous mode [ 251.726335][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.734322][ T5783] Cannot create hsr debugfs directory [ 251.815817][ T5781] hsr_slave_0: entered promiscuous mode [ 251.826209][ T5781] hsr_slave_1: entered promiscuous mode [ 251.835280][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.843316][ T5781] Cannot create hsr debugfs directory [ 252.510345][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.535444][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.662524][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.795429][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.014828][ T52] Bluetooth: hci2: command tx timeout [ 253.094737][ T52] Bluetooth: hci0: command tx timeout [ 253.100971][ T5789] Bluetooth: hci1: command tx timeout [ 253.175825][ T5789] Bluetooth: hci3: command tx timeout [ 253.256339][ T5789] Bluetooth: hci4: command tx timeout [ 253.376035][ T5790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.411118][ T5790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.436717][ T5790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.466252][ T5790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.721855][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.770724][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.859051][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.884858][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.039852][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.156098][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.190017][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.229673][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.256138][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.295527][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.322006][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.347908][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.659801][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.885511][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.979994][ T3895] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.987913][ T3895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.121079][ T3895] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.128791][ T3895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.220897][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.568574][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.613333][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.669334][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.808677][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.840268][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.870148][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.877889][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.895321][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.903154][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.978702][ T3895] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.986458][ T3895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.112271][ T3895] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.119992][ T3895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.137072][ T3895] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.144768][ T3895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.278613][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.317888][ T3895] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.325772][ T3895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.607584][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.657067][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.745602][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.753297][ T4081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.828352][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.904456][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.912064][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.968727][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.496629][ T5782] veth0_vlan: entered promiscuous mode [ 258.539063][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.613557][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.651372][ T5782] veth1_vlan: entered promiscuous mode [ 258.679959][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.092154][ T5782] veth0_macvtap: entered promiscuous mode [ 259.227475][ T5783] veth0_vlan: entered promiscuous mode [ 259.277816][ T5782] veth1_macvtap: entered promiscuous mode [ 259.334495][ T5781] veth0_vlan: entered promiscuous mode [ 259.401911][ T5783] veth1_vlan: entered promiscuous mode [ 259.481975][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.496165][ T5781] veth1_vlan: entered promiscuous mode [ 259.617257][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.822265][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.886028][ T5783] veth0_macvtap: entered promiscuous mode [ 259.959032][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.969805][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.979620][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.989054][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.023395][ T5781] veth0_macvtap: entered promiscuous mode [ 260.061849][ T5783] veth1_macvtap: entered promiscuous mode [ 260.123254][ T5793] veth0_vlan: entered promiscuous mode [ 260.137316][ T5781] veth1_macvtap: entered promiscuous mode [ 260.262426][ T5793] veth1_vlan: entered promiscuous mode [ 260.306767][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.318295][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.333938][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.430938][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.442364][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.452709][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.465877][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.484250][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.569339][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.582448][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.598014][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.677399][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.688292][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.700725][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.711632][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.727263][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.778458][ T5793] veth0_macvtap: entered promiscuous mode [ 260.834205][ T5793] veth1_macvtap: entered promiscuous mode [ 260.847281][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.861130][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.871672][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.881378][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.903537][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.912732][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.922010][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.932286][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.067299][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.079753][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.090151][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.101127][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.111483][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.122404][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.137796][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.367476][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.379822][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.391378][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.402381][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.412797][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.425628][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.440805][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.579189][ T5790] veth0_vlan: entered promiscuous mode [ 