last executing test programs: 16.472972839s ago: executing program 4 (id=248): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f000000a440)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x200000, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x1b, &(0x7f0000001a80)={&(0x7f00000004c0)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1976}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x7f}}, 0x4880) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4890) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40008885) 13.778321413s ago: executing program 4 (id=256): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x80}, 0x24000005) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, 0x0, 0xffffffffffefffff, {0x2, 0xfe, 0x3}, 0x2}, 0x18, &(0x7f0000000200)={&(0x7f0000000280)="a7381e6233fb7db8e435f6cf5984f07c300dd5f3b3fb8eed9efd98a2b5d00c00348f", 0x22}, 0x1, 0x0, 0x0, 0x800}, 0x24040845) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 12.002705477s ago: executing program 4 (id=262): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r4, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffb}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x2000, 0x749bc}) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') r8 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) r9 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0x0) writev(r9, 0x0, 0x0) 8.518741142s ago: executing program 1 (id=266): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904ab30632aee4d5048"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e21, 0x0, @mcast1}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab7957685ac5656be8410f2802e944af8037087c0e6b665770173fa21883431acd92000900d17c1ff500"}, 0x77) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000f80)={0x4, 0x0, [{0x2000, 0x0, 0x0}, {0x3000, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x2000, 0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000008400000691118000000000066050000084000009500000000000000c002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', r4, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009e173710ef171e7206de0102031d090212000100000000090400000002"], 0x0) 8.508605889s ago: executing program 4 (id=267): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) listen(r1, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) dup(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x74e27dc0ba178410, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$setpipe(r6, 0x407, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x5e) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000140)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 6.95651018s ago: executing program 2 (id=276): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8d485, 0x0, 0x40, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 6.250212967s ago: executing program 3 (id=277): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="e7"], 0x1c}}, 0x20024090) r3 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r3, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) 6.198850363s ago: executing program 1 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb4305400f0800450000340000000000069078ac1414bb000000000000000000000000000000000000006e8a62d3c54c30e392b59100000000fffffffc0000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x41005, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80, 0x2}, 'port1\x00', 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfc}) r2 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513aafd253d4342e", 0x6c, r3) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x0, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) r7 = io_uring_setup(0x67ea, &(0x7f0000000700)={0x0, 0x94e6, 0x0, 0x1, 0x234, 0x0, r4}) io_uring_enter(r7, 0x47ba, 0x83000000, 0x4, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xec, 0x0, 0x6, 0x0, @private0, @mcast2, 0x8000, 0x1, 0x8, 0xffff0000}}) r11 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in=@loopback, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x800, 0xa, 0x20, 0x0, 0x88, r10, r11}, {0x3, 0xfffffffffffffff9, 0x6, 0x10000000, 0xdba, 0x100000000, 0x6, 0x3}, {0x730f, 0x4, 0x20000000798, 0x9}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private0, 0x4d6, 0x2b}, 0x2, @in6=@private0, 0x3505, 0x3, 0x2, 0x9, 0x4f, 0x5, 0x5}}, 0xe8) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r12 = socket$inet(0x2, 0x80000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r12, 0x8919, &(0x7f0000000080)) socket$kcm(0xf, 0x3, 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r13}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c}, 0x48) r14 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 6.156624768s ago: executing program 3 (id=279): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) sendfile(r2, r3, 0x0, 0x1000000003fffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0}) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 5.943398006s ago: executing program 2 (id=281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@nullb, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x6, @sliced={0xd, [0x9, 0x4, 0x7, 0x6, 0x7ff, 0x9, 0x72, 0x8, 0x2, 0xea4, 0x9, 0x4, 0x40, 0x4, 0xe, 0x6, 0x4, 0x4, 0xe07, 0xfff, 0x7, 0x5, 0x101, 0x8001, 0xd22e, 0x8000, 0x7ff, 0x8001, 0x5, 0x3, 0x7f, 0x8, 0x1, 0x100, 0x8, 0x5, 0xeea9, 0x9, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x89, 0x9db7, 0x0, 0x9994]}}) 4.769937651s ago: executing program 3 (id=282): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40c8, &(0x7f0000000040)={[{@nombcache}]}, 0xfb, 0x496, &(0x7f0000000f40)="$eJzs3EtsG0UfAPD/Okn7fX0llPJoKRAoiIpH0qaF9oDEQ0LiAAgJDuVo0rQqdRvUBIlWEQ2oKhckqMQdgbggcebAiRMCTkhcOMAdVapQLxRORmvvGsexHdd14jx+P2nrGWfsmf/uzu7sTtcBbFij6T9JxLaI+C0ihiOi0FhgtPpy4/rc5N/X5yaTKJdf+zNJPxZ/XZ+bzIsm2evWamYwfSlcSuLZJvXOnL9wulgqTZ3L8uOzZ94enzl/4YlTZ4onp05OnZ04evTwoYNHnpp4sidx3pa2dc9703t3v/jGlZcnj11588evk7pG18fRG0MxX7dOGj3c28r6bntdOhlsW7Sw7I2hY5sjKh11qNL/h2Pg0o7a34bjhQ/62jhgWZXL5fJE6z/Pl4F1LIl+twDoj/xEn17/5ssKDT1WhWvPVS+A0rhvZEv1omewdqE61HB920tzEXFs/p/P0iWW5T4EAMBC36Xjn8ebjf8KcWdduR3Z3NBINpeyMyJuj4hdEXFHRKXsXRFx903WP9qQXzz+KVztKrAOpeO/p7O5rXzJ6s2LjAxkue2V+IeSE6dKUweydbI/hjan+YNNvz2JyiRQ/PJxq/pH68Z/6ZLWn48Fs3ZcHdy88DPHi7PFWw48c+39iD2DzeLPJvCyOazdEbGnyzpOPfrV3oXvDNRSS8ffRvt5po6UP494pLr956Mh/lzSfn5y/H9Rmjownu8Vi/308+VXW9V/S/H3QLr9tzTd/2vxjyT187Uzi75i01J1XP79w5bXNKMRz0QX+/+m5PUFlb9bnJ09dzBiU/LS4vfrbnDn+bx8Gv/+fc37/874b03cExHpTnxvRNwXEfdn2+6BiHgwIva1if+H5x96q038fd3+kR2hOtr++Xao7gi1PWKpxMDp779tVXlnx7/DldT+7J1Ojn+dNrDLdQYAAABrSiEitkVSGKulC4Wxser/4d8VWwql6ZnZx05Mv3P2ePUZgZEYKuR3uoazfGT3P0eq+crV90TlNeJidr/0UHbf+NOB/1fyY5PTpeP9Dh42uK0t+n/qj4F+tw5Ydj2YRwPWqHb9/4sjK9gQYMV1f/43coC1bole7AcbYB1zFoeNq1n/v9iHdgArr/X5f8rQANa5Wif/pIPCdY97NT68Caw9TvKwcS3d/19Zrt+/Avqn86f4V0siSRa8E19GtP9U0v82d5H4aHU0o3UiCquiGV0niqujGTeRGOz4Vy3Oly8WS6Vfv7mVSvt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiNfwMAAP//oefi4g==") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="020000000100000000000000040000000000"], 0x24, 0x0) listxattr(0x0, &(0x7f0000000080)=""/6, 0x6) timerfd_create(0x5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x0, [{0x0, 0x2}, {0x0, 0xb, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xf, "ccf0294e2a3bdb4aa40b249e8e"}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@acquire={0x134, 0x17, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in6=@empty, 0x4d5, 0x5f}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in6=@empty, @in6=@loopback, 0x4e24, 0x0, 0x4e21, 0x54a7, 0x2, 0x0, 0x80, 0x16}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@broadcast, 0x4e22, 0x7, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0x33}, {0x5, 0x10001, 0x3, 0x100000000, 0x6, 0x0, 0xf, 0x1}, {0xffffffff, 0x8000}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xec, 0x5, 0x1, 0x70bd2d}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365743d69736f383835392d322c0701636865636b3d72656c617865642c696f636861727365743d63703836392c6f76657272696465726f636b7065726d2c73657373696f6e3d3078303030303030303030303030303035322c636865636b3d7374726963742c6e6f726f636b2c626c6f636b3d3078303030303030303030303030303430302c63727566742cff0700006b3d72656c617865642c7569", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0xa00, &(0x7f00000003c0)="$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") r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 4.763884793s ago: executing program 2 (id=283): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103900000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b426375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f645600cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e65440f12338ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af9d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074da00000000339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000000000000000004e46e25779540c8246e45a8a9e55b9214990fcf513e5893a0664baf35431a9ae5db2301f6aae78a841b704679015577abed7008c6208cce4ec400816eca719bb9e22c159dc414012c97cb515e447eba901c87f5c0d467d9d756000fff14823"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c001600000000020000000014000800"/46], 0x34}}, 0x40880) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) 4.611751645s ago: executing program 1 (id=284): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c00018008dd0140ffffffff725a2b69767e2b31616cb0180018775c2ca2086199417a14ff821b7f13882e0a9f0cd1fdda50a3252c5f01f1f24f88532bb52bd53240c0ed1698123867701a7bc27fc362a59f270ce3aecdb4e95c45fbbbdd57dec24791f8a98e099b99a2049319864fabe1a5919cd29f9f86ad39cc306f1679dd67a50072ce1c2afcc3270d47ad99712e372b41438c15047f7a5cd0eeb09cc0a8dc8bbc"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4.198233327s