last executing test programs: 3.0054363s ago: executing program 2 (id=3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x461e, @private=0xa010102}, 0xfffffdc5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2d000000010001", 0x7) 2.76239612s ago: executing program 2 (id=10): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x1, 0x40, 0x1, &(0x7f0000000240)={0x14, "0fd62f1944b23de763cfb137449ccf18ea4ee9f23bc4e6acba8d11e8daa6c4ee99"}}) 2.554844009s ago: executing program 3 (id=4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.494971932s ago: executing program 0 (id=12): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 2.398749346s ago: executing program 3 (id=13): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) pipe2(&(0x7f0000000400), 0x80) syz_io_uring_setup(0x2c92, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x1, 0x310}, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 2.248428562s ago: executing program 3 (id=14): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x1) 2.07715005s ago: executing program 3 (id=16): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/221, 0xdd}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.547280423s ago: executing program 1 (id=20): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.500532295s ago: executing program 3 (id=21): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.417621719s ago: executing program 0 (id=22): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000001000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000080000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc40700a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64c490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e1700000000000000000000000000000832b99df00000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cb5ee3a7c9ef89edbdf42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2bca0f4557869ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54aba40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be206af7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c708e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec29066d9bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883be00900009ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) 1.329518942s ago: executing program 1 (id=23): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646d61736b3d30300000303030303030d61500d351432574deb3d110bd44303031303030303030343230352c646973636172072c666d61736b3d30303030303030303030303030303030303030303030362c0008004b76c7"], 0x1, 0x14d4, &(0x7f00000015c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.174579669s ago: executing program 0 (id=24): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) removexattr(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)=@known='security.apparmor\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 971.980788ms ago: executing program 1 (id=25): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000480)={0x2, 0x0, {&(0x7f0000000280)=""/39, 0x27, 0x0, 0x3, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 823.441045ms ago: executing program 1 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x110) 711.721789ms ago: executing program 0 (id=27): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 503.977028ms ago: executing program 1 (id=28): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 403.343263ms ago: executing program 0 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000006c0)={{0x5, 0x0, 0xfffffffffffffe9a, {0x1, 0x6000}}, "cd230718c6459cbc5f7f443644530d2f5a8bb4ef6f0c055407dab063e2f9f8a0711ab64d712f148a8aaf8bd834a23cd06fc582b83e77cb7404182b46c64f12e36bfb30cfbf68cab48b745299897aee5808adc42faf6bbcf34b325c50f0ca2343411d27407701cbd9ca3f6701fbe713775e627d34556e413b848b679ec6a6c2b855198553f5c0c285bea7ed1bf0a005381ead3cd30a2a644de1f1b734ea9048dab195f752bf69a17f9cd92438cc0501e4b0015724cda78d7c62b12c3f3c747208efa819941e899588b90419deb3c5a0006987f94f9158abde445a322147f6ddfbe35e725a21bee64fc9b91c1cc22254631ff84b722a1b4e5013c7e1afb4283d49375733be3bc7a906f0ab44254570b31d390afc29d473b91d077be63a43714ee3d55af485300cb2d548917f550cd12ff00c4ba57ccbf9309fe9dae86e9c347bc0c941dd5cdce515512c001e8aafedaa09d6d3477cac551911b12a4f69834cf6cfb60b39014c37fbdf86bf778ad0774108e0d506dadc413aa41ad45df7bf5f677a2c64e8628e6f23c6940acfc0c7ef0ad099d9c6565c0c6ce5182436b0ddf13742ef1f824e49cda50782144315ff62cb379802e1ae9a34986a314fac1f9a52dfcf763cd2e922f5f5fd32cd97b474d28751d6158cb9770416413205dc4d007d08f247da2378b0ae0c6974cda28dcdf4e8fd459b966702a3cdff047e8b7909b54d4c6fe444dc14e66784a00bd66bb0e5d891d71fa1faa89e248f76f407823343b7b26b25f05341509b192643d40d09a60ba4d89cfd2c0662c41ca855d718089253fa7283ba3912ed47405a905bb1c39213fe3af9c862eab0a206211eb32a944877782dddeb0ec249127890f56094bc917b515a6bfba80e518b03b936235983c917b2239722770af1ccc553a5ac929afc30d73fae1d26da5ae427debf509510dad376cbcaa985be27c1f8596bbdc02acc493ff0b44e32ba06c0f03adf6434e022a50c55c04259b0650d63a99851a707aeca3e31f371275764307989996c5d5b378bdc6a5c688179398ad5e91f21cced06b5279f83ae2da214fbed5b2c018d1d15ce99923cee55d0a3236ad829b7587e0a99fe4ec7091283a263ca35cc4b13e023edc739f0b4bf843d26de948fd3ba47d3442039657582abec2fe07458641c03e6a1ee024bf61feaedb18dd6c572993b5df672f3bef6e555603e5a083b4010d901db4b556eb8042993b693b16644f89b4766b1832907bf817b6619f47730a4060a7451ac4ef02cb5c027d494398c302ab2b924fdc913ee713a91b5a03c1349c615bcfa181d0bf90cefab1128fd490083bae3a949134756dbd8387222a9d4410c219bff4b2ab69a6ab6e547b0b16934ab212b86e25b9a1f9bea0a2738078f11066e28f6a3195600977a2ac4845859344d660725b531b3c58ee61ea2f920d0ffbe2548a54622d2f8fb471b7e029f4200efe84c679c73ea888a690d54ba844952aa5ed90f3b21b02b07789f9598cd81bfe66774c4ddc5aa2bc49b7f58e370dcd33850c58bfb5dde2530b856a4ad16e53110ece4e68a98b2f8c2b8ecb60c623e7b4e88aa6657379a0bcbbde4de66dfa7f0f6b193b26bf76860a24e232c87b8e8773c52f9d1d7737d49101d958d5cc8843a4a11ae4deda97af68e79ddcf2a6c5194c27dad2ca8b80226dcb87bec45fcedd7dcda14f7f3e17ff5aaaff6cd30db28de49fb3210873521099fee51c868833d91d28873f56b47d2c4ecf6b99f7ed40aecfdc2d34e1d05d3a41167b05ecde599290e364668a5c140315a7ca20984d5ed690e20dcd3ef5fb772ec4fdf780db7e0fbcb0765395a94558dfebc38555d66d3222395f5a127decd9bee97cdb7ed0c2c5000759d0a03ac49088f38f2282e042bddf67243df21464723644e706978053ccad9ee77650ea98b80392ca5b1d1afa30347df86762278ee839be522c5dfc3babd86e887f82d60491ead2f881aabb1f38813e479cca320b7ed9ec92db7bb5a73304b807333374cf529363ffd09e6c1e58821eb00b198e3c965e44006b3949c058cf2b8f0a0eb9e9e58871a138427860dc6d9b7266965ace5a9896142a73374d4c325afadb53a8ef4a3840607453f9