261.683810][ T5790] veth1_vlan: entered promiscuous mode [ 261.728066][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.738997][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.748600][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.757879][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.021382][ T5790] veth0_macvtap: entered promiscuous mode [ 262.121214][ T5790] veth1_macvtap: entered promiscuous mode [ 262.349893][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.361034][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.371299][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.383153][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.394913][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.407932][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.419406][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.430533][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.446386][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.656560][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.669232][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.680770][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.693092][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.703329][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.714283][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.727121][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.738075][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.753728][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.004223][ T5790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.014537][ T5790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.023870][ T5790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.033161][ T5790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.676451][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.686243][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.956867][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.965910][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.704534][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.712674][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.805354][ T5782] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 267.847123][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.855728][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.041014][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.050151][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.126126][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.136094][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.499794][ T3895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.508089][ T3895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.808783][ T5968] 9pnet_fd: Insufficient options for proto=fd [ 268.851795][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.860404][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.401357][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.409778][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.705673][ T5977] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 269.719523][ T5975] IPVS: stopping backup sync thread 5977 ... [ 269.817947][ T5975] SET target dimension over the limit! [ 269.967718][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.980627][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.349987][ T5976] loop1: detected capacity change from 0 to 4096 [ 270.434107][ T5976] nilfs2: Unknown parameter 'ÿÿ' [ 270.728300][ T5983] loop2: detected capacity change from 0 to 512 [ 270.807699][ T5983] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 270.823451][ T5983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 271.063612][ T5983] EXT4-fs (loop2): 1 truncate cleaned up [ 271.072103][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.072530][ T5987] loop0: detected capacity change from 0 to 1024 [ 271.300374][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.500875][ T5998] ext4: Unknown parameter 'msdos' [ 271.711973][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.911001][ T5999] pim6reg1: entered promiscuous mode [ 271.917024][ T5999] pim6reg1: entered allmulticast mode [ 272.364383][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.453512][ T6010] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 272.498376][ T6009] IPVS: stopping backup sync thread 6010 ... [ 272.598307][ T11] usb 4-1: device descriptor read/64, error -71 [ 272.753856][ T6011] SET target dimension over the limit! [ 272.779814][ T5782] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 272.841229][ T5782] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 272.880626][ T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 273.076551][ T11] usb 4-1: device descriptor read/64, error -71 [ 273.143828][ T6016] loop4: detected capacity change from 0 to 512 [ 273.191142][ T6016] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 273.219640][ T11] usb usb4-port1: attempt power cycle [ 273.240523][ T6016] EXT4-fs (loop4): invalid journal inode [ 273.246785][ T6016] EXT4-fs (loop4): can't get journal size [ 273.351652][ T6016] EXT4-fs (loop4): 1 truncate cleaned up [ 273.360363][ T6016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.444259][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.478861][ T3635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.603164][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 273.687324][ T11] usb 4-1: device descriptor read/8, error -71 [ 273.708531][ T3635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.918481][ T3635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.013581][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 274.096173][ T11] usb 4-1: device descriptor read/8, error -71 [ 274.168905][ T3635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.224070][ T11] usb usb4-port1: unable to enumerate USB device [ 274.753385][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 274.836557][ T3635] bridge_slave_1: left allmulticast mode [ 274.842646][ T3635] bridge_slave_1: left promiscuous mode [ 274.850086][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.915675][ T3635] bridge_slave_0: left allmulticast mode [ 274.921814][ T3635] bridge_slave_0: left promiscuous mode [ 274.928873][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.993306][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 275.025876][ T11] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 275.034605][ T11] usb 2-1: config 0 has no interface number 0 [ 275.041092][ T11] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.052587][ T11] usb 2-1: config 0 interface 85 has no altsetting 0 [ 275.265219][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 275.277765][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.288565][ T11] usb 2-1: Product: syz [ 275.295240][ T11] usb 2-1: Manufacturer: syz [ 275.300167][ T11] usb 2-1: SerialNumber: syz [ 275.545000][ T11] usb 2-1: config 0 descriptor?? [ 275.658048][ T3635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.716466][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.751523][ T3635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.831121][ T3635] bond0 (unregistering): Released all slaves [ 276.238079][ T11] appletouch 2-1:0.85: Geyser mode initialized. [ 276.262293][ T11] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 276.530568][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 276.538849][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 276.547347][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.555675][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.563766][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.571842][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.580068][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.588163][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.596284][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.604535][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.612732][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.620894][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.628981][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.637636][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.645806][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.653952][ T11] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 276.759894][ T11] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 276.900925][ T5844] usb 2-1: USB disconnect, device number 2 [ 277.030765][ T3635] hsr_slave_0: left promiscuous mode [ 277.044863][ T5844] appletouch 2-1:0.85: input: appletouch disconnected [ 277.077878][ T3635] hsr_slave_1: left promiscuous mode [ 277.086892][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.095191][ T3635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.145980][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.154036][ T3635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.193694][ T3635] veth1_macvtap: left promiscuous mode [ 277.199849][ T3635] veth0_macvtap: left promiscuous mode [ 277.207038][ T3635] veth1_vlan: left promiscuous mode [ 277.212769][ T3635] veth0_vlan: left promiscuous mode [ 277.884063][ T6033] loop2: detected capacity change from 0 to 256 [ 278.018274][ T6033] ======================================================= [ 278.018274][ T6033] WARNING: The mand mount option has been deprecated and [ 278.018274][ T6033] and is ignored by this kernel. Remove the mand [ 278.018274][ T6033] option from the mount to silence this warning. [ 278.018274][ T6033] ======================================================= [ 278.053449][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.084000][ T6036] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 278.091978][ T6036] netlink: 244 bytes leftover after parsing attributes in process `syz.3.17'. [ 278.389926][ T3635] team0 (unregistering): Port device team_slave_1 removed [ 278.452108][ T6033] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001003e, chksum : 0x341a2413, utbl_chksum : 0xe619d30d) [ 278.625338][ T3635] team0 (unregistering): Port device team_slave_0 removed [ 278.713454][ T6033] Zero length message leads to an empty skb [ 278.786875][ T6038] loop4: detected capacity change from 0 to 4096 [ 278.947841][ T6038] nilfs2: Unknown parameter 'ÿÿ' [ 279.239481][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.249678][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.260304][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.316394][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.438836][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.849216][ T6066] fuse: Bad value for 'rootmode' [ 280.872397][ T6068] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 281.271105][ T6046] chnl_net:caif_netlink_parms(): no params data found [ 281.664675][ T52] Bluetooth: hci1: command tx timeout [ 281.956718][ T6078] loop4: detected capacity change from 0 to 512 [ 282.021558][ T6078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.072328][ T6078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.203551][ T6078] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #17: comm syz.4.25: corrupted in-inode xattr: invalid ea_ino [ 282.260515][ T6078] EXT4-fs (loop4): Remounting filesystem read-only [ 282.272176][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.490461][ T6089] loop2: detected capacity change from 0 to 512 [ 282.628119][ T6089] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 282.735646][ T6089] EXT4-fs (loop2): invalid journal inode [ 282.741652][ T6089] EXT4-fs (loop2): can't get journal size [ 282.759485][ T6088] pim6reg1: entered promiscuous mode [ 282.765770][ T6088] pim6reg1: entered allmulticast mode [ 282.985671][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.990193][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.003567][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.007837][ T6089] EXT4-fs (loop2): 1 truncate cleaned up [ 283.011407][ T6046] bridge_slave_0: entered allmulticast mode [ 283.019784][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.026940][ T6046] bridge_slave_0: entered promiscuous mode [ 283.106640][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.115435][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.123467][ T6046] bridge_slave_1: entered allmulticast mode [ 283.133668][ T6046] bridge_slave_1: entered promiscuous mode [ 283.213736][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 283.390225][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.404052][ T11] usb 2-1: device descriptor read/64, error -71 [ 283.499356][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.664828][ T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 283.688654][ T6100] loop4: detected capacity change from 0 to 256 [ 283.760059][ T52] Bluetooth: hci1: command tx timeout [ 283.808053][ T6046] team0: Port device team_slave_0 added [ 283.827203][ T6046] team0: Port device team_slave_1 added [ 283.886726][ T11] usb 2-1: device descriptor read/64, error -71 [ 284.039729][ T11] usb usb2-port1: attempt power cycle [ 284.143352][ T6100] FAT-fs (loop4): Directory bread(block 64) failed [ 284.150432][ T6100] FAT-fs (loop4): Directory bread(block 65) failed [ 284.159040][ T6100] FAT-fs (loop4): Directory bread(block 66) failed [ 284.166141][ T6100] FAT-fs (loop4): Directory bread(block 67) failed [ 284.173345][ T6100] FAT-fs (loop4): Directory bread(block 68) failed [ 284.180264][ T6100] FAT-fs (loop4): Directory bread(block 69) failed [ 284.187556][ T6100] FAT-fs (loop4): Directory bread(block 70) failed [ 284.194522][ T6100] FAT-fs (loop4): Directory bread(block 71) failed [ 284.201503][ T6100] FAT-fs (loop4): Directory bread(block 72) failed [ 284.208551][ T6100] FAT-fs (loop4): Directory bread(block 73) failed [ 284.245893][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.253249][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.279617][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.286421][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.316893][ T6104] loop3: detected capacity change from 0 to 8 [ 284.511701][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.519491][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.545729][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.558327][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.639171][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.714253][ T11] usb 2-1: device descriptor read/8, error -71 [ 284.773025][ T6046] hsr_slave_0: entered promiscuous mode [ 284.784235][ T6046] hsr_slave_1: entered promiscuous mode [ 285.014808][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 285.233421][ T11] usb 2-1: device descriptor read/8, error -71 [ 285.309474][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.361430][ T11] usb usb2-port1: unable to enumerate USB device [ 285.498258][ T6112] loop3: detected capacity change from 0 to 256 [ 285.831739][ T52] Bluetooth: hci1: command tx timeout [ 285.860914][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.867785][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.920864][ T6112] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001003e, chksum : 0x341a2413, utbl_chksum : 0xe619d30d) [ 287.019448][ T6124] loop4: detected capacity change from 0 to 512 [ 287.088190][ T6124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.233117][ T6124] EXT4-fs (loop4): 1 truncate cleaned up [ 287.288241][ T6046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.336478][ T6124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.359153][ T6046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.496361][ T6046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.502738][ T6124] netlink: 104 bytes leftover after parsing attributes in process `syz.4.35'. [ 287.569510][ T6135] loop1: detected capacity change from 0 to 256 [ 287.625737][ T6136] FAULT_INJECTION: forcing a failure. [ 287.625737][ T6136] name failslab, interval 1, probability 0, space 