ago: executing program 4 (id=285): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40c8, &(0x7f0000000040)={[{@nombcache}]}, 0xfb, 0x496, &(0x7f0000000f40)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="020000000100000000000000040000000000"], 0x24, 0x0) listxattr(0x0, &(0x7f0000000080)=""/6, 0x6) timerfd_create(0x5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x0, [{0x0, 0x2}, {0x0, 0xb, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xf, "ccf0294e2a3bdb4aa40b249e8e"}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@acquire={0x134, 0x17, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in6=@empty, 0x4d5, 0x5f}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in6=@empty, @in6=@loopback, 0x4e24, 0x0, 0x4e21, 0x54a7, 0x2, 0x0, 0x80, 0x16}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@broadcast, 0x4e22, 0x7, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0x33}, {0x5, 0x10001, 0x3, 0x100000000, 0x6, 0x0, 0xf, 0x1}, {0xffffffff, 0x8000}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xec, 0x5, 0x1, 0x70bd2d}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365743d69736f383835392d322c0701636865636b3d72656c617865642c696f636861727365743d63703836392c6f76657272696465726f636b7065726d2c73657373696f6e3d3078303030303030303030303030303035322c636865636b3d7374726963742c6e6f726f636b2c626c6f636b3d3078303030303030303030303030303430302c63727566742cff0700006b3d72656c617865642c7569", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0xa00, &(0x7f00000003c0)="$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") r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 4.022892097s ago: executing program 1 (id=286): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f000000a440)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x200000, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x1b, &(0x7f0000001a80)={&(0x7f00000004c0)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1976}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x7f}}, 0x4880) 3.275651238s ago: executing program 2 (id=287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001300040095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r5, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r8, @ANYRESDEC=r8, @ANYBLOB=',wfdno=', @ANYRESOCT]) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000400010002", 0x7) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000240)={r6, 0xf266}, &(0x7f0000000480)=0x8) r9 = signalfd4(r0, &(0x7f0000000040)={[0x400]}, 0x8, 0x0) getsockopt$X25_QBITINCL(r9, 0x106, 0x1, 0x0, &(0x7f0000000100)) 2.660619099s ago: executing program 0 (id=288): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x40030000000000}, 0x2000090) 2.56673227s ago: executing program 0 (id=289): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x2, &(0x7f0000000240)='\t\x00', 0x9, 0x1, 0xb57, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) 2.460725221s ago: executing program 0 (id=290): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2a, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.482810398s ago: executing program 3 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 1.482595173s ago: executing program 0 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.481895284s ago: executing program 2 (id=293): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) sendfile(r2, r3, 0x0, 0x1000000003fffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0}) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 1.356683703s ago: executing program 1 (id=294): syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r0 = gettid() ptrace(0x18, r0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000"], 0x48}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.340166713s ago: executing program 0 (id=295): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x130, 0x0, 0x2c8, 0x230, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x40}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x52, 0x1}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) set_mempolicy(0x3, &(0x7f00000014c0)=0x7fff, 0x467d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="660a0000000000006111580000000018000000000000000000000000000000950000000000000086d391fdea6c09d4e201c12e43ac54b66c"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(0x0, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000040), 0x4) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) 972.666419ms ago: executing program 3 (id=296): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c00018008dd0140ffffffff725a2b69767e2b31616cb0180018775c2ca2086199417a14ff821b7f13882e0a9f0cd1fdda50a3252c5f01f1f24f88532bb52bd53240c0ed1698123867701a7bc27fc362a59f270ce3aecdb4e95c45fbbbdd57dec24791f8a98e099b99a2049319864fabe1a5919cd29f9f86ad39cc306f1679dd67a50072ce1c2afcc3270d47ad99712e372b41438c15047f7a5cd0eeb09cc0a8dc8bbc"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 141.876225ms ago: executing program 0 (id=297): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x9, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c) socket(0x8000000010, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000001900), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 140.61583ms ago: executing program 2 (id=298): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x9, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 75.357894ms ago: executing program 4 (id=299): unshare(0x6020400) unshare(0x2c060000) (fail_nth: 3) 65.171212ms ago: executing program 1 (id=300): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x12, 0x141341) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0x1, 0x1}}, 0x0, 0x4, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xc0df, 0x3010}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x45) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@mcast1, 0x1e, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 0s ago: executing program 3 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 66.315679][ T5849] cgroup: Unknown subsys name 'net' [ 66.440706][ T5849] cgroup: Unknown subsys name 'cpuset' [ 66.449463][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.834211][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.370758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.377112][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.304707][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.305316][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.322133][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.322141][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.337654][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.346267][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.354055][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.365360][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.374723][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.375447][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.390338][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.398050][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.410332][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.411372][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.425892][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.469614][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.477964][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.488448][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.496925][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.505625][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.528038][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.536188][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.544000][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.552125][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.559975][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.028651][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 73.152842][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 73.395619][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.406224][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.414181][ T5866] bridge_slave_0: entered allmulticast mode [ 73.424177][ T5866] bridge_slave_0: entered promiscuous mode [ 73.439142][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 73.450468][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 73.470417][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.478519][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.485664][ T5866] bridge_slave_1: entered allmulticast mode [ 73.493070][ T5866] bridge_slave_1: entered promiscuous mode [ 73.556713][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 73.655742][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.665785][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.673352][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.680652][ T5859] bridge_slave_0: entered allmulticast mode [ 73.687996][ T5859] bridge_slave_0: entered promiscuous mode [ 73.718678][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.744959][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.752233][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.760839][ T5859] bridge_slave_1: entered allmulticast mode [ 73.768506][ T5859] bridge_slave_1: entered promiscuous mode [ 73.852802][ T5866] team0: Port device team_slave_0 added [ 