927439b47d91f445b73888413ca4ed80a04359fb7e7d11731f345dfa21d509ae12e603fcb305e85b1ba4c21058dcb07ced57124f2ca26e636b5934a24c20221e1f8ed1c6707b063102fbf43e403e906c69b7e444f1bd8fdc1fe6886f9bf05be7d1e33bf296c41245aace183bafd768088387843fe97f910d40cd50a83f069894804faef2194be88e0a286c854aaa75014b093eb934622ea0d0178eca93add492815651b5ff7c21add8b51974dc420e82d70d9ef88a856924d4b7b881d221027982dac80110b6e91157125e18ce4ab20ccf2f67405d28a4a4adc8b1dd0f61216d31754159c1e47d886a96a156cf97963cf7603786c6a9161ce0c88f8ac8dca601bec10151f818429b7d705c01a93630ec4d372554a94c6c9be52020162e3f5ba299fc6b24de48f8a1a57cffd5b8e634d88b90a3a53c2244005a765fb17d2bda62fac1e6d5603515b074055819bed2a855f73cb758f5c72f736d41bb6fd8381bd11b39941179e39ddd1660fd036578dea57a72c6a05921202648c075d25c4814c6ef1469920d18758c846f925e9fbfe206a43d002545aee52dd6da04201aa080e2437d428e1356d01b7a8f010ba6027e9767816dbb96afb6f63e61b898a76f324130b674b3367ca9dda71b0c9f8869b166463079af87619181c95aa52863eb55bc4cf39d5fa7bf50338cd77714096d5d5d0909e3c9c944ba821a457999d87a52a575789e7f1390eb118bcaa5225644925d44b37908852b8d01ee00e45bd237925f34cf45e55fc2daa9223364207157891c0b6917fa3edcf2e2872deea10dfb6e95a4f92c261bd28d026ae30c63dbf05327bf2d1cd1a0c3de050abc55b88e12cc3ada30e124eafa0ce6bbe582f804b5b8cc146535028e9b56bd01646b2ee87f26e19b8e6f79b6417c4bcb1ad0cebf1cb4f21e015386446b7be0e5b911ee8eb1de0195860370a05befe829db18446eab1cfa9a27b2444b9322fff202ee9d0bf1ea507a9373f47fa8f561c4469d68601f77b5d8c4f65e32d789ea9b07c33ba6210e41b5f52282fb6fefabaa35efffd2e8fc90b57bbcd1c1c650304b1ba21ab1de0feeb35acfd345faf2934733ca45ebd6fd29a3047129048cb5cfd9344c874368be25380cc489bf7e4cd4144c19a2969444517e9c0f930e04677861e4107391a2b4ca914cb2e9debc655d792884be38a43865f5dc7ff2df21ff7ddaea6dd53081f211f8b07f04e9e36f4b8556bdfeeeceff19720f859a715795f206dbfba137606852b88f9a035b873d0c2a013a14051d47b2724f33ababfa41c6b22acc4dfa997fafb3f4d6c3cb6a1bffe63dc2d0b12717c53e4cdf0947dfdf4d39e53ae07c7a8c28342e392c27e9603960ff165405daa764c34133cd15afcf3e223a28f9a074d666da3266f376a8541e5a2d5652fb8837a27eb61a7831d08dc685be660a9053cb300e07f9c028a1d1dacf4c27481d3075676011065682fce12104ffdc61a51e283de027c7a7a5ae6a6cead5d3c4e0f4cef455a1bc4bfb5100063eb9748d9dfc4081451bfbb7526e47f45fe8f819d0eeffcdc475067c2e993e7fa2f2c25d289b49adee945b9383ba437b38800cb419d2df36d561b9043076f55d5c69b29036811e33d8b7e4e55d4bf0b8356b0c7d08b07c63bbd079d8d04e69c42a18a2481f73a2fcabae654f8e290cacb9ce8ea84e5db13eccc0d67797997f26bc3bf650e38d61f2062f71ca0354b68b22ccdd4f963536a09d6930b7c78e96719dcc1dfec33ccc42e332caea1e91eb9a4902f8d8065576e4683dc8ab6ef29949c77c0bd514d999cd288236cac411c8b7919e02c4a5ad4e5557c04c45635b91d3ddade9334a0780fffae405860f786ea57792584c712cd3f0f2d685fa7f3f98f564ae1189e5ef3674e98824a7abeafcba4c2eb947668a9d060d01fdbd7da29e931ff1f3b9e7d0ddb31894585c67213c85b37d38ae3415b4fcb25fcd5020498a1cbf7507501cc7f80743a9fb78727d4b0999661c49247ad29cdfe85ae2f9c4c4529c45de9e1fcd7b1da06eba589535abe2fcaec6eaec57d9a8d92b9144717da6d7971793cf2a307fb9ef4bd5c06af6d4f47d6a2ad51fe296e3f18bc9e3219956bd672e7e14affe87ff20376c8c3f048ac082d7e0231c1aef3e8216de66e45068adb51540f37185f52ae93ef184157af27f779a4ccd0c3c9ec81a079b8e9a935ef29cdc7e8f4f31d5728390fc642ec39502c2f401ef1df17c44313eb12b35ceb680dfa09c08c14783ae3369d9fca2d34de322cb011d122d91b53b03f0668839a18268a229499b21caab1df6c2165f5f7d5ddf374a10ea5d383dc42efadb49585231758fdeedcc6c43a5147a0762fe8aa664f29349f844ebcc4da8ffe5e6c9728379c30de3aa4574fc27b8cb9fad5131b9143b945fbf8d1f8b4f82b6eae8f1c3b55ed5bf0bef7635f5b84d24cf14feb4f8ef67a3dbbd920977451ba84006375044316e300a51663e166f9bd671173f12418c28639b76c51c6233dfaa004cdaa8d8a4e925200fa6bf179adcf7566c9fe10d126c33cd8f4132b4c1ebbfb6992d8491aebb6deb304a7e2e94e79bd19ed3512e81bf7a1c14b485d262ebc448b3e2b54532dee0e2d52bda345f76fc18cfbd11590f83d878925e383bebdc0c1538ff3c1d055f2ea015e6abfaca4761cec48840e143106b76dee6e987226b5a4c3571f1335b0bb86a94287b4d3321d9b4fa53b7fdc9d3ddcc500a905d467b9a74769287801b03141d3fe78b50b5d5dda791d1c63ccf987c554a34d28b0929a6891d5fefc4c9163f4e47805ac2a3e3eb03521a2e5978cc1e6d30053b22b8180a74ef5e78d1a8547ef3f8759a00baff1720b2737259ed978a793edc38caf647e6c97aebf374edd20701ab44403a12a29a029582868bc553a0101c578067e0b66e3bc7ea46c8943a0002f7cfb0eca40db170119002891f18e6430b12d1522020a18ef3283a1e85a02d9ebc134c85029a485087c87d75c80abf03fef01b18c6765562fd2015cf1e14d4dbea185353152add902aa3e1bb949fabfbbc52856404d1d2e06957e7438e1f9eeab600bc6c0ab357ce6b0906f3f64f0da7889594cf8e61e2f4eac90a48dd6a6fe69d979e4e90a045972759d07aa2d604212f5d89409bb9c6342fcb73589571c1c5e07c0f8d98fffbccd87ccd3da400604028a4c89896d2dec65caa6c6fdef8aafc299c58d047321f6d737a04ddc43bae7748d441e7a9bad50dfa3506fc2cfb8b34cea3d86083b1e7941abc9517b07231b68ecadf9fccd98d82f46937d561845f9f96425d38b50585833a8cd326203815bd94f14705f85c4dc7a761e433f74f1347a9393940fdf6a1c8be1579c636f94ba453d8757054acaa852b3091125efd3aceaabe07a5f5bddcc202ee2d383b51d2641d1cdd254ed4d176bdbf459077027adc362a711a5b90a371c3ca866903082ba3af4bd32f47cf0c1bb1104e39c2e731d2d352d9f4468a8aa2b20c2209ccb5e2f244c5d37a2a9cb57e866366d5d9d1762a07cb484387fd888abc70bcc66900e890bcd9f321e8e33c313ed9a028496c7b0468a3f20bba6097c91a14a82643bcc4fb06c9f99f5be1b695f00afa1fe0e858de5ed434f7bd876266dfc061c694a940d569a13ed19a2a4af4e40a716e2defb08946d98d8373a7dcdf9d22b2b", "19fa4c1751550bf8a74e1a36e8b7a9f3c0e333ef201f50f7d004b29cbd1cb71c84213e2042f98e4c01ca4b18a67984dfaf6f8a4128812febf4007b1bc66760f1d47162b25e86c63f9a4ac49a6c1623b54da33ddf971230044f306b03864a95d4575ef178c914b0d1f96a9fdd91c193096e7b6ebc0d5c9902f93d42e96164481eb20d2ee7b906aabed87d2d7cb302ea181dd1a9818e8a4f82ce022782f0b7575cd227c8d3f5d256aedf1e2a3c44ad5f7fbae916945fde540b1a73a35cda6674713f399fd63707d9d657282245d7590b393529295088a3fa188ddefd075ace5f509783be814c0b183cb923253190748566f3141792ec7d195e71361b138256e8e2fe92e1f622466427e3979f99281b94c6c2b3bfda1cc47602d0deef68132c7290674e27516abccda0d67454225f8cd56a696f5ec4287e18078dac949c94ad9d9f489b1d833df51a081a3b94f871deac5aea3997363dafde1e724218f6fd70987e8f9cb7ad3f1cd70c7fc64fae42fb3bc94febf28688a97ecd5ddbc23b4100554e4fac03c6c258274154ac46540f5037f4095eeda84615e476df066000006820115aef9e7cd67bd866eda9f7808960df042035cfda78aedc8dcb1bc690cc75301abaaea74989dcce15c62b7787f908da929e75663f1b9faf840278ea43e2a3b73b5d828661f2316f5200f4156a65f7e6c1f1133743bacce4a0e8802ef19721830f71c1b349b17bb0dc725ed11d98191d992989d101b2c94fe1b884e122fd63e8e3772f5258cfdbdfdf61d08e906721b1ff76549277cd4232f40ed37b718ba921e2c103824bdeca22c756ce54aa7f72a9a534b534f5ba7773e701ec67bf0288dec6543750e88c48a8856d8d7900aea7645862c28cd7cd9013a81032630ccbf918c0eb8d0b357f17f68098a8f468b5c5e004bddaed2c48f1431b41