0, times 1 [ 287.639372][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.2.37 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 287.639522][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 287.639619][ T6136] Call Trace: [ 287.639686][ T6136] [ 287.639738][ T6136] __dump_stack+0x26/0x30 [ 287.639933][ T6136] dump_stack_lvl+0x1df/0x270 [ 287.640113][ T6136] dump_stack+0x1e/0x25 [ 287.640272][ T6136] should_fail_ex+0x7dc/0x8a0 [ 287.640490][ T6136] should_failslab+0x15b/0x200 [ 287.640685][ T6136] __kmalloc_noprof+0x182/0x1310 [ 287.640880][ T6136] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 287.641063][ T6136] ? tomoyo_path_number_perm+0x51/0x7d0 [ 287.641211][ T6136] ? filter_irq_stacks+0x49/0x190 [ 287.641361][ T6136] ? kmsan_get_metadata+0x105/0x1b0 [ 287.641552][ T6136] tomoyo_realpath_from_path+0xeb/0x9f0 [ 287.641746][ T6136] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 287.641938][ T6136] ? __srcu_read_lock+0x5e/0xd0 [ 287.642130][ T6136] tomoyo_path_number_perm+0x1d0/0x7d0 [ 287.642287][ T6136] ? stack_depot_save_flags+0x35/0x7c0 [ 287.642500][ T6136] ? kmsan_get_metadata+0x105/0x1b0 [ 287.642681][ T6136] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 287.642909][ T6136] tomoyo_file_ioctl+0x3d/0x50 [ 287.643083][ T6136] security_file_ioctl_compat+0x141/0x590 [ 287.643306][ T6136] __ia32_compat_sys_ioctl+0x150/0x1260 [ 287.643462][ T6136] ? kmsan_get_metadata+0x105/0x1b0 [ 287.643634][ T6136] ? kmsan_get_metadata+0x105/0x1b0 [ 287.643834][ T6136] ia32_sys_call+0x2d07/0x42c0 [ 287.643971][ T6136] __do_fast_syscall_32+0xb0/0x110 [ 287.644158][ T6136] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 287.644336][ T6136] do_fast_syscall_32+0x38/0x80 [ 287.644514][ T6136] do_SYSENTER_32+0x1f/0x30 [ 287.644693][ T6136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.644872][ T6136] RIP: 0023:0xf7f64539 [ 287.644993][ T6136] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 287.645110][ T6136] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 287.645256][ T6136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02c563a [ 287.645350][ T6136] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.645436][ T6136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.645518][ T6136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 287.645602][ T6136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.645725][ T6136] [ 287.856733][ T6135] exfat: Deprecated parameter 'utf8' [ 287.864875][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.876549][ T6136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.921759][ T6046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.925960][ T6135] exfat: Deprecated parameter 'utf8' [ 287.946675][ T6135] exfat: Deprecated parameter 'utf8' [ 287.980804][ T52] Bluetooth: hci1: command tx timeout [ 288.425131][ T6135] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 288.655576][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.914330][ T30] audit: type=1800 audit(1746826425.932:2): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 289.082273][ T6139] loop3: detected capacity change from 0 to 1764 [ 289.259559][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.497278][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.556703][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.564372][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.591265][ T6147] loop4: detected capacity change from 0 to 8 [ 289.647866][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.655677][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.134060][ T6163] loop4: detected capacity change from 0 to 256 [ 291.489687][ T6163] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001003e, chksum : 0x341a2413, utbl_chksum : 0xe619d30d) [ 292.106867][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 292.404701][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.535524][ T6168] loop2: detected capacity change from 0 to 4096 [ 292.650592][ T6168] ntfs3: Invalid value for umask. [ 293.221298][ T6187] loop1: detected capacity change from 0 to 512 [ 293.309461][ T6187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.530609][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 293.540068][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.645002][ T6193] FAULT_INJECTION: forcing a failure. [ 293.645002][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 293.659834][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.3.52 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 293.659979][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 293.660058][ T6193] Call Trace: [ 293.660109][ T6193] [ 293.660166][ T6193] __dump_stack+0x26/0x30 [ 293.660341][ T6193] dump_stack_lvl+0x1df/0x270 [ 293.660523][ T6193] dump_stack+0x1e/0x25 [ 293.660676][ T6193] should_fail_ex+0x7dc/0x8a0 [ 293.660889][ T6193] should_failslab+0x15b/0x200 [ 293.661074][ T6193] __kmalloc_noprof+0x182/0x1310 [ 293.661283][ T6193] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 293.661481][ T6193] ? tomoyo_path_number_perm+0x51/0x7d0 [ 293.661627][ T6193] ? filter_irq_stacks+0x49/0x190 [ 293.661775][ T6193] ? kmsan_get_metadata+0x105/0x1b0 [ 293.661961][ T6193] tomoyo_realpath_from_path+0xeb/0x9f0 [ 293.662181][ T6193] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.662369][ T6193] ? __srcu_read_lock+0x5e/0xd0 [ 293.662561][ T6193] tomoyo_path_number_perm+0x1d0/0x7d0 [ 293.662715][ T6193] ? stack_depot_save_flags+0x35/0x7c0 [ 293.662919][ T6193] ? kmsan_get_metadata+0x105/0x1b0 [ 293.663082][ T6193] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.663319][ T6193] tomoyo_file_ioctl+0x3d/0x50 [ 293.663505][ T6193] security_file_ioctl_compat+0x141/0x590 [ 293.663729][ T6193] __ia32_compat_sys_ioctl+0x150/0x1260 [ 293.663881][ T6193] ? kmsan_get_metadata+0x105/0x1b0 [ 293.664049][ T6193] ? kmsan_get_metadata+0x105/0x1b0 [ 293.664248][ T6193] ia32_sys_call+0x2d07/0x42c0 [ 293.664381][ T6193] __do_fast_syscall_32+0xb0/0x110 [ 293.664553][ T6193] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 293.664726][ T6193] do_fast_syscall_32+0x38/0x80 [ 293.664900][ T6193] do_SYSENTER_32+0x1f/0x30 [ 293.665069][ T6193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.665257][ T6193] RIP: 0023:0xf7f43539 [ 293.665349][ T6193] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.665462][ T6193] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 293.665586][ T6193] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185648 [ 293.665669][ T6193] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.665745][ T6193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.665814][ T6193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.665884][ T6193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.665983][ T6193] [ 293.923317][ T6193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.033582][ T6185] netlink: 104 bytes leftover after parsing attributes in process `syz.1.50'. [ 294.800468][ T6203] loop3: detected capacity change from 0 to 8 [ 295.229752][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.780042][ T6046] veth0_vlan: entered promiscuous mode [ 295.947299][ T6046] veth1_vlan: entered promiscuous mode [ 296.242455][ T6217] loop3: detected capacity change from 0 to 256 [ 296.527157][ T6217] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001003e, chksum : 0x341a2413, utbl_chksum : 0xe619d30d) [ 296.559348][ T6046] veth0_macvtap: entered promiscuous mode [ 296.648222][ T6046] veth1_macvtap: entered promiscuous mode [ 