73.876635][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.884103][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.891913][ T5860] bridge_slave_0: entered allmulticast mode [ 73.899260][ T5860] bridge_slave_0: entered promiscuous mode [ 73.919700][ T5866] team0: Port device team_slave_1 added [ 73.925730][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.932963][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.940357][ T5873] bridge_slave_0: entered allmulticast mode [ 73.948364][ T5873] bridge_slave_0: entered promiscuous mode [ 73.959545][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.983009][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.990444][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.997706][ T5860] bridge_slave_1: entered allmulticast mode [ 74.004664][ T5860] bridge_slave_1: entered promiscuous mode [ 74.040829][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.048054][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.055234][ T5873] bridge_slave_1: entered allmulticast mode [ 74.062687][ T5873] bridge_slave_1: entered promiscuous mode [ 74.086005][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.174003][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.181290][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.189219][ T5874] bridge_slave_0: entered allmulticast mode [ 74.196214][ T5874] bridge_slave_0: entered promiscuous mode [ 74.206079][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.219735][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.230094][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.237061][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.263393][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.279263][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.291904][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.303027][ T5859] team0: Port device team_slave_0 added [ 74.312145][ T5859] team0: Port device team_slave_1 added [ 74.318806][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.325898][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.333663][ T5874] bridge_slave_1: entered allmulticast mode [ 74.341695][ T5874] bridge_slave_1: entered promiscuous mode [ 74.361676][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.368717][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.394697][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.482650][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.491108][ T5870] Bluetooth: hci0: command tx timeout [ 74.497030][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.497861][ T5870] Bluetooth: hci2: command tx timeout [ 74.523301][ T5864] Bluetooth: hci1: command tx timeout [ 74.535071][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.559268][ T5860] team0: Port device team_slave_0 added [ 74.569660][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.570742][ T5864] Bluetooth: hci3: command tx timeout [ 74.595917][ T5873] team0: Port device team_slave_0 added [ 74.602519][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.609757][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.636787][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.647606][ T5864] Bluetooth: hci4: command tx timeout [ 74.659893][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.670476][ T5860] team0: Port device team_slave_1 added [ 74.691677][ T5873] team0: Port device team_slave_1 added [ 74.730337][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.737302][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.763878][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.822016][ T5866] hsr_slave_0: entered promiscuous mode [ 74.828507][ T5866] hsr_slave_1: entered promiscuous mode [ 74.836695][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.843854][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.869766][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.903730][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.910813][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.937525][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.996961][ T5874] team0: Port device team_slave_0 added [ 75.004190][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.011394][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.037767][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.066976][ T5859] hsr_slave_0: entered promiscuous mode [ 75.073390][ T5859] hsr_slave_1: entered promiscuous mode [ 75.080144][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 75.085958][ T5859] Cannot create hsr debugfs directory [ 75.108849][ T5874] team0: Port device team_slave_1 added [ 75.150887][ T5873] hsr_slave_0: entered promiscuous mode [ 75.159622][ T5873] hsr_slave_1: entered promiscuous mode [ 75.165673][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 75.171531][ T5873] Cannot create hsr debugfs directory [ 75.231525][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.239608][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.266383][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.279444][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.286413][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.312704][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.414979][ T5860] hsr_slave_0: entered promiscuous mode [ 75.421891][ T5860] hsr_slave_1: entered promiscuous mode [ 75.428851][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 75.434611][ T5860] Cannot create hsr debugfs directory [ 75.612738][ T5874] hsr_slave_0: entered promiscuous mode [ 75.619177][ T5874] hsr_slave_1: entered promiscuous mode [ 75.625243][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 75.631049][ T5874] Cannot create hsr debugfs directory [ 75.971134][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.984751][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.021649][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.063403][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.122267][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.137103][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.149747][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.161373][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.259250][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.275994][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.287266][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.305556][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.422716][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.435465][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.473155][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.483401][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.567971][ T5864] Bluetooth: hci2: command tx timeout [ 76.568034][ T52] Bluetooth: hci0: command tx timeout [ 76.579289][ T5870] Bluetooth: hci1: command tx timeout [ 76.589559][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.600662][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.615385][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.636069][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.647839][ T52] Bluetooth: hci3: command tx timeout [ 76.662323][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.671551][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.728239][ T52] Bluetooth: hci4: command tx timeout [ 76.745055][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.778434][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.793833][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.801110][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.843365][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.850496][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.862397][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.869600][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.898957][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.906271][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.938136][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.005138][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.060704][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.081952][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.099618][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.106769][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.118496][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.125627][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.145404][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.164032][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.171208][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.200709][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.211828][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.219150][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.355579][ T5874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.370940][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.391657][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.424264][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.431467][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.489677][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.496859][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.777217][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.798391][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.004800][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.026987][ T5866] veth0_vlan: entered promiscuous mode [ 78.084045][ T5859] veth0_vlan: entered promiscuous mode [ 78.106252][ T5866] veth1_vlan: entered promiscuous mode [ 78.170062][ T5859] veth1_vlan: entered promiscuous mode [ 78.184647][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.251361][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.274632][ T5866] veth0_macvtap: entered promiscuous mode [ 78.300309][ T5866] veth1_macvtap: entered promiscuous mode [ 78.379857][ T5859] veth0_macvtap: entered promiscuous mode [ 78.395968][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.425315][ T5859] veth1_macvtap: entered promiscuous mode [ 78.443855][ T5860] veth0_vlan: entered promiscuous mode [ 78.464938][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.509627][ T781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.532342][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.541075][ T5860] veth1_vlan: entered promiscuous mode [ 78.555191][ T781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.564426][ T781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.590712][ T781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.602384][ T5873] veth0_vlan: entered promiscuous mode [ 78.625402][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.642105][ T802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.653887][ T52] Bluetooth: hci0: command tx timeout [ 78.659445][ T5870] Bluetooth: hci1: command tx timeout [ 78.661280][ T5864] Bluetooth: hci2: command tx timeout [ 78.666332][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.680344][ T5873] veth1_vlan: entered promiscuous mode [ 78.702163][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.715096][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.728274][ T5864] Bluetooth: hci3: command tx timeout [ 78.808576][ T5864] Bluetooth: hci4: command tx timeout [ 78.818995][ T5860] veth0_macvtap: entered promiscuous mode [ 78.835133][ T5860] veth1_macvtap: entered promiscuous mode [ 78.869287][ T5874] veth0_vlan: entered promiscuous mode [ 78.889442][ T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.906462][ T5874] veth1_vlan: entered promiscuous mode [ 78.914108][ T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.919628][ T5873] veth0_macvtap: entered promiscuous mode [ 78.974996][ T5873] veth1_macvtap: entered promiscuous mode [ 78.988194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.999031][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.006876][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.007292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.029068][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.065477][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.084736][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.125294][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.143320][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.154838][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171982][ T5874] veth0_macvtap: entered promiscuous mode [ 79.183442][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.195862][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.203868][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.240576][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.255580][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.269183][ T5874] veth1_macvtap: entered promiscuous mode [ 79.333949][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.346093][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.400386][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.411520][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.655455][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.691147][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.067000][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.081527][ T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.094367][ T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.125420][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.140722][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.215117][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.423512][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.447853][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.468733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.509328][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.533754][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.575899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.598882][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.619655][ T5994] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 80.669095][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.676955][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.678980][ T5994] EXT4-fs (loop3): unable to read superblock [ 80.734651][ T5864] Bluetooth: hci0: command tx timeout [ 80.734711][ T52] Bluetooth: hci1: command tx timeout [ 80.740427][ T5864] Bluetooth: hci2: command tx timeout [ 80.813255][ T5864] Bluetooth: hci3: command tx timeout [ 80.865317][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.889000][ T5864] Bluetooth: hci4: command tx timeout [ 80.920219][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.985175][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.209058][ T6005] trusted_key: syz.3.7 sent an empty control message without MSG_MORE. [ 82.292231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.328745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.395543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.498050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 82.506291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 82.599468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.608761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.616987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.700565][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.706628][ T5938] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.719893][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.738365][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.847803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.856408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.909617][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.962962][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.974628][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.997090][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.006002][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.025581][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.034519][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.085977][ T5938] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 83.231146][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.324884][ T6021] ======================================================= [ 83.324884][ T6021] WARNING: The mand mount option has been deprecated and [ 83.324884][ T6021] and is ignored by this kernel. Remove the mand [ 83.324884][ T6021] option from the mount to silence this warning. [ 83.324884][ T6021] ======================================================= [ 83.374468][ T6021] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 83.415635][ T6021] EXT4-fs (loop2): unable to read superblock [ 83.480420][ T5938] usb 2-1: config 0 descriptor?? [ 83.691110][ T5938] gspca_main: spca508-2.14.0 probing 8086:0110 [ 84.260288][ T5938] gspca_spca508: reg_read err -71 [ 84.314146][ T5938] gspca_spca508: reg_read err -71 [ 84.340645][ T5938] gspca_spca508: reg_read err -71 [ 84.360240][ T5938] gspca_spca508: reg_read err -71 [ 84.370751][ T5938] gspca_spca508: reg_read err -71 [ 84.380811][ T5938] gspca_spca508: reg write: error -71 [ 84.386389][ T5938] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 84.420761][ T5938] usb 2-1: USB disconnect, device number 2 [ 85.432648][ T6042] binder: BINDER_SET_CONTEXT_MGR already set [ 85.438819][ T6042] binder: 6041:6042 ioctl 4018620d 200000004a80 returned -16 [ 85.922345][ T6048] vcan0: tx drop: invalid da for name 0xffffffffffefffff [ 86.332932][ T6056] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 86.413836][ T6057] batman_adv: batadv0: Adding interface: geneve2 [ 86.438702][ T6057] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 86.442329][ T6059] FAULT_INJECTION: forcing a failure. [ 86.442329][ T6059] name failslab, interval 1, probability 0, space 0, times 1 [ 86.550183][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 86.550206][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.550224][ T6059] Call Trace: [ 86.550231][ T6059] [ 86.550240][ T6059] dump_stack_lvl+0x189/0x250 [ 86.550273][ T6059] ? irqentry_exit+0x74/0x90 [ 86.550300][ T6059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.550335][ T6059] should_fail_ex+0x414/0x560 [ 86.550362][ T6059] should_failslab+0xa8/0x100 [ 86.550383][ T6059] __kmalloc_noprof+0xcb/0x7f0 [ 86.550406][ T6059] ? tomoyo_encode+0x28b/0x550 [ 86.550434][ T6059] tomoyo_encode+0x28b/0x550 [ 86.550462][ T6059] tomoyo_realpath_from_path+0x58d/0x5d0 [ 86.550496][ T6059] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 86.550515][ T6059] tomoyo_path_number_perm+0x1e8/0x5a0 [ 86.550537][ T6059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.550595][ T6059] ? __fget_files+0x2a/0x420 [ 86.550617][ T6059] ? __fget_files+0x3a0/0x420 [ 86.550632][ T6059] ? __fget_files+0x2a/0x420 [ 86.550652][ T6059] security_file_ioctl+0xcb/0x2d0 [ 86.550671][ T6059] __se_sys_ioctl+0x47/0x170 [ 86.550696][ T6059] do_syscall_64+0xfa/0xfa0 [ 86.550718][ T6059] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.550740][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.550756][ T6059] ? clear_bhb_loop+0x60/0xb0 [ 86.550776][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.550792][ T6059] RIP: 0033:0x7f67c598eba9 [ 86.550812][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.550826][ T6059] RSP: 002b:00007f67c67cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.550843][ T6059] RAX: ffffffffffffffda RBX: 00007f67c5bd5fa0 RCX: 00007f67c598eba9 [ 86.550855][ T6059] RDX: 0000200000000180 RSI: 00000000c0045002 RDI: 0000000000000003 [ 86.550871][ T6059] RBP: 00007f67c67cf090 R08: 0000000000000000 R09: 0000000000000000 [ 86.550881][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.550890][ T6059] R13: 00007f67c5bd6038 R14: 00007f67c5bd5fa0 R15: 00007ffcb79b6cd8 [ 86.550920][ T6059] [ 86.764519][ T6059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.934699][ T24] cfg80211: failed to load regulatory.db [ 87.114590][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814d410c00: rx timeout, send abort [ 87.127501][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88814d410c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 87.471090][ T6056] Zero length message leads to an empty skb [ 87.822672][ T6066] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 87.833510][ T6066] EXT4-fs (loop2): unable to read superblock [ 87.935015][ T6071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.714813][ T6070] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.436794][ T6084] __nla_validate_parse: 135 callbacks suppressed [ 90.436811][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 90.628084][ T6073] iso9660: Unknown parameter 'check' [ 90.827493][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.907974][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.283118][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 91.390632][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.404141][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.419834][ T5945] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 91.435093][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.435974][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 91.442608][ T6090] netlink: 596 bytes leftover after parsing attributes in process `syz.1.30'. [ 91.444298][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.480694][ T5945] usb 5-1: config 0 descriptor?? [ 91.561239][ T30] audit: type=1326 audit(1758025749.202:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.584306][ T30] audit: type=1326 audit(1758025749.232:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.593683][ T24] usb 3-1: config 0 descriptor?? [ 91.650223][ T24] cp210x 3-1:0.0: cp210x converter detected [ 91.653093][ T30] audit: type=1326 audit(1758025749.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.686030][ T30] audit: type=1326 audit(1758025749.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.711271][ T30] audit: type=1326 audit(1758025749.242:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.739742][ T30] audit: type=1326 audit(1758025749.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.766535][ T30] audit: type=1326 audit(1758025749.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 91.798164][ T30] audit: type=1326 audit(1758025749.242:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa92478d510 code=0x7ffc0000 [ 91.826457][ T30] audit: type=1326 audit(1758025749.242:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa9247903d7 code=0x7ffc0000 [ 91.887541][ T30] audit: type=1326 audit(1758025749.242:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa92478eba9 code=0x7ffc0000 [ 92.063918][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 92.087732][ T6083] mmap: syz.4.28 (6083): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 92.113267][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 92.127730][ T6094] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.32'. [ 92.199674][ T6096] ip6gre1: entered allmulticast mode [ 92.755088][ T24] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 93.569188][ T24] cp210x 3-1:0.0: querying part number failed [ 93.679057][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 94.803900][ T24] usb 3-1: USB disconnect, device number 2 [ 94.860243][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 94.931990][ T24] cp210x 3-1:0.0: device disconnected [ 94.988013][ T6122] syz.3.39 (6122) used obsolete PPPIOCDETACH ioctl [ 95.257602][ T5979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.417741][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 95.457299][ T6126] netlink: 27 bytes leftover after parsing attributes in process `syz.0.40'. [ 95.468432][ T5979] usb 4-1: config 4 has an invalid interface number: 194 but max is 0 [ 95.490332][ T5979] usb 4-1: config 4 has no interface number 0 [ 95.496637][ T5979] usb 4-1: config 4 interface 194 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 95.513394][ T5979] usb 4-1: config 4 interface 194 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 95.513966][ T6126] Illegal XDP return value 4294967294 on prog (id 17) dev N/A, expect packet loss! [ 95.524348][ T5979] usb 4-1: config 4 interface 194 has no altsetting 0 [ 95.547282][ T5979] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=a1.41 [ 95.559080][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.573966][ T5979] usb 4-1: Product: syz [ 95.579024][ T5979] usb 4-1: Manufacturer: syz [ 95.587990][ T5979] usb 4-1: SerialNumber: syz [ 96.084455][ T5979] usb 4-1: probing VID:PID(0424:012C) [ 96.108165][ T5979] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 03 [ 96.123587][ T5979] usb 4-1: vub300 ignoring EndPoint(0) 03 [ 96.143989][ T5979] usb 4-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 96.180724][ T5979] usb 4-1: vub300 ignoring EndPoint(1) 04 [ 96.234273][ T6135] mmap: syz.0.42 (6135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.250945][ T5979] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 96.279539][ T5979] vub300 4-1:4.194: probe with driver vub300 failed with error -22 [ 96.304118][ T5979] usb 4-1: USB disconnect, device number 2 [ 96.670417][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 96.676419][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.689879][ T5945] usb 5-1: USB disconnect, device number 2 [ 96.837501][ T5989] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.900295][ T5925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.169893][ T5925] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 97.178209][ T5989] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.206527][ T5925] usb 2-1: config 0 has no interface number 0 [ 97.235093][ T5989] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.248060][ T5925] usb 2-1: config 0 interface 199 altsetting 8 endpoint 0xD has an invalid bInterval 129, changing to 7 [ 97.296969][ T5925] usb 2-1: config 0 interface 199 has no altsetting 0 [ 97.304081][ T5989] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.355512][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=8e.1e [ 97.365588][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.381133][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.401251][ T5989] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.413626][ T5925] usb 2-1: Product: syz [ 97.420505][ T5925] usb 2-1: Manufacturer: syz [ 97.429001][ T5989] usb 3-1: invalid MIDI out EP 0 [ 97.433972][ T5925] usb 2-1: SerialNumber: syz [ 97.454492][ T5925] usb 2-1: config 0 descriptor?? [ 97.558174][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.690421][ T5925] usbtest 2-1:0.199: couldn't get endpoints, -22 [ 97.802259][ T5925] usbtest 2-1:0.199: probe with driver usbtest failed with error -22 [ 98.186030][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.191241][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 98.194894][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.214922][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.224158][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.240848][ T5925] usb 2-1: USB disconnect, device number 3 [ 98.284003][ T9] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.321170][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.404266][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 98.427710][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.488208][ T9] usb 1-1: config 0 descriptor?? [ 98.504767][ T6156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.539209][ T5989] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 98.733609][ T5989] usb 3-1: USB disconnect, device number 3 [ 98.962307][ T9] kye 0003:0458:5015.