cfc80cbb6f420b666c104c2e0c547ec0a3a1cc17231e6db597cf368e0680279759ac7eca1f35376311ae99ee2980d6f86af958525f7e9f96286bb4a622dfc8530915d8eb41268c9fcd5c2045c55e87012ff59e46ccbcd50c070414eb42b43d5428760522bc54b9e8b9e72d15107ac3bf12bc739ff7a03df8885613270586cb4f16bbab840d8b5dd2c96008088c9fa70adbc9b97b089d1e0da07fdbfcc9f36dbd5fd8e85fc671498234d6de82e57feb1833040be5111015f7d8956fc8f72994fe71e1d7016855a83715ac563b1f9e577fa18690da974fa07913116dac024a78635cf58c2d2038cba68914f6949a31ea1c6554c299a064812f4a5234b3981e842d2c458816526528a0da5d2a2262f95e57d6c83aeb68ca2c44fda24dfc0d2ac7c1d89a9e3dafa2ad0a6d440e52661200eee607ef7906e98522559736426df7deb1baa63b58a8adce4b99ef2d0dcd633374995d2429223530eb8d75a2362a3b3d8e6130f50766de16c4ab83da90c4a9a2e64ca8ff6601c174efb89460dbf19e45df86a389e8cf125aeca0d1dff0f61b4df7c79db4b35e9f29d239087ba8b811a11ff51eac5d3343faa09302720d6b1bf461d3ca3de04687625cba7890ab6686676c46249c2d682081d7ab2147ea79d49bf3d08f7af01e017e3108175f1f8b0057dc60c483f4c37bc6cfcc6ce1488ce2ac49f2ed5caddf20af203801e239c68f3fbe97d6e06cba832584b29531ffd65f755282d7c4fac0f899ded4d018a2964afb4bbe96cbc3ca2e1e6395e62e96a49298543ad94845a10804709644129f660e233251f2d3e991c6d4132e8b174d38ee8f86a5225c0039ac6ba839c6371f50e9a5033da618946c2e9b9cfbd9a4ae8ba8fce12f2e481825d493ae93e112e010eb40fb93ca721f9c3924859d5183895cc796b0d8def5e9676fa88357547801cfbf6e570c9f89f6daeb3ff72e5a4e41074012d11493647919085001a4a8edb5c1a8701cd7d8ecfa35ff701c43e78da0262a457929bac394cda619092dbf494c714523b2af7b13877b7bd34892111fecbf320b33a61a3f8c91e188674fa768ab3bf9a00b22db4c221e28a2e3f61784c7b8b2a772c2a3bbf17cd07bfd1a215e29286a5ee63459d82c50682faf8b2a0b3841edc99dd14e7162126aa73275029231e11df6f44ac607697d6daf8e848cd9acd0512a8887138b744d12f61e66623eaf6cbc1cbbcc2d38af66624d450664e89a18af407bcc7792805e9872993f49d5b2d9526ad57bce6cf8bad2de00f2a13378f311da270382437808215b7a1dd493f1803a79505713379d9635bb417385614565033308b431c9ac2c0ad6cd6dd090787d45cf74020a9acb5730cdfb857e38b15e638fbdc4d63feebba9ee28b0a4c37f3f6c09cb1cb2a293a62893b9db0caf4067bf3cea4f642f7226a54d0d500dbad8fd61510051527873cf8c811b69c2b4d4c72f5a73d660bb93aa81855d5c86c3eb4d1f1eee975fd02412fda7261f610cd8fdc45e2e76ae4af62dcf9a38c6eb4a973999ca2a61544334ded93a749e564a1f138e67e9e1a674e6892c8de88f66c69f3c0f0fc25e677f46f77297a8b49762150fe20f9e939028f8a7004021151e077ee414faff12973a5caf7dfc087f6edf7a4571a7a4afc4130e01bf42744504409a8717432b19d66cd53fdd348a053522ccdf10c11f73b314704a01def407aaa4b22e0b0771aecdc535dac8a7d2a7117e1c217926fea34a22c09febde60dc975f499d9f5f228737f6dc27e02f8c79332d2046d51ce2aa119b09034eaceb0e530e7fffd616488ad95a095d669c7c689f4fc11810326693b6cb917c1f8d25c35777767c374c314cc25af0921b9dc945e927e915939847a85bf39ecb2c07d4e568ae7d1d20770daa8935c67201172c4ae6d709c944cc7044a1e1d41566418a1b07018618b39a89c42ec9930e2c108400142e7f51e382d2661a59fc17726fb2ca13c08b806ec943f86bbd7861d6afcc4c2157486cadb2cb4e83fa4dc757b0710a129fc1983c66f16bb62e917cb04dc7011fb111ebb29fcb3fa54ab9e735fb9aed44e58f89fccb8e4dab627ad29747e459f045bd616f87d3e8414e24ce4d61e61c7cc4586f8b4fa2cc1043dd927decd1021010535a78c662a5cbb0fefd835a4d600d24ae5bc02674f5e1af323fbe901f707099738233deca79548586143434094cf917cc06e88535702e8223c2491b13a4fc09d6da0bf411088bb1169a81434e6d086867551f5fb5fa4bef99c65fe6e3e095a9163d590bc771d9fc5b6cc00f683a04bed46a1a441ec3bc14b0609682aa4cd0dbc8b6732770e97fc17414938a6d0bc3ff7b9e70d11a31363f6cf9be998e14d6ebbd50de9d23f14362eb47fb0f75b797b890e136d8132091b7d92601cb4ec75531b34fff254797df9cb8be0a99dc2ec7beed21fb74fe32bfec422c7fddb0324f59f471989b5e1f75a4097a13b95d03606e2ad15c6e996b229dfda1ca55e055fcf709ca1630fe67e01f449cd5f232d643aa986a9ea3e03911a0f0db320d608283da04be1cdf99280a52f9341db398ca1423c87f8aa48c983f8a604ebc07db1bcb1539462de6287f93ee210fa1a9f8ab0445a775392e7c49fe67d8f6c90dbd819a28af3c720109c69654f2e7734af437ef14a9ec53a296a0cbe359c2083c770789c5d7e49d81d7d58f4e91d0eebc4602c446580002a573324470548fb25ccf5632ac150f37b77a7524d50b9801927ff7c25309dec7eb47c92609d4ed5f285a5b8ea081d4aea71cb40165cc3f688be756c9db4a67e988e9766172abe4cf8e99f05c4610d1a4cddb198cbb03b59b31a7c3f2dad9633bdb93cadcee05e02adf057e5aa8dad88327bc1c666f6454513c60f3f4bd8f4530079bb595729bf5ea9df3518854964a0969e38684cb8825d7cdfba4671264008aab2c458a8524917b020c880fd28437065e8ccde66458adafa32358e02484c495cfb339c370819ffb72ab08bc57a01f3c9cd347fafd655b50176ecba649846f63e6f7eb75c994b07792bb65d06297dcca1e1cea2552f88ef61289701f55ccbf69d2f10657b211daeb0160420b9b2063f514adffe35a0ad5d300c9d8bf9901346eedb2c564bd9c6a7ee47314a1d89062e98e5d20c5827595fcc7625e19630b9c18cc6ad9c9b2c662c212d8b7329291bd8e59726937d5873e6f3c995cf0d8e580a3befe1258f8b5c14e2a457dafb02bb8007acdd62cc83601f09f979d37eb8a11b097484ed33f966620a004b525a80c8e6a789f7b524e30a58ec6cbbb10767591bf089ca272c6f7080387ff4bfe5c84fc9be9caa2e99400374ad8056cf73aa3e0a69fc9af6be305230390f81f4fe9ee9af494379458070d56922e48eeb354c13ec21cd5e4e8ead89869b099f2a5ab08a14ffc0e013d6ffdb2630f5cd08898e1228157b65b7486a0b496d12e5486589bf9a6925284f478c1b284e4ad6488b2115991715dac67bc50d4e3918264016ed6743678b3491a56a40fb4731b62294ac5e404802e29041f447ed274ceec24f148a91df0a1f9285a82b41f08159dfd8a929462028cb7d98c653a9b3e93cc0805e71d381d3422e76390b654cd2208d1b88ef2a44743f3e001b6952a4afa263db9bf39b8cd4c4ab39f7ffef207f7cd916f0ff51754ee00eefd33003327b7280220471a5e9a21285e767b9339aa4bf226d8bfbfd82fb3a690ef752a1750576015d212270863bb2f1ed03857606384ecdddf2f1ea19049cd06f3fdf7f48580d043499fcba8a5a25ab0700faf666555010509ac924c7b429986620079b46f976ba20cd0e8800e259cbfcd345057ba290e790a1d31c959cb15f57518bd2430ec69bc28d24df665b957a9cc18a1ec525c29ae85de3a5a2d632912af071ba16fd8ebc5c0279002216a547bfcad3b915be5ed42f1b0b27b0ff6f8ac3a356eb67f4b20381eee88a810017011e461393a651652660a3a560aeae398df83ce0f9ac7e2c4e1621a7880016808755596b25c8da914894955d80623a715fc79024111cbbe295f232d9e4e8abd26d6753ca23dcd84a800e8a0ead85cac7a201338cabe7f28faa25190bf3aa506e06fc7f166c9aeed8e4ba0e3c3bf51b18f6fb53658f86419a995e96d9a97400c9b1b37988bbebf419046b9db5ed444481520a778123766b0545d8906487b161e2c2e87994a52badc8ea646ed768749bd9180c5f137e14fda79f867a512c500ed241d02ccaaeb6d1fa0bd7d67946acc4aa14182658252854402d4b6262d37692fa19810616a2bfd406084a7e2a8e8b97cdfdb1cb0440dbfb06b45deea5645ce93eb716decba5363e4d3d3497880f906bd682c62b945cabdca17c13d7e70cebe33fdef84928282b52a0b0ea6461ff8af2a6d27bad469272b79ce05d2f273c8a71dcf707f2e214a2668bcb3f2b790a0db4196b23cafd7e0d09a8dade805d8080c7f94deb1c98c98e087fab2304335077d99e6e1255c1bb0c4d42b470ad99c900b9b652feeb3285fef32aa18a4de85ee8541fa994e37ccb276e843b08ed339f9f66da68c9c3ab2bd8258d62c1d49df772fbdaf1ba3b1b19aa91af160b86ef6d94379dc61b81d519b653cb758278546a20fcdf3171afac0306b3e62ea5d49103a0d26fa125132cbe7a887490c814872a97903b603998915dac369e26d548f62b60e563cad0f6d07fe37ce2975630fb3b011e388618a2b11ea3fcca0fca5976ee5b35d67354504a59827e7789c9f77d99e32e846acf79f34f25ba1efcc363749416304a669d5f665c40c18bbbfb6846e82bfa0ca0aa6eee4a19547a1daa17a60a1a14b527b1475ea3df7230097e83f10c3eba55e17acc064547b"}) 