296.930968][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.944056][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.954640][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.965466][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.975789][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.986723][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.997025][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.007969][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.024194][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.495059][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.506114][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.516455][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.527293][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.537640][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.548446][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.558803][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.569755][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.586109][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.988267][ T6046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.997569][ T6046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.006917][ T6046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.016132][ T6046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.274494][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 298.584578][ T6230] loop2: detected capacity change from 0 to 4096 [ 299.128557][ T6249] loop1: detected capacity change from 0 to 128 [ 299.258710][ T6249] EXT4-fs: Ignoring removed nobh option [ 299.273212][ T6248] loop3: detected capacity change from 0 to 512 [ 299.356073][ T6248] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.374620][ T6249] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.400211][ T6249] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.458941][ T6253] loop4: detected capacity change from 0 to 8 [ 299.560652][ T6248] EXT4-fs (loop3): 1 truncate cleaned up [ 299.568907][ T6248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.828861][ T6248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.66'. [ 299.853531][ T30] audit: type=1800 audit(1746826436.902:3): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.65" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 300.844289][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.170370][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.677028][ T6272] loop4: detected capacity change from 0 to 4096 [ 301.741495][ T6272] nilfs2: Unknown parameter 'ÿÿ' [ 301.786428][ T6279] loop2: detected capacity change from 0 to 8 [ 303.057114][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 303.506737][ T6302] FAULT_INJECTION: forcing a failure. [ 303.506737][ T6302] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.521441][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.3.77 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 303.521588][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 303.521673][ T6302] Call Trace: [ 303.521732][ T6302] [ 303.521782][ T6302] __dump_stack+0x26/0x30 [ 303.521953][ T6302] dump_stack_lvl+0x1df/0x270 [ 303.522130][ T6302] dump_stack+0x1e/0x25 [ 303.522286][ T6302] should_fail_ex+0x7dc/0x8a0 [ 303.522489][ T6302] should_fail+0x2a/0x40 [ 303.522663][ T6302] should_fail_usercopy+0x2e/0x40 [ 303.522883][ T6302] _copy_from_user+0x33/0x100 [ 303.523064][ T6302] get_compat_msghdr+0x63/0x740 [ 303.523259][ T6302] ? kmsan_get_metadata+0x105/0x1b0 [ 303.523443][ T6302] ___sys_sendmsg+0x198/0x3b0 [ 303.523586][ T6302] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.523779][ T6302] ? __rcu_read_unlock+0x6d/0xd0 [ 303.523941][ T6302] ? __fget_files+0x3b4/0x4a0 [ 303.524101][ T6302] ? __fget_files+0x3b9/0x4a0 [ 303.524268][ T6302] ? kmsan_get_metadata+0x105/0x1b0 [ 303.524443][ T6302] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.524634][ T6302] __sys_sendmsg+0x1aa/0x300 [ 303.524774][ T6302] ? kmsan_get_metadata+0x105/0x1b0 [ 303.524947][ T6302] ? kmsan_get_metadata+0x105/0x1b0 [ 303.525137][ T6302] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 303.525357][ T6302] ia32_sys_call+0x3692/0x42c0 [ 303.525492][ T6302] __do_fast_syscall_32+0xb0/0x110 [ 303.525677][ T6302] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 303.525859][ T6302] do_fast_syscall_32+0x38/0x80 [ 303.526035][ T6302] do_SYSENTER_32+0x1f/0x30 [ 303.526203][ T6302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.526391][ T6302] RIP: 0023:0xf7f43539 [ 303.526517][ T6302] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.526632][ T6302] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 303.526765][ T6302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 303.526857][ T6302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.526938][ T6302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.527018][ T6302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.527099][ T6302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.527238][ T6302] [ 304.383519][ T6311] loop4: detected capacity change from 0 to 8 [ 304.654489][ T6314] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET) [ 305.166769][ T6320] loop3: detected capacity change from 0 to 512 [ 305.293409][ T6320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.470063][ T6320] EXT4-fs (loop3): 1 truncate cleaned up [ 305.470224][ T4081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.478729][ T6320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.484184][ T4081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.651318][ T6320] netlink: 104 bytes leftover after parsing attributes in process `syz.3.80'. [ 306.500018][ T3895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.515411][ T3895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.941611][ T6337] loop4: detected capacity change from 0 to 164 [ 307.009602][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.731501][ T6336] loop1: detected capacity change from 0 to 4096 [ 307.835926][ T6336] nilfs2: Unknown parameter 'ÿÿ' [ 308.285915][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 308.310131][ T6351] input: syz1 as /devices/virtual/input/input6 [ 309.526734][ T6365] loop4: detected capacity change from 0 to 8 [ 309.665297][ T2232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.894628][ T2232] usb 2-1: Using ep0 maxpacket: 16 [ 309.940604][ T2232] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 309.953025][ T2232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.130854][ T2232] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.142732][ T2232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.152112][ T2232] usb 2-1: Product: syz [ 310.160020][ T2232] usb 2-1: Manufacturer: syz [ 310.165166][ T2232] usb 2-1: SerialNumber: syz [ 310.284859][ T2232] usb 2-1: config 0 descriptor?? [ 310.363064][ T2232] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 310.372681][ T2232] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 310.933992][ T2232] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 310.979225][ T2232] em28xx 2-1:0.0: Config register raw data: 0xea [ 310.986189][ T2232] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 310.993006][ T2232] em28xx 2-1:0.0: No AC97 audio processor [ 311.101487][ T6382] loop2: detected capacity change from 0 to 512 [ 311.168926][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 311.255148][ T6382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 311.315278][ T6386] Bluetooth: MGMT ver 1.23 [ 311.381814][ T6387] FAULT_INJECTION: forcing a failure. [ 311.381814][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.395983][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.5.97 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 311.396137][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 311.396214][ T6387] Call Trace: [ 311.396260][ T6387] [ 311.396308][ T6387] __dump_stack+0x26/0x30 [ 311.396474][ T6387] dump_stack_lvl+0x1df/0x270 [ 311.396648][ T6387] dump_stack+0x1e/0x25 [ 311.396781][ T6387] should_fail_ex+0x7dc/0x8a0 [ 311.396991][ T6387] should_fail+0x2a/0x40 [ 311.397157][ T6387] should_fail_usercopy+0x2e/0x40 [ 311.397351][ T6387] _copy_to_user+0x35/0x120 [ 311.397523][ T6387] simple_read_from_buffer+0x1b2/0x340 [ 311.397673][ T6387] proc_fail_nth_read+0x1d2/0x2c0 [ 311.397845][ T6387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.398019][ T6387] vfs_read+0x279/0xef0 [ 311.398144][ T6387] ? stack_depot_save_flags+0x35/0x7c0 [ 311.398311][ T6387] ? kmsan_get_metadata+0x105/0x1b0 [ 311.398468][ T6387] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 311.398640][ T6387] __ia32_sys_read+0x1f9/0x4d0 [ 311.398796][ T6387] ia32_sys_call+0x184c/0x42c0 [ 311.398965][ T6387] __do_fast_syscall_32+0xb0/0x110 [ 311.399127][ T6387] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 311.399285][ T6387] do_fast_syscall_32+0x38/0x80 [ 311.399439][ T6387] do_SYSENTER_32+0x1f/0x30 [ 311.399588][ T6387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.399747][ T6387] RIP: 0023:0xf708e539 [ 311.399837][ T6387] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 311.399950][ T6387] RSP: 002b:00000000f507e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 311.400065][ T6387] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f507e620 [ 311.400149][ T6387] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 311.400224][ T6387] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 311.400295][ T6387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.400369][ T6387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.400471][ T6387] [ 311.616956][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.680870][ T6386] netlink: 'syz.3.96': attribute type 5 has an invalid length. [ 311.715657][ T6382] EXT4-fs (loop2): 1 truncate cleaned up [ 311.724524][ T6382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.802328][ T2232] usb 2-1: USB disconnect, device number 7 [ 312.112309][ T6379] netlink: 104 bytes leftover after parsing attributes in process `syz.2.95'. [ 313.021517][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 313.346612][ T6398] loop4: detected capacity change from 0 to 4096 [ 313.362759][ T6398] nilfs2: Unknown parameter 'ÿÿ' [ 313.403943][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.455353][ T6406] FAULT_INJECTION: forcing a failure. [ 313.455353][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 313.468653][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.1.101 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 313.468862][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 313.468945][ T6406] Call Trace: [ 313.468996][ T6406] [ 313.469048][ T6406] __dump_stack+0x26/0x30 [ 313.469223][ T6406] dump_stack_lvl+0x1df/0x270 [ 313.469404][ T6406] dump_stack+0x1e/0x25 [ 313.469563][ T6406] should_fail_ex+0x7dc/0x8a0 [ 313.469787][ T6406] should_failslab+0x15b/0x200 [ 313.469972][ T6406] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 313.470172][ T6406] ? __alloc_skb+0x1e0/0x7d0 [ 313.470359][ T6406] ? kmsan_get_metadata+0x105/0x1b0 [ 313.470536][ T6406] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.470735][ T6406] __alloc_skb+0x1e0/0x7d0 [ 313.470931][ T6406] netlink_alloc_large_skb+0xa5/0x280 [ 313.471134][ T6406] netlink_sendmsg+0xaea/0x1250 [ 313.471301][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.471434][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.471571][ T6406] __sock_sendmsg+0x330/0x3d0 [ 313.471750][ T6406] ____sys_sendmsg+0x7e0/0xd80 [ 313.471926][ T6406] ___sys_sendmsg+0x271/0x3b0 [ 313.472073][ T6406] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.472266][ T6406] ? __rcu_read_unlock+0x6d/0xd0 [ 313.472432][ T6406] ? __fget_files+0x3b4/0x4a0 [ 313.472593][ T6406] ? __fget_files+0x3b9/0x4a0 [ 313.472766][ T6406] ? kmsan_get_metadata+0x105/0x1b0 [ 313.472932][ T6406] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.473121][ T6406] __sys_sendmsg+0x1aa/0x300 [ 313.473291][ T6406] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 313.473509][ T6406] ia32_sys_call+0x3692/0x42c0 [ 313.473644][ T6406] __do_fast_syscall_32+0xb0/0x110 [ 313.473830][ T6406] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 313.474009][ T6406] do_fast_syscall_32+0x38/0x80 [ 313.474187][ T6406] do_SYSENTER_32+0x1f/0x30 [ 313.474360][ T6406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.474538][ T6406] RIP: 0023:0xf712e539 [ 313.474638][ T6406] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 313.474762][ T6406] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 313.474891][ T6406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 313.474983][ T6406] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.475062][ T6406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.475144][ T6406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.475226][ T6406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.475340][ T6406] [ 314.621897][ T6414] loop3: detected capacity change from 0 to 8 [ 316.201595][ T6436] FAULT_INJECTION: forcing a failure. [ 316.201595][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 316.215560][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.2.110 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 316.215706][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 316.215785][ T6436] Call Trace: [ 316.215853][ T6436] [ 316.215904][ T6436] __dump_stack+0x26/0x30 [ 316.216082][ T6436] dump_stack_lvl+0x1df/0x270 [ 316.216265][ T6436] dump_stack+0x1e/0x25 [ 316.216423][ T6436] should_fail_ex+0x7dc/0x8a0 [ 316.216638][ T6436] should_failslab+0x15b/0x200 [ 316.216831][ T6436] __kmalloc_noprof+0x182/0x1310 [ 316.217021][ T6436] ? tomoyo_encode+0x626/0xa10 [ 316.217188][ T6436] ? kmsan_get_metadata+0x105/0x1b0 [ 316.217364][ T6436] ? kmsan_get_metadata+0x105/0x1b0 [ 316.217556][ T6436] tomoyo_encode+0x626/0xa10 [ 316.217763][ T6436] tomoyo_realpath_from_path+0x92e/0x9f0 [ 316.217962][ T6436] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.218166][ T6436] tomoyo_path_number_perm+0x1d0/0x7d0 [ 316.218323][ T6436] ? stack_depot_save_flags+0x35/0x7c0 [ 316.218535][ T6436] ? kmsan_get_metadata+0x105/0x1b0 [ 316.218711][ T6436] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.218944][ T6436] tomoyo_file_ioctl+0x3d/0x50 [ 316.219133][ T6436] security_file_ioctl_compat+0x141/0x590 [ 316.219370][ T6436] __ia32_compat_sys_ioctl+0x150/0x1260 [ 316.219527][ T6436] ? kmsan_get_metadata+0x105/0x1b0 [ 316.219697][ T6436] ? kmsan_get_metadata+0x105/0x1b0 [ 316.219895][ T6436] ia32_sys_call+0x2d07/0x42c0 [ 316.220030][ T6436] __do_fast_syscall_32+0xb0/0x110 [ 316.220229][ T6436] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 316.220406][ T6436] do_fast_syscall_32+0x38/0x80 [ 316.220586][ T6436] do_SYSENTER_32+0x1f/0x30 [ 316.220760][ T6436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.220945][ T6436] RIP: 0023:0xf7f64539 [ 316.221044][ T6436] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.221161][ T6436] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 316.221290][ T6436] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 316.221382][ T6436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.221462][ T6436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.221543][ T6436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.221625][ T6436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.221743][ T6436] [ 316.221852][ T6436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.595411][ T6452] loop1: detected capacity change from 0 to 512 [ 317.639421][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 317.681578][ T6452] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.844459][ T6452] EXT4-fs (loop1): 1 truncate cleaned up [ 317.932412][ T6452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.034498][ T6452] netlink: 104 bytes leftover after parsing attributes in process `syz.1.113'. [ 318.401918][ T6463] loop3: detected capacity change from 0 to 8 [ 318.446984][ T6462] loop2: detected capacity change from 0 to 8 [ 318.626885][ T6462] SQUASHFS error: zlib decompression failed, data probably corrupt [ 318.635385][ T6462] SQUASHFS error: Failed to read block 0x9b: -5 [ 318.641954][ T6462] SQUASHFS error: Unable to read metadata cache entry [99] [ 318.649746][ T6462] SQUASHFS error: Unable to read inode 0x127 [ 318.839685][ T6462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.116'. [ 319.236558][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.506144][ T6488] FAULT_INJECTION: forcing a failure. [ 320.506144][ T6488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.521188][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.4.125 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 320.521339][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 320.521420][ T6488] Call Trace: [ 320.521477][ T6488] [ 320.521527][ T6488] __dump_stack+0x26/0x30 [ 320.521699][ T6488] dump_stack_lvl+0x1df/0x270 [ 320.521879][ T6488] dump_stack+0x1e/0x25 [ 320.522034][ T6488] should_fail_ex+0x7dc/0x8a0 [ 320.522248][ T6488] should_fail+0x2a/0x40 [ 320.522421][ T6488] should_fail_usercopy+0x2e/0x40 [ 320.522633][ T6488] _copy_from_user+0x33/0x100 [ 320.522830][ T6488] kstrtouint_from_user+0x75/0x140 [ 320.522989][ T6488] ? proc_fail_nth_write+0x43/0x300 [ 320.523162][ T6488] ? vfs_write+0x460/0x1560 [ 320.523315][ T6488] proc_fail_nth_write+0x61/0x300 [ 320.523501][ T6488] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 320.523687][ T6488] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.523872][ T6488] vfs_write+0x460/0x1560 [ 320.524013][ T6488] ? stack_depot_save_flags+0x35/0x7c0 [ 320.524193][ T6488] ? kmsan_get_metadata+0x105/0x1b0 [ 320.524356][ T6488] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 320.524548][ T6488] __ia32_sys_write+0x1f9/0x4d0 [ 320.524719][ T6488] ia32_sys_call+0x30f2/0x42c0 [ 320.524851][ T6488] __do_fast_syscall_32+0xb0/0x110 [ 320.525031][ T6488] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 320.525208][ T6488] do_fast_syscall_32+0x38/0x80 [ 320.525383][ T6488] do_SYSENTER_32+0x1f/0x30 [ 320.525560][ T6488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.525736][ T6488] RIP: 0023:0xf70ee539 [ 320.525836][ T6488] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 320.525955][ T6488] RSP: 002b:00000000f50bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 320.526082][ T6488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50bd620 [ 320.526173][ T6488] RDX: 0000000000000001 RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 320.526258][ T6488] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 320.526339][ T6488] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.526420][ T6488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.526542][ T6488] [ 321.614050][ T6496] TCP: TCP_TX_DELAY enabled [ 321.645390][ T6496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 321.805297][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 321.818867][ T6496] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure [ 322.001280][ T6494] loop1: detected capacity change from 0 to 2048 [ 322.347470][ T6506] loop5: detected capacity change from 0 to 512 [ 322.354074][ T6494] NILFS (loop1): The specified checkpoint is not a snapshot (checkpoint number=2) [ 322.428449][ T6506] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 322.687427][ T6506] EXT4-fs (loop5): 1 truncate cleaned up [ 322.697286][ T6506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.814420][ T6512] netlink: 104 bytes leftover after parsing attributes in process `syz.5.130'. [ 323.153632][ T6518] FAULT_INJECTION: forcing a failure. [ 323.153632][ T6518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.168153][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.4.132 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 323.168311][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 323.168393][ T6518] Call Trace: [ 323.168444][ T6518] [ 323.168494][ T6518] __dump_stack+0x26/0x30 [ 323.168668][ T6518] dump_stack_lvl+0x1df/0x270 [ 323.168849][ T6518] dump_stack+0x1e/0x25 [ 323.169006][ T6518] should_fail_ex+0x7dc/0x8a0 [ 323.169223][ T6518] should_fail+0x2a/0x40 [ 323.169408][ T6518] should_fail_usercopy+0x2e/0x40 [ 323.169610][ T6518] _copy_from_user+0x33/0x100 [ 323.169801][ T6518] get_compat_msghdr+0x63/0x740 [ 323.170006][ T6518] ? kmsan_get_metadata+0x105/0x1b0 [ 323.170198][ T6518] ___sys_sendmsg+0x198/0x3b0 [ 323.170356][ T6518] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.170545][ T6518] ? __rcu_read_unlock+0x6d/0xd0 [ 323.170709][ T6518] ? __fget_files+0x3b4/0x4a0 [ 323.170870][ T6518] ? __fget_files+0x3b9/0x4a0 [ 323.171036][ T6518] ? kmsan_get_metadata+0x105/0x1b0 [ 323.171209][ T6518] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.171422][ T6518] __sys_sendmsg+0x1aa/0x300 [ 323.171560][ T6518] ? kmsan_get_metadata+0x105/0x1b0 [ 323.171732][ T6518] ? kmsan_get_metadata+0x105/0x1b0 [ 323.171920][ T6518] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 323.172138][ T6518] ia32_sys_call+0x3692/0x42c0 [ 323.172284][ T6518] __do_fast_syscall_32+0xb0/0x110 [ 323.172466][ T6518] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 323.172645][ T6518] do_fast_syscall_32+0x38/0x80 [ 323.172819][ T6518] do_SYSENTER_32+0x1f/0x30 [ 323.172975][ T6518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.173145][ T6518] RIP: 0023:0xf70ee539 [ 323.173248][ T6518] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.173372][ T6518] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 323.173502][ T6518] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003780 [ 323.173596][ T6518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.173676][ T6518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.173756][ T6518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.173838][ T6518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.173954][ T6518] [ 323.413858][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.824454][ T6519] gretap0: entered promiscuous mode [ 323.899172][ T6046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.405764][ T6529] loop1: detected capacity change from 0 to 512 [ 324.516348][ T6529] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 324.581925][ T6529] EXT4-fs (loop1): invalid journal inode [ 324.588262][ T6529] EXT4-fs (loop1): can't get journal size [ 324.828851][ T6529] EXT4-fs (loop1): 1 truncate cleaned up [ 324.838685][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.038074][ T6536] FAULT_INJECTION: forcing a failure. [ 325.038074][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 325.052327][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.5.135 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 325.052472][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 325.052547][ T6536] Call Trace: [ 325.052596][ T6536] [ 325.052642][ T6536] __dump_stack+0x26/0x30 [ 325.052810][ T6536] dump_stack_lvl+0x1df/0x270 [ 325.052989][ T6536] dump_stack+0x1e/0x25 [ 325.053151][ T6536] should_fail_ex+0x7dc/0x8a0 [ 325.053360][ T6536] should_failslab+0x15b/0x200 [ 325.053543][ T6536] __kmalloc_noprof+0x182/0x1310 [ 325.053729][ T6536] ? tomoyo_encode+0x626/0xa10 [ 325.053896][ T6536] ? kmsan_get_metadata+0x105/0x1b0 [ 325.054069][ T6536] ? kmsan_get_metadata+0x105/0x1b0 [ 325.054265][ T6536] tomoyo_encode+0x626/0xa10 [ 325.054471][ T6536] tomoyo_realpath_from_path+0x92e/0x9f0 [ 325.054660][ T6536] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.054865][ T6536] tomoyo_path_number_perm+0x1d0/0x7d0 [ 325.055021][ T6536] ? stack_depot_save_flags+0x35/0x7c0 [ 325.055249][ T6536] ? kmsan_get_metadata+0x105/0x1b0 [ 325.055422][ T6536] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.055648][ T6536] tomoyo_file_ioctl+0x3d/0x50 [ 325.055828][ T6536] security_file_ioctl_compat+0x141/0x590 [ 325.056041][ T6536] __ia32_compat_sys_ioctl+0x150/0x1260 [ 325.056198][ T6536] ? kmsan_get_metadata+0x105/0x1b0 [ 325.056352][ T6536] ? kmsan_get_metadata+0x105/0x1b0 [ 325.056546][ T6536] ia32_sys_call+0x2d07/0x42c0 [ 325.056674][ T6536] __do_fast_syscall_32+0xb0/0x110 [ 325.056852][ T6536] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 325.057029][ T6536] do_fast_syscall_32+0x38/0x80 [ 325.057209][ T6536] do_SYSENTER_32+0x1f/0x30 [ 325.057389][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.057569][ T6536] RIP: 0023:0xf708e539 [ 325.057668][ T6536] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.057793][ T6536] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 325.057926][ T6536] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 