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 99.048850][ T9] kye 0003:0458:5015.0001: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 99.073679][ T9] kye 0003:0458:5015.0001: tablet-enabling feature report not found [ 99.086021][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 99.093933][ T9] kye 0003:0458:5015.0001: tablet enabling failed [ 99.113759][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 99.176168][ T9] usb 1-1: USB disconnect, device number 2 [ 99.475952][ T6182] fido_id[6182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 100.471035][ T6197] binder: BINDER_SET_CONTEXT_MGR already set [ 100.477057][ T6197] binder: 6193:6197 ioctl 4018620d 200000004a80 returned -16 [ 100.809152][ T6207] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.816292][ T6207] overlayfs: failed to set xattr on upper [ 100.857140][ T6207] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.857168][ T6207] overlayfs: ...falling back to metacopy=off. [ 100.857177][ T6207] overlayfs: ...falling back to uuid=null. [ 101.164012][ T6217] Bluetooth: MGMT ver 1.23 [ 101.445115][ T6214] syz_tun: refused to change device tx_queue_len [ 101.882566][ T6179] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 101.893648][ T6223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.094611][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.388004][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.693172][ T6232] bridge0: entered promiscuous mode [ 102.705075][ T6232] bridge0: port 3(macvtap1) entered blocking state [ 102.714861][ T6232] bridge0: port 3(macvtap1) entered disabled state [ 102.717851][ T5945] usb 4-1: device descriptor read/64, error -71 [ 102.724020][ T6232] macvtap1: entered allmulticast mode [ 102.882567][ T6232] bridge0: entered allmulticast mode [ 102.925997][ T6232] macvtap1: left allmulticast mode [ 102.926470][ T6238] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 102.940155][ T6232] bridge0: left allmulticast mode [ 102.950943][ T9] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 103.550062][ T9] usb 3-1: config 0 has no interface number 0 [ 103.556242][ T9] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 103.566758][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.594790][ T9] usb 3-1: config 0 descriptor?? [ 103.781193][ T5945] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.958402][ T6232] bridge0: left promiscuous mode [ 104.088080][ T9] usb 3-1: can't set config #0, error -71 [ 104.281688][ T9] usb 3-1: USB disconnect, device number 4 [ 104.687174][ T6252] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 105.315295][ T6255] binder: BINDER_SET_CONTEXT_MGR already set [ 105.322633][ T6255] binder: 6254:6255 ioctl 4018620d 200000004a80 returned -16 [ 106.473614][ T6268] journal_path: Lookup failure for './file0/../file0' [ 106.480852][ T6268] EXT4-fs: error: could not find journal device path [ 109.274742][ T6307] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 109.382932][ T6310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'. [ 110.197696][ T6321] binder: BINDER_SET_CONTEXT_MGR already set [ 110.206648][ T6321] binder: 6320:6321 ioctl 4018620d 200000004a80 returned -16 [ 110.725267][ T6332] vcan0: tx drop: invalid da for name 0xffffffffffefffff [ 111.861673][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e32e800: rx timeout, send abort [ 111.870104][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e32e800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 112.424471][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046fc0800: rx timeout, send abort [ 112.433039][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888046fc0800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 112.473428][ T6330] vcan0: tx drop: invalid da for name 0xffffffffffefffff [ 112.752548][ T6346] journal_path: Lookup failure for './file0/../file0' [ 112.759844][ T6346] EXT4-fs: error: could not find journal device path [ 113.052417][ T6348] netlink: 48 bytes leftover after parsing attributes in process `syz.3.99'. [ 113.153687][ T6352] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 113.757162][ T6365] FAULT_INJECTION: forcing a failure. [ 113.757162][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.770256][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT(full) [ 113.770270][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.770276][ T6365] Call Trace: [ 113.770280][ T6365] [ 113.770285][ T6365] dump_stack_lvl+0x189/0x250 [ 113.770308][ T6365] ? __pfx____ratelimit+0x10/0x10 [ 113.770330][ T6365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.770343][ T6365] ? __pfx__printk+0x10/0x10 [ 113.770355][ T6365] ? __might_fault+0xb0/0x130 [ 113.770374][ T6365] should_fail_ex+0x414/0x560 [ 113.770389][ T6365] _copy_from_user+0x2d/0xb0 [ 113.770399][ T6365] __sys_bpf+0x1ed/0x870 [ 113.770412][ T6365] ? __pfx___sys_bpf+0x10/0x10 [ 113.770429][ T6365] ? ksys_write+0x22a/0x250 [ 113.770443][ T6365] ? __pfx_ksys_write+0x10/0x10 [ 113.770459][ T6365] __x64_sys_bpf+0x7c/0x90 [ 113.770469][ T6365] do_syscall_64+0xfa/0xfa0 [ 113.770482][ T6365] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.770494][ T6365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.770503][ T6365] ? clear_bhb_loop+0x60/0xb0 [ 113.770514][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.770523][ T6365] RIP: 0033:0x7fa92478eba9 [ 113.770532][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.770540][ T6365] RSP: 002b:00007fa9229d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.770550][ T6365] RAX: ffffffffffffffda RBX: 00007fa9249d6090 RCX: 00007fa92478eba9 [ 113.770557][ T6365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 113.770562][ T6365] RBP: 00007fa9229d5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.770567][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.770572][ T6365] R13: 00007fa9249d6128 R14: 00007fa9249d6090 R15: 00007ffd69cd2338 [ 113.770588][ T6365] [ 114.936475][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 115.820954][ T6377] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.853049][ T6377] I/O error, dev loop2, sector 66359 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.899359][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 115.931036][ T6382] binder: BINDER_SET_CONTEXT_MGR already set [ 115.937092][ T6382] binder: 6381:6382 ioctl 4018620d 200000004a80 returned -16 [ 116.001741][ T6377] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.093215][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 116.166407][ T6377] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.228747][ T6387] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.238377][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 116.276856][ T6377] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 116.290618][ T6387] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.311552][ T6377] UDF-fs: Scanning with blocksize 512 failed [ 116.328727][ T6377] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.338234][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 116.357769][ T6377] I/O error, dev loop2, sector 132718 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.368039][ T6387] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.407825][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 116.427726][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 116.457452][ T6387] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 116.465437][ T6377] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.482370][ T6387] UDF-fs: Scanning with blocksize 512 failed [ 116.499667][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 116.521434][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 116.522026][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 116.551460][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 116.561968][ T6377] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 116.593809][ T6387] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 116.597290][ T6377] UDF-fs: Scanning with blocksize 1024 failed [ 116.763028][ T6387] UDF-fs: Scanning with blocksize 1024 failed [ 116.798908][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 116.809908][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 116.810118][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 117.061066][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 117.067680][ T6387] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 117.077679][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 117.092853][ T6387] UDF-fs: Scanning with blocksize 2048 failed [ 117.153051][ T6377] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 117.269159][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 117.277848][ T6377] UDF-fs: Scanning with blocksize 2048 failed [ 117.305479][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 117.321608][ T6387] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 117.367526][ T6387] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 117.371075][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 117.375190][ T6387] UDF-fs: Scanning with blocksize 4096 failed [ 117.415520][ T6377] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 117.426076][ T6387] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 117.487198][ T6377] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 117.516372][ T6377] UDF-fs: Scanning with blocksize 4096 failed [ 117.560392][ T6377] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 117.586037][ T6387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.638538][ T6395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.111'. [ 117.965311][ T6406] rdma_op ffff8880592bc1f0 conn xmit_rdma 0000000000000000 [ 118.516688][ T6401] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 118.884619][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 120.185357][ T6423] EXT4-fs (loop4): unable to read superblock [ 120.963920][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 120.971805][ T6432] binder: 6431:6432 ioctl 4018620d 200000004a80 returned -16 [ 121.498881][ T6438] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 121.871577][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.891254][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.899749][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.908574][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.916397][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.925951][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.958407][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 