295.003337ms ago: executing program 1 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x43) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 0s ago: executing program 0 (id=31): socket$kcm(0x2b, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000280)=[{}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 74.780295][ T5754] cgroup: Unknown subsys name 'net' [ 74.914657][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.651615][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.808074][ T5768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.817206][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.827355][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.836093][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.844686][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.847419][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.851928][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.859958][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.875012][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.875392][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.891204][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.896932][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.902135][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.913271][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.927751][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.936111][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.943701][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.948108][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.957036][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.959458][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.972987][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.985128][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.994953][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.008270][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.500717][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 79.542470][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 79.638219][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 79.706029][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 79.770167][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.779329][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.786804][ T5765] bridge_slave_0: entered allmulticast mode [ 79.793690][ T5765] bridge_slave_0: entered promiscuous mode [ 79.821347][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.828869][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.836101][ T5763] bridge_slave_0: entered allmulticast mode [ 79.843710][ T5763] bridge_slave_0: entered promiscuous mode [ 79.861914][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.869773][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.877163][ T5765] bridge_slave_1: entered allmulticast mode [ 79.884030][ T5765] bridge_slave_1: entered promiscuous mode [ 79.895113][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.902623][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.910015][ T5763] bridge_slave_1: entered allmulticast mode [ 79.917344][ T5763] bridge_slave_1: entered promiscuous mode [ 80.005850][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.013755][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.021518][ T5764] bridge_slave_0: entered allmulticast mode [ 80.029999][ T5764] bridge_slave_0: entered promiscuous mode [ 80.038845][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.046340][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.053664][ T5764] bridge_slave_1: entered allmulticast mode [ 80.061666][ T5764] bridge_slave_1: entered promiscuous mode [ 80.071630][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.084158][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.107602][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.120599][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.188019][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.202773][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.224711][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.232016][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.239676][ T5766] bridge_slave_0: entered allmulticast mode [ 80.246625][ T5766] bridge_slave_0: entered promiscuous mode [ 80.277661][ T5765] team0: Port device team_slave_0 added [ 80.283991][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.292505][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.299899][ T5766] bridge_slave_1: entered allmulticast mode [ 80.307383][ T5766] bridge_slave_1: entered promiscuous mode [ 80.316992][ T5763] team0: Port device team_slave_0 added [ 80.337681][ T5765] team0: Port device team_slave_1 added [ 80.365816][ T5763] team0: Port device team_slave_1 added [ 80.385738][ T5764] team0: Port device team_slave_0 added [ 80.395725][ T5764] team0: Port device team_slave_1 added [ 80.439573][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.446664][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.473091][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.508747][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.515847][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.542584][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.557173][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.564182][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.592213][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.614940][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.627705][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.637576][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.644606][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.671086][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.690218][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.697384][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.723332][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.739988][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.747138][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.773169][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.811518][ T5766] team0: Port device team_slave_0 added [ 80.820365][ T5766] team0: Port device team_slave_1 added [ 80.869217][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.876282][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.902679][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.951456][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.958617][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.977325][ T5775] Bluetooth: hci2: command tx timeout [ 80.984722][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.018245][ T5763] hsr_slave_0: entered promiscuous mode [ 81.025052][ T5763] hsr_slave_1: entered promiscuous mode [ 81.052833][ T5764] hsr_slave_0: entered promiscuous mode [ 81.058637][ T5775] Bluetooth: hci3: command tx timeout [ 81.064766][ T5764] hsr_slave_1: entered promiscuous mode [ 81.070615][ T5776] Bluetooth: hci0: command tx timeout [ 81.070869][ T5775] Bluetooth: hci1: command tx timeout [ 81.082478][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.090805][ T5764] Cannot create hsr debugfs directory [ 81.102051][ T5765] hsr_slave_0: entered promiscuous mode [ 81.108476][ T5765] hsr_slave_1: entered promiscuous mode [ 81.114890][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.123224][ T5765] Cannot create hsr debugfs directory [ 81.272236][ T5766] hsr_slave_0: entered promiscuous mode [ 81.279560][ T5766] hsr_slave_1: entered promiscuous mode [ 81.285856][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.294343][ T5766] Cannot create hsr debugfs directory [ 81.595477][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.617650][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.646188][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.658599][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.751604][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.762760][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.772551][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.782818][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.874354][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.900717][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.913639][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.928538][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.074765][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.113411][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.122443][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.149037][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.198918][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.229023][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.297710][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.311171][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.318781][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.343383][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.364166][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.371672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.426173][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.465841][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.525610][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.533014][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.544163][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.551397][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.564966][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.572235][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.652929][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.674308][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.681979][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.839561][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.940795][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.974523][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.981993][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.023469][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.030687][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.059109][ T5775] Bluetooth: hci2: command tx timeout [ 83.137515][ T5775] Bluetooth: hci1: command tx timeout [ 83.143010][ T5775] Bluetooth: hci0: command tx timeout [ 83.150349][ T5776] Bluetooth: hci3: command tx timeout [ 83.244310][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.407796][ T5765] veth0_vlan: entered promiscuous mode [ 83.434993][ T5765] veth1_vlan: entered promiscuous mode [ 83.520299][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.613222][ T5765] veth0_macvtap: entered promiscuous mode [ 83.634441][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.659325][ T5765] veth1_macvtap: entered promiscuous mode [ 83.701369][ T5764] veth0_vlan: entered promiscuous mode [ 83.742468][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.759806][ T5764] veth1_vlan: entered promiscuous mode [ 83.774536][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.790266][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.803939][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.813246][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822660][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.832171][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865588][ T5763] veth0_vlan: entered promiscuous mode [ 83.971439][ T5763] veth1_vlan: entered promiscuous mode [ 84.018724][ T5764] veth0_macvtap: entered promiscuous mode [ 84.043195][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.061960][ T5763] veth0_macvtap: entered promiscuous mode [ 84.070073][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.071036][ T5766] veth0_vlan: entered promiscuous mode [ 84.095994][ T5763] veth1_macvtap: entered promiscuous mode [ 84.110004][ T5764] veth1_macvtap: entered promiscuous mode [ 84.140358][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.143453][ T5766] veth1_vlan: entered promiscuous mode [ 