325.058017][ T6536] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.058101][ T6536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.058189][ T6536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 325.058272][ T6536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.058388][ T6536] [ 325.308377][ T6536] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.972656][ T6548] loop3: detected capacity change from 0 to 1024 [ 326.255622][ T6548] ===================================================== [ 326.263271][ T6548] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 [ 326.272259][ T6548] hfsplus_rename_cat+0x1173/0x17e0 [ 326.278455][ T6548] hfsplus_rename+0x1fc/0x2f0 [ 326.283672][ T6548] vfs_rename+0x1e87/0x2460 [ 326.288420][ T6548] do_renameat2+0x175e/0x1d70 [ 326.294321][ T6548] __ia32_sys_rename+0xd7/0x140 [ 326.299563][ T6548] ia32_sys_call+0x3d36/0x42c0 [ 326.304835][ T6548] __do_fast_syscall_32+0xb0/0x110 [ 326.310319][ T6548] do_fast_syscall_32+0x38/0x80 [ 326.315608][ T6548] do_SYSENTER_32+0x1f/0x30 [ 326.320383][ T6548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.327301][ T6548] [ 326.329764][ T6548] Uninit was stored to memory at: [ 326.335259][ T6548] hfsplus_rename_cat+0x10a9/0x17e0 [ 326.340744][ T6548] hfsplus_rename+0x1fc/0x2f0 [ 326.346002][ T6548] vfs_rename+0x1e87/0x2460 [ 326.350768][ T6548] do_renameat2+0x175e/0x1d70 [ 326.355967][ T6548] __ia32_sys_rename+0xd7/0x140 [ 326.361181][ T6548] ia32_sys_call+0x3d36/0x42c0 [ 326.366451][ T6548] __do_fast_syscall_32+0xb0/0x110 [ 326.371955][ T6548] do_fast_syscall_32+0x38/0x80 [ 326.378384][ T6548] do_SYSENTER_32+0x1f/0x30 [ 326.383842][ T6548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.390478][ T6548] [ 326.393104][ T6548] Uninit was stored to memory at: [ 326.398440][ T6548] hfsplus_create_cat+0x18fb/0x1910 [ 326.404212][ T6548] hfsplus_fill_super+0x212e/0x2740 [ 326.409684][ T6548] get_tree_bdev_flags+0x6e3/0x920 [ 326.415221][ T6548] get_tree_bdev+0x38/0x50 [ 326.419913][ T6548] hfsplus_get_tree+0x35/0x40 [ 326.425144][ T6548] vfs_get_tree+0xb0/0x5c0 [ 326.429803][ T6548] do_new_mount+0x73c/0x1620 [ 326.434812][ T6548] path_mount+0x6db/0x1e90 [ 326.439577][ T6548] __se_sys_mount+0x6eb/0x7d0 [ 326.444868][ T6548] __ia32_sys_mount+0xe2/0x150 [ 326.449901][ T6548] ia32_sys_call+0x2733/0x42c0 [ 326.455320][ T6548] __do_fast_syscall_32+0xb0/0x110 [ 326.460718][ T6548] do_fast_syscall_32+0x38/0x80 [ 326.466132][ T6548] do_SYSENTER_32+0x1f/0x30 [ 326.471086][ T6548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.478959][ T6548] [ 326.481413][ T6548] Uninit was created at: [ 326.486466][ T6548] __alloc_frozen_pages_noprof+0x689/0xf00 [ 326.492535][ T6548] alloc_pages_mpol+0x328/0x860 [ 326.498014][ T6548] alloc_frozen_pages_noprof+0xf7/0x200 [ 326.504273][ T6548] allocate_slab+0x24d/0x1210 [ 326.509224][ T6548] ___slab_alloc+0xfec/0x3480 [ 326.514455][ T6548] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 326.520569][ T6548] hfsplus_alloc_inode+0x5a/0xd0 [ 326.526070][ T6548] alloc_inode+0x87/0x4a0 [ 326.530634][ T6548] iget_locked+0x239/0x12d0 [ 326.536164][ T6548] hfsplus_iget+0x5c/0xb80 [ 326.541172][ T6548] hfsplus_btree_open+0x132/0x1c90 [ 326.546863][ T6548] hfsplus_fill_super+0x1161/0x2740 [ 326.552308][ T6548] get_tree_bdev_flags+0x6e3/0x920 [ 326.557896][ T6548] get_tree_bdev+0x38/0x50 [ 326.562533][ T6548] hfsplus_get_tree+0x35/0x40 [ 326.568315][ T6548] vfs_get_tree+0xb0/0x5c0 [ 326.573166][ T6548] do_new_mount+0x73c/0x1620 [ 326.579207][ T6548] path_mount+0x6db/0x1e90 [ 326.584521][ T6548] __se_sys_mount+0x6eb/0x7d0 [ 326.589512][ T6548] __ia32_sys_mount+0xe2/0x150 [ 326.594937][ T6548] ia32_sys_call+0x2733/0x42c0 [ 326.599929][ T6548] __do_fast_syscall_32+0xb0/0x110 [ 326.605575][ T6548] do_fast_syscall_32+0x38/0x80 [ 326.610684][ T6548] do_SYSENTER_32+0x1f/0x30 [ 326.615768][ T6548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.622559][ T6548] [ 326.625219][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.3.139 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 326.637821][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 326.648342][ T6548] ===================================================== [ 326.655941][ T6548] Disabling lock debugging due to kernel taint [ 326.662254][ T6548] Kernel panic - not syncing: kmsan.panic set ... [ 326.668859][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.3.139 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 326.682864][ T6548] Tainted: [B]=BAD_PAGE [ 326.687166][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 326.697412][ T6548] Call Trace: [ 326.700854][ T6548] [ 326.703934][ T6548] __dump_stack+0x26/0x30 [ 326.708526][ T6548] dump_stack_lvl+0x53/0x270 [ 326.713376][ T6548] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.719452][ T6548] dump_stack+0x1e/0x25 [ 326.723847][ T6548] panic+0x4bd/0xd50 [ 326.728040][ T6548] kmsan_report+0x29d/0x2a0 [ 326.732810][ T6548] ? __msan_warning+0x96/0x120 [ 326.737916][ T6548] ? hfsplus_rename_cat+0x1173/0x17e0 [ 326.743576][ T6548] ? hfsplus_rename+0x1fc/0x2f0 [ 326.748705][ T6548] ? vfs_rename+0x1e87/0x2460 [ 326.753707][ T6548] ? do_renameat2+0x175e/0x1d70 [ 326.758789][ T6548] ? __ia32_sys_rename+0xd7/0x140 [ 326.764126][ T6548] ? ia32_sys_call+0x3d36/0x42c0 [ 326.769247][ T6548] ? __do_fast_syscall_32+0xb0/0x110 [ 326.774751][ T6548] ? do_fast_syscall_32+0x38/0x80 [ 326.779987][ T6548] ? do_SYSENTER_32+0x1f/0x30 [ 326.784887][ T6548] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.791652][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.797079][ T6548] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.803118][ T6548] ? hfsplus_bnode_dump+0x50a/0x560 [ 326.808509][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.813933][ T6548] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.820001][ T6548] ? hfsplus_brec_remove+0x92f/0xa60 [ 326.825510][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.830938][ T6548] __msan_warning+0x96/0x120 [ 326.835806][ T6548] hfsplus_rename_cat+0x1173/0x17e0 [ 326.841258][ T6548] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.847979][ T6548] ? kfree+0x151/0xea0 [ 326.852344][ T6548] ? filter_irq_stacks+0x49/0x190 [ 326.857566][ T6548] ? stack_depot_save_flags+0x35/0x7c0 [ 326.863253][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.868664][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.874078][ T6548] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 326.880701][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.886130][ T6548] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.892184][ T6548] ? kmsan_get_metadata+0x105/0x1b0 [ 326.897611][ T6548] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.903685][ T6548] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 326.910269][ T6548] hfsplus_rename+0x1fc/0x2f0 [ 326.915185][ T6548] ? __pfx_hfsplus_rename+0x10/0x10 [ 326.920785][ T6548] vfs_rename+0x1e87/0x2460 [ 326.925643][ T6548] do_renameat2+0x175e/0x1d70 [ 326.930671][ T6548] __ia32_sys_rename+0xd7/0x140 [ 326.935736][ T6548] ia32_sys_call+0x3d36/0x42c0 [ 326.940682][ T6548] __do_fast_syscall_32+0xb0/0x110 [ 326.946106][ T6548] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 326.952035][ T6548] do_fast_syscall_32+0x38/0x80 [ 326.957102][ T6548] do_SYSENTER_32+0x1f/0x30 [ 326.961813][ T6548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.968385][ T6548] RIP: 0023:0xf7f43539 [ 326.972623][ T6548] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 326.992544][ T6548] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 327.001182][ T6548] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000780 [ 327.009357][ T6548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.017487][ T6548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.025871][ T6548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 327.034166][ T6548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.042322][ T6548] [ 327.046052][ T6548] Kernel Offset: disabled [ 327.050911][ T6548] Rebooting in 86400 seconds..