84.154157][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.190021][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.201022][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.213845][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.260755][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.272236][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.283559][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.294932][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.308049][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.320049][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.332018][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.344683][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.381353][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.391949][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.408504][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.421644][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.437921][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.449993][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.461829][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.473437][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.485769][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.532168][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.541186][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.551074][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.560555][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572160][ T5766] veth0_macvtap: entered promiscuous mode [ 84.584075][ T5860] pim6reg1: entered promiscuous mode [ 84.589820][ T5860] pim6reg1: entered allmulticast mode [ 84.650145][ T5766] veth1_macvtap: entered promiscuous mode [ 84.774476][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.795075][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.809501][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.834547][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.847606][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.881438][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.892232][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.903735][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.916206][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.939419][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.972770][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.984250][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.995386][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.006920][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.018327][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.031561][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.059016][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.071388][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075582][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.091014][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.100527][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.109637][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.130594][ T5866] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.147276][ T5775] Bluetooth: hci2: command tx timeout [ 85.175829][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.207263][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.218477][ T5775] Bluetooth: hci1: command tx timeout [ 85.224840][ T5776] Bluetooth: hci0: command tx timeout [ 85.225018][ T5779] Bluetooth: hci3: command tx timeout [ 85.354634][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.374573][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.398665][ T5870] Bluetooth: MGMT ver 1.22 [ 85.412733][ T5870] Bluetooth: hci0: service_discovery: too big uuid_count value 16384 [ 85.436558][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.444449][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.593176][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.630029][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.885255][ T5880] syz.1.11[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.944828][ T5880] loop1: detected capacity change from 0 to 1024 [ 85.980040][ T5880] ======================================================= [ 85.980040][ T5880] WARNING: The mand mount option has been deprecated and [ 85.980040][ T5880] and is ignored by this kernel. Remove the mand [ 85.980040][ T5880] option from the mount to silence this warning. [ 85.980040][ T5880] ======================================================= [ 86.042638][ T5880] EXT4-fs: Ignoring removed oldalloc option [ 86.051235][ T5880] EXT4-fs: Ignoring removed bh option [ 86.095002][ T5880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.108040][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.161997][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.304454][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.306537][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 86.337769][ T787] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 86.366132][ T787] usb 3-1: config 0 has no interface number 0 [ 86.397915][ T787] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.437301][ T787] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 86.455706][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.474170][ T787] usb 3-1: Product: syz [ 86.480151][ T787] usb 3-1: Manufacturer: syz [ 86.491272][ T787] usb 3-1: SerialNumber: syz [ 86.516997][ T787] usb 3-1: config 0 descriptor?? [ 86.531027][ T787] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 86.546560][ T787] em28xx 3-1:0.132: Video interface 132 found: [ 86.968430][ T787] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 87.145009][ T9] cfg80211: failed to load regulatory.db [ 87.161200][ T5910] loop1: detected capacity change from 0 to 256 [ 87.195935][ T5910] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 256) [ 87.217124][ T5779] Bluetooth: hci2: command tx timeout [ 87.297755][ T5775] Bluetooth: hci1: command tx timeout [ 87.303486][ T5779] Bluetooth: hci3: command tx timeout [ 87.305643][ T5776] Bluetooth: hci0: command tx timeout [ 87.347835][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.362519][ T5912] loop0: detected capacity change from 0 to 1024 [ 87.551456][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.578618][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.596165][ T5912] hfsplus: catalog searching failed [ 87.605337][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.632093][ T23] usb 4-1: config 0 descriptor?? [ 87.664771][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 87.723624][ T5917] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 87.724565][ T49] hfsplus: b-tree write err: -5, ino 3 [ 87.741739][ T5917] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 87.748643][ T5917] syzkaller1: Linktype set failed because interface is up [ 87.754808][ T5763] hfsplus: node 4:3 still has 1 user(s)! [ 88.069475][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 88.090635][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 88.112930][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 88.137576][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.191269][ T787] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 88.211683][ T5878] em28xx 3-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 88.226543][ T787] em28xx 3-1:0.132: board has no eeprom [ 88.316575][ T787] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 88.331914][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 88.340484][ T787] em28xx 3-1:0.132: analog set to bulk mode. [ 88.360603][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 88.370506][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 88.384902][ T787] usb 3-1: USB disconnect, device number 2 [ 88.396684][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 88.417758][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 88.446780][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 88.473742][ T787] em28xx 3-1:0.132: Disconnecting em28xx [ 88.498674][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 88.514802][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 88.551709][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 88.571878][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 88.606571][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 88.628730][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 88.646629][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 88.676857][ T23] pwc: Registered as video103. [ 88.703071][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 88.733559][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 88.764208][ T23] usb 4-1: USB disconnect, device number 2 [ 88.767151][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 88.804546][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 88.822280][ T5770] udevd[5770]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 88.841655][ T9] usb 3-1: Decoder not found [ 88.848821][ T5770] udevd[5770]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 88.858714][ T9] em28xx 3-1:0.132: failed to create media graph [ 88.898168][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 88.942795][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 88.953060][ T5936] ================================================================== [ 88.961294][ T5936] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 88.968718][ T5936] Read of size 8 at addr ffff88801e3d4738 by task v4l_id/5936 [ 88.976217][ T5936] [ 88.978568][ T5936] CPU: 0 PID: 5936 Comm: v4l_id Not tainted syzkaller #0 [ 88.985675][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.996205][ T5936] Call Trace: [ 88.999523][ T5936] [ 89.002488][ T5936] dump_stack_lvl+0x16c/0x230 [ 89.007209][ T5936] ? __lock_acquire+0x7c80/0x7c80 [ 89.012392][ T5936] ? show_regs_print_info+0x20/0x20 [ 89.017646][ T5936] ? load_image+0x3b0/0x3b0 [ 89.022654][ T5936] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 89.028087][ T5936] ? __virt_addr_valid+0x18c/0x540 [ 89.033242][ T5936] ? __virt_addr_valid+0x469/0x540 [ 89.038495][ T5936] print_report+0xac/0x220 [ 89.042970][ T5936] ? v4l2_fh_open+0xca/0x430 [ 89.047601][ T5936] kasan_report+0x117/0x150 [ 89.052334][ T5936] ? v4l2_fh_open+0xca/0x430 [ 89.056977][ T5936] v4l2_fh_open+0xca/0x430 [ 89.061439][ T5936] em28xx_v4l2_open+0x157/0x980 [ 89.066320][ T5936] v4l2_open+0x212/0x360 [ 89.070580][ T5936] chrdev_open+0x59e/0x670 [ 89.075005][ T5936] ? cd_forget+0x160/0x160 [ 89.079438][ T5936] ? fsnotify_perm+0x3ed/0x5e0 [ 89.084219][ T5936] ? cd_forget+0x160/0x160 [ 89.088645][ T5936] do_dentry_open+0x8c6/0x1500 [ 89.093423][ T5936] path_openat+0x274b/0x3190 [ 89.098029][ T5936] ? __kasan_slab_alloc+0x6c/0x80 [ 89.103124][ T5936] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.109285][ T5936] ? verify_lock_unused+0x140/0x140 [ 89.114488][ T5936] ? do_filp_open+0x3d0/0x3d0 [ 89.119181][ T5936] ? __virt_addr_valid+0x18c/0x540 [ 89.124318][ T5936] do_filp_open+0x1c5/0x3d0 [ 89.128905][ T5936] ? vfs_tmpfile+0x490/0x490 [ 89.133611][ T5936] ? _raw_spin_unlock+0x28/0x40 [ 89.138468][ T5936] ? alloc_fd+0x58f/0x630 [ 89.142807][ T5936] do_sys_openat2+0x12c/0x1c0 [ 89.148114][ T5936] ? do_sys_open+0xe0/0xe0 [ 89.152544][ T5936] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 89.158556][ T5936] ? lock_chain_count+0x20/0x20 [ 89.163499][ T5936] ? lock_chain_count+0x20/0x20 [ 89.168381][ T5936] __x64_sys_openat+0x139/0x160 [ 89.173262][ T5936] do_syscall_64+0x55/0xb0 [ 89.177708][ T5936] ? clear_bhb_loop+0x40/0x90 [ 89.182402][ T5936] ? clear_bhb_loop+0x40/0x90 [ 89.187089][ T5936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.192993][ T5936] RIP: 0033:0x7f3718aa7407 [ 89.197413][ T5936] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 89.217471][ T5936] RSP: 002b:00007ffd33fed770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 89.225892][ T5936] RAX: ffffffffffffffda RBX: 00007f37191db880 RCX: 00007f3718aa7407 [ 89.233867][ T5936] RDX: 0000000000000000 RSI: 00007ffd33fedf1e RDI: ffffffffffffff9c [ 89.241880][ T5936] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 89.249875][ T5936] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 89.257948][ T5936] R13: 00007ffd33fed9c0 R14: 00007f371933a000 R15: 000055a8e9b474d8 [ 89.266039][ T5936] [ 89.269078][ T5936] [ 89.271402][ T5936] Allocated by task 9: [ 89.275645][ T5936] kasan_set_track+0x4e/0x70 [ 89.280244][ T5936] __kasan_kmalloc+0x8f/0xa0 [ 89.284940][ T5936] em28xx_v4l2_init+0x10b/0x2e70 [ 89.289979][ T5936] em28xx_init_extension+0x11c/0x1b0 [ 89.295277][ T5936] process_scheduled_works+0xa45/0x15b0 [ 89.300834][ T5936] worker_thread+0xa55/0xfc0 [ 89.305457][ T5936] kthread+0x2fa/0x390 [ 89.309633][ T5936] ret_from_fork+0x48/0x80 [ 89.314092][ T5936] ret_from_fork_asm+0x11/0x20 [ 89.319054][ T5936] [ 89.321564][ T5936] Freed by task 9: [ 89.325366][ T5936] kasan_set_track+0x4e/0x70 [ 89.329961][ T5936] kasan_save_free_info+0x2e/0x50 [ 89.334992][ T5936] ____kasan_slab_free+0x126/0x1e0 [ 89.340105][ T5936] slab_free_freelist_hook+0x130/0x1b0 [ 89.345570][ T5936] __kmem_cache_free+0xba/0x1f0 [ 89.350427][ T5936] em28xx_v4l2_init+0x1670/0x2e70 [ 89.355475][ T5936] em28xx_init_extension+0x11c/0x1b0 [ 89.360857][ T5936] process_scheduled_works+0xa45/0x15b0 [ 89.366409][ T5936] worker_thread+0xa55/0xfc0 [ 89.371008][ T5936] kthread+0x2fa/0x390 [ 89.375080][ T5936] ret_from_fork+0x48/0x80 [ 89.379502][ T5936] ret_from_fork_asm+0x11/0x20 [ 89.384381][ T5936] [ 89.386727][ T5936] The buggy address belongs to the object at ffff88801e3d4000 [ 89.386727][ T5936] which belongs to the cache kmalloc-8k of size 8192 [ 89.401247][ T5936] The buggy address is located 1848 bytes inside of [ 89.401247][ T5936] freed 8192-byte region [ffff88801e3d4000, ffff88801e3d6000) [ 89.415358][ T5936] [ 89.417713][ T5936] The buggy address belongs to the physical page: [ 89.424146][ T5936] page:ffffea000078f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e3d0 [ 89.434912][ T5936] head:ffffea000078f400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.444046][ T5936] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.452396][ T5936] page_type: 0xffffffff() [ 89.456763][ T5936] raw: 00fff00000000840 ffff888017842280 ffffea0001f30e00 dead000000000003 [ 89.465463][ T5936] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 89.474059][ T5936] page dumped because: kasan: bad access detected [ 89.480593][ T5936] page_owner tracks the page as allocated [ 89.486425][ T5936] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5588, tgid 5588 (dhcpcd-run-hook), ts 58997717690, free_ts 58865260974 [ 89.507444][ T5936] post_alloc_hook+0x1cd/0x210 [ 89.512260][ T5936] get_page_from_freelist+0x195c/0x19f0 [ 89.517832][ T5936] __alloc_pages+0x1e3/0x460 [ 89.522433][ T5936] alloc_slab_page+0x5d/0x170 [ 89.527122][ T5936] new_slab+0x87/0x2e0 [ 89.531203][ T5936] ___slab_alloc+0xc6d/0x1300 [ 89.535885][ T5936] __kmem_cache_alloc_node+0x1a2/0x260 [ 89.541353][ T5936] kmalloc_trace+0x2a/0xe0 [ 89.545870][ T5936] tomoyo_init_log+0x1104/0x1f10 [ 89.550897][ T5936] tomoyo_supervisor+0x32d/0x1080 [ 89.556036][ T5936] tomoyo_env_perm+0x14a/0x1e0 [ 89.560834][ T5936] tomoyo_find_next_domain+0x1594/0x1a60 [ 89.566501][ T5936] tomoyo_bprm_check_security+0x116/0x170 [ 89.572247][ T5936] security_bprm_check+0x62/0xa0 [ 89.577309][ T5936] bprm_execve+0xa51/0x16f0 [ 89.582025][ T5936] do_execveat_common+0x51b/0x6c0 [ 89.587252][ T5936] page last free stack trace: [ 89.591967][ T5936] free_unref_page_prepare+0x7ce/0x8e0 [ 89.597440][ T5936] free_unref_page+0x32/0x2e0 [ 89.602309][ T5936] __slab_free+0x35e/0x410 [ 89.606830][ T5936] qlist_free_all+0x75/0xe0 [ 89.611346][ T5936] kasan_quarantine_reduce+0x143/0x160 [ 89.616813][ T5936] __kasan_slab_alloc+0x22/0x80 [ 89.621689][ T5936] slab_post_alloc_hook+0x6e/0x4d0 [ 89.626818][ T5936] __kmem_cache_alloc_node+0x13e/0x260 [ 89.632288][ T5936] __kmalloc+0xa4/0x240 [ 89.636624][ T5936] tomoyo_realpath_from_path+0xe3/0x5d0 [ 89.642446][ T5936] tomoyo_path_perm+0x20f/0x4b0 [ 89.647302][ T5936] security_inode_getattr+0xd3/0x120 [ 89.652592][ T5936] __x64_sys_newfstat+0x101/0x1f0 [ 89.657628][ T5936] do_syscall_64+0x55/0xb0 [ 89.662059][ T5936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.668149][ T5936] [ 89.670476][ T5936] Memory state around the buggy address: [ 89.676198][ T5936] ffff88801e3d4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.684263][ T5936] ffff88801e3d4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.692501][ T5936] >ffff88801e3d4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.700559][ T5936] ^ [ 89.706536][ T5936] ffff88801e3d4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.714704][ T5936] ffff88801e3d4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.722857][ T5936] ================================================================== [ 89.816696][ T787] em28xx 3-1:0.132: Closing input extension [ 89.858290][ T5936] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.865730][ T5936] CPU: 0 PID: 5936 Comm: v4l_id Not tainted syzkaller #0 [ 89.873061][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.883331][ T5936] Call Trace: [ 89.886653][ T5936] [ 89.889746][ T5936] dump_stack_lvl+0x16c/0x230 [ 89.894563][ T5936] ? show_regs_print_info+0x20/0x20 [ 89.899834][ T5936] ? load_image+0x3b0/0x3b0 [ 89.904380][ T5936] panic+0x2c0/0x710 [ 89.908337][ T5936] ? bpf_jit_dump+0xd0/0xd0 [ 89.912950][ T5936] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 89.919070][ T5936] ? _raw_spin_unlock+0x40/0x40 [ 89.924039][ T5936] ? print_memory_metadata+0x314/0x400 [ 89.929508][ T5936] ? v4l2_fh_open+0xca/0x430 [ 89.934104][ T5936] check_panic_on_warn+0x84/0xa0 [ 89.939060][ T5936] ? v4l2_fh_open+0xca/0x430 [ 89.943744][ T5936] end_report+0x6f/0x140 [ 89.948027][ T5936] kasan_report+0x128/0x150 [ 89.952738][ T5936] ? v4l2_fh_open+0xca/0x430 [ 89.957344][ T5936] v4l2_fh_open+0xca/0x430 [ 89.961871][ T5936] em28xx_v4l2_open+0x157/0x980 [ 89.966732][ T5936] v4l2_open+0x212/0x360 [ 89.970983][ T5936] chrdev_open+0x59e/0x670 [ 89.975492][ T5936] ? cd_forget+0x160/0x160 [ 89.979919][ T5936] ? fsnotify_perm+0x3ed/0x5e0 [ 89.984696][ T5936] ? cd_forget+0x160/0x160 [ 89.989212][ T5936] do_dentry_open+0x8c6/0x1500 [ 89.993990][ T5936] path_openat+0x274b/0x3190 [ 89.998597][ T5936] ? __kasan_slab_alloc+0x6c/0x80 [ 90.003626][ T5936] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.009699][ T5936] ? verify_lock_unused+0x140/0x140 [ 90.015000][ T5936] ? do_filp_open+0x3d0/0x3d0 [ 90.019690][ T5936] ? __virt_addr_valid+0x18c/0x540 [ 90.024813][ T5936] do_filp_open+0x1c5/0x3d0 [ 90.029416][ T5936] ? vfs_tmpfile+0x490/0x490 [ 90.034112][ T5936] ? _raw_spin_unlock+0x28/0x40 [ 90.039059][ T5936] ? alloc_fd+0x58f/0x630 [ 90.043395][ T5936] do_sys_openat2+0x12c/0x1c0 [ 90.048163][ T5936] ? do_sys_open+0xe0/0xe0 [ 90.052606][ T5936] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 90.058619][ T5936] ? lock_chain_count+0x20/0x20 [ 90.063566][ T5936] ? lock_chain_count+0x20/0x20 [ 90.068440][ T5936] __x64_sys_openat+0x139/0x160 [ 90.073302][ T5936] do_syscall_64+0x55/0xb0 [ 90.077819][ T5936] ? clear_bhb_loop+0x40/0x90 [ 90.082717][ T5936] ? clear_bhb_loop+0x40/0x90 [ 90.087708][ T5936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.093717][ T5936] RIP: 0033:0x7f3718aa7407 [ 90.098325][ T5936] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 90.118058][ T5936] RSP: 002b:00007ffd33fed770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 90.126496][ T5936] RAX: ffffffffffffffda RBX: 00007f37191db880 RCX: 00007f3718aa7407 [ 90.134498][ T5936] RDX: 0000000000000000 RSI: 00007ffd33fedf1e RDI: ffffffffffffff9c [ 90.142479][ T5936] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 90.150456][ T5936] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 90.158428][ T5936] R13: 00007ffd33fed9c0 R14: 00007f371933a000 R15: 000055a8e9b474d8 [ 90.166418][ T5936] [ 90.169575][ T5936] Kernel Offset: disabled [ 90.173895][ T5936] Rebooting in 86400 seconds..