121.992763][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 122.007583][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 122.015783][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 122.037637][ T5917] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.086334][ T6447] fido_id[6447]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.692606][ T6453] blk_print_req_error: 19 callbacks suppressed [ 122.692618][ T6453] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 122.787562][ T6453] EXT4-fs (loop4): unable to read superblock [ 123.307602][ T6463] Bluetooth: MGMT ver 1.23 [ 123.386488][ T6466] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.411566][ T6461] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.414106][ T6466] block device autoloading is deprecated and will be removed. [ 123.519221][ T6461] I/O error, dev loop0, sector 66359 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.531558][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 123.544768][ T6461] I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.554711][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 123.696363][ T6461] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.859979][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 123.880717][ T6461] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 124.638450][ T6461] UDF-fs: Scanning with blocksize 512 failed [ 125.250604][ T6461] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.370666][ T6461] I/O error, dev loop0, sector 132718 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.387017][ T6485] binder: BINDER_SET_CONTEXT_MGR already set [ 125.398073][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 125.414463][ T6485] binder: 6483:6485 ioctl 4018620d 200000004a80 returned -16 [ 125.428118][ T6487] FAULT_INJECTION: forcing a failure. [ 125.428118][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 125.449947][ T6461] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.467281][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 125.477781][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 125.477802][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.477812][ T6487] Call Trace: [ 125.477819][ T6487] [ 125.477827][ T6487] dump_stack_lvl+0x189/0x250 [ 125.477861][ T6487] ? __pfx____ratelimit+0x10/0x10 [ 125.477884][ T6487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.477902][ T6487] ? __pfx__printk+0x10/0x10 [ 125.477931][ T6487] ? __pfx___might_resched+0x10/0x10 [ 125.477959][ T6487] should_fail_ex+0x414/0x560 [ 125.477984][ T6487] should_failslab+0xa8/0x100 [ 125.478004][ T6487] __kmalloc_noprof+0xcb/0x7f0 [ 125.478026][ T6487] ? kfree+0x4d/0x6e0 [ 125.478043][ T6487] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.478071][ T6487] tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.478093][ T6487] ? tomoyo_domain+0xd9/0x130 [ 125.478120][ T6487] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 125.478138][ T6487] tomoyo_path_number_perm+0x1e8/0x5a0 [ 125.478159][ T6487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.478217][ T6487] ? __fget_files+0x2a/0x420 [ 125.478239][ T6487] ? __fget_files+0x3a0/0x420 [ 125.478254][ T6487] ? __fget_files+0x2a/0x420 [ 125.478275][ T6487] security_file_ioctl+0xcb/0x2d0 [ 125.478294][ T6487] __se_sys_ioctl+0x47/0x170 [ 125.478318][ T6487] do_syscall_64+0xfa/0xfa0 [ 125.478342][ T6487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.478357][ T6487] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 125.478372][ T6487] ? clear_bhb_loop+0x60/0xb0 [ 125.478392][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.478408][ T6487] RIP: 0033:0x7fa92478eba9 [ 125.478423][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.478436][ T6487] RSP: 002b:00007fa9229f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.478453][ T6487] RAX: ffffffffffffffda RBX: 00007fa9249d5fa0 RCX: 00007fa92478eba9 [ 125.478465][ T6487] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 125.478475][ T6487] RBP: 00007fa9229f6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.478485][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.478494][ T6487] R13: 00007fa9249d6038 R14: 00007fa9249d5fa0 R15: 00007ffd69cd2338 [ 125.478525][ T6487] [ 125.478532][ T6487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.718810][ T6461] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.747723][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 125.778113][ T6461] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 125.801948][ T6461] UDF-fs: Scanning with blocksize 1024 failed [ 125.814160][ T6461] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.824608][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 125.837590][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 125.849438][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 125.859820][ T6461] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 125.867934][ T6461] UDF-fs: Scanning with blocksize 2048 failed [ 125.876025][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 125.886738][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 125.897771][ T6461] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 125.938673][ T6461] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 125.995115][ T6461] UDF-fs: Scanning with blocksize 4096 failed [ 126.164971][ T6461] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 127.014699][ T6497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'. [ 127.321109][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.430418][ T6501] capability: warning: `syz.0.135' uses deprecated v2 capabilities in a way that may be insecure [ 128.232926][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.263720][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 128.326805][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.465103][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.049686][ T24] usb 3-1: Product: syz [ 129.054279][ T24] usb 3-1: Manufacturer: syz [ 129.059496][ T24] usb 3-1: SerialNumber: syz [ 129.108632][ T24] cdc_mbim 3-1:1.0: skipping garbage [ 129.307027][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 129.307810][ T6523] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 129.342144][ T6524] binder: BINDER_SET_CONTEXT_MGR already set [ 129.375453][ T6524] binder: 6521:6524 ioctl 4018620d 200000004a80 returned -16 [ 130.244788][ T6523] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.429959][ T6536] blk_print_req_error: 7 callbacks suppressed [ 130.429977][ T6536] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.455001][ T6536] I/O error, dev loop3, sector 66359 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.465294][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 130.476404][ T6536] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.492501][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 130.679575][ T6536] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.898101][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 130.924426][ T6536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 131.422684][ T6536] UDF-fs: Scanning with blocksize 512 failed [ 131.549284][ T6536] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.622358][ T6536] I/O error, dev loop3, sector 132718 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.095064][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 132.127110][ T6536] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.144386][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 132.157121][ T6536] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.195232][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 132.241515][ T6536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 132.245100][ T24] cdc_mbim 3-1:1.0: bind() failure [ 132.254613][ T6536] UDF-fs: Scanning with blocksize 1024 failed [ 132.262115][ T6536] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.276715][ T6536] I/O error, dev loop3, sector 265436 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.287793][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 132.298816][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 132.486029][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 132.488839][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 132.554063][ T24] cdc_ncm 3-1:1.1: bind() failure [ 132.599423][ T6536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 132.605731][ T24] usb 3-1: USB disconnect, device number 5 [ 132.617938][ T6552] FAULT_INJECTION: forcing a failure. [ 132.617938][ T6552] name failslab, interval 1, probability 0, space 0, times 0 [ 132.674852][ T6536] UDF-fs: Scanning with blocksize 2048 failed [ 132.722476][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 132.728900][ T6552] CPU: 1 UID: 0 PID: 6552 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 132.728923][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.728933][ T6552] Call Trace: [ 132.728940][ T6552] [ 132.728947][ T6552] dump_stack_lvl+0x189/0x250 [ 132.728972][ T6552] ? __pfx____ratelimit+0x10/0x10 [ 132.728994][ T6552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.729013][ T6552] ? __pfx__printk+0x10/0x10 [ 132.729040][ T6552] ? __pfx___might_resched+0x10/0x10 [ 132.729060][ T6552] ? fs_reclaim_acquire+0x7d/0x100 [ 132.729081][ T6552] should_fail_ex+0x414/0x560 [ 132.729105][ T6552] should_failslab+0xa8/0x100 [ 132.729124][ T6552] __kmalloc_noprof+0xcb/0x7f0 [ 132.729146][ T6552] ? tomoyo_encode+0x28b/0x550 [ 132.729172][ T6552] tomoyo_encode+0x28b/0x550 [ 132.729198][ T6552] tomoyo_realpath_from_path+0x58d/0x5d0 [ 132.729220][ T6552] ? tomoyo_domain+0xd9/0x130 [ 132.729245][ T6552] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 132.729262][ T6552] tomoyo_path_number_perm+0x1e8/0x5a0 [ 132.729283][ T6552] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.729303][ T6552] ? sb_end_write+0xe9/0x1c0 [ 132.729321][ T6552] ? vfs_write+0x956/0xb30 [ 132.729378][ T6552] ? ksys_write+0x1e1/0x250 [ 132.729404][ T6552] security_file_ioctl+0xcb/0x2d0 [ 132.729423][ T6552] __se_sys_ioctl+0x47/0x170 [ 132.729446][ T6552] do_syscall_64+0xfa/0xfa0 [ 132.729468][ T6552] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.729495][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.729511][ T6552] ? clear_bhb_loop+0x60/0xb0 [ 132.729531][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.729546][ T6552] RIP: 0033:0x7fa92478eba9 [ 132.729561][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.729573][ T6552] RSP: 002b:00007fa9229f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.729590][ T6552] RAX: ffffffffffffffda RBX: 00007fa9249d5fa0 RCX: 00007fa92478eba9 [ 132.729601][ T6552] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 132.729611][ T6552] RBP: 00007fa9229f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.729621][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.729630][ T6552] R13: 00007fa9249d6038 R14: 00007fa9249d5fa0 R15: 00007ffd69cd2338 [ 132.729659][ T6552] [ 132.729680][ T6552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.839283][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999324][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.018911][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 133.028816][ T6536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 133.039666][ T6536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 133.047313][ T6536] UDF-fs: Scanning with blocksize 4096 failed [ 133.054138][ T6536] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 133.382801][ T6561] rdma_op ffff8880239349f0 conn xmit_rdma 0000000000000000 [ 134.261082][ T6567] tmpfs: Unknown parameter 'ê‘ŒJ¤{öM >ZÓ"7E/ç½' [ 135.073221][ T6573] EXT4-fs: Ignoring removed oldalloc option [ 135.116056][ T6573] EXT4-fs: Ignoring removed orlov option [ 135.260404][ T6573] EXT4-fs (loop3): unable to read superblock [ 135.268867][ T6578] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 135.863160][ T6573] blk_print_req_error: 7 callbacks suppressed [ 135.863178][ T6573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 135.883910][ T6573] XFS (loop3): SB validate failed with error -5. [ 135.884225][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.594191][ T6585] bond1: (slave geneve2): making interface the new active one [ 136.967894][ T6585] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 137.167618][ T6595] overlayfs: conflicting lowerdir path [ 137.611110][ T6594] bridge0: entered promiscuous mode [ 137.650301][ T6594] bridge0: port 3(macvtap1) entered blocking state [ 137.657482][ T6594] bridge0: port 3(macvtap1) entered disabled state [ 137.666748][ T6594] macvtap1: entered allmulticast mode [ 137.672281][ T6594] bridge0: entered allmulticast mode [ 137.717351][ T6594] macvtap1: left allmulticast mode [ 137.722704][ T6594] bridge0: left allmulticast mode [ 138.227636][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.299453][ T5864] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 138.431538][ T6594] bridge0: left promiscuous mode [ 139.390667][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a0c3000: rx timeout, send abort [ 139.399629][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a0c3000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 141.370243][ T6630] process 'syz.0.166' launched './file0' with NULL argv: empty string added [ 143.310845][ T6644] tmpfs: Unknown parameter 'ÿÿäƒíáÒw5géq\nˆ' [ 143.486521][ T6647] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 143.788330][ T6647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.564164][ T6651] can: request_module (can-proto-0) failed. [ 145.497270][ T6660] bridge0: entered promiscuous mode [ 145.621042][ T6660] bridge0: port 3(macvtap1) entered blocking state [ 145.687434][ T6660] bridge0: port 3(macvtap1) entered disabled state [ 145.713510][ T6660] macvtap1: entered allmulticast mode [ 145.721292][ T6660] bridge0: entered allmulticast mode [ 145.824043][ T6660] macvtap1: left allmulticast mode [ 145.829379][ T6660] bridge0: left allmulticast mode [ 146.637844][ T6660] bridge0: left promiscuous mode [ 147.509289][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805afc7400: rx timeout, send abort [ 147.518168][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805afc7400: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 147.857045][ T6690] devpts: Unknown parameter '‹¾zԶҔĞ' [ 147.914817][ T6689] fuse: Bad value for 'fd' [ 148.046625][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 148.046643][ T30] audit: type=1326 audit(1758025805.722:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 148.158415][ T6689] Can't find a SQUASHFS superblock on nullb0 [ 148.625378][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 148.681729][ T30] audit: type=1326 audit(1758025805.762:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 148.835901][ T30] audit: type=1326 audit(1758025805.772:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 148.901186][ T30] audit: type=1326 audit(1758025805.772:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 149.239079][ T6700] journal_path: Lookup failure for './file0/../file0' [ 149.246003][ T6700] EXT4-fs: error: could not find journal device path [ 149.415199][ T30] audit: type=1326 audit(1758025805.772:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 149.454364][ T30] audit: type=1326 audit(1758025805.772:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 149.507479][ T30] audit: type=1326 audit(1758025805.782:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 149.534025][ T30] audit: type=1326 audit(1758025805.782:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 149.563653][ T30] audit: type=1326 audit(1758025805.782:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 149.605630][ T30] audit: type=1326 audit(1758025805.792:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f67c598eba9 code=0x7ffc0000 [ 150.777719][ T6719] bond0: (slave erspan0): Opening slave failed [ 151.246079][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802de65000: rx timeout, send abort [ 151.254483][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802de65000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 151.441129][ T6717] block nbd0: Attempted send on invalid socket [ 151.478750][ T6717] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.325682][ T6738] mac80211_hwsim hwsim8 4$¿: renamed from wlan1 (while UP) [ 154.148787][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b704000: rx timeout, send abort [ 154.158676][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b704000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 154.206721][ T6746] journal_path: Lookup failure for './file0/../file0' [ 154.213839][ T6746] EXT4-fs: error: could not find journal device path [ 154.527507][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.554035][ T6756] 9pnet_fd: Insufficient options for proto=fd [ 154.575398][ T6756] evm: overlay not supported [ 154.642825][ T5971] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.807766][ T5971] usb 3-1: Using ep0 maxpacket: 8 [ 154.824328][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.847080][ T5917] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 154.865199][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.881722][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.886027][ T5971] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 154.898970][ T5917] usb 5-1: Product: syz [ 154.903553][ T5917] usb 5-1: Manufacturer: syz [ 154.972742][ T6762] comedi comedi3: pcmda12: I/O port conflict (0x1,16) [ 155.483639][ T5917] usb 5-1: SerialNumber: syz [ 155.495150][ T5917] cdc_mbim 5-1:1.0: skipping garbage [ 155.643688][ T5971] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 155.668441][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.806979][ T6768] tmpfs: Bad value for 'nr_inodes' [ 155.812549][ T5971] usb 3-1: Product: syz [ 155.826580][ T5971] usb 3-1: Manufacturer: syz [ 156.384799][ T5971] usb 3-1: SerialNumber: syz [ 156.405826][ T5971] usb 3-1: config 0 descriptor?? [ 156.434767][ T5971] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 156.477154][ T5971] usb 3-1: setting power ON [ 156.494386][ T5971] dvb-usb: bulk message failed: -22 (2/0) [ 156.590957][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.637049][ T6776] dvb-usb: bulk message failed: -22 (3/0) [ 156.656521][ T6777] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 156.666162][ T6776] cxusb: i2c rd: len=4096 is too big! [ 156.666162][ T6776] [ 156.670067][ T5971] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 156.725867][ T6775] cxusb: i2c rd: len=4096 is too big! [ 156.725867][ T6775] [ 156.733570][ T5971] usb 3-1: media controller created [ 156.771701][ T5917] cdc_mbim 5-1:1.0: bind() failure [ 156.817043][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.832713][ T5917] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 156.892434][ T5917] cdc_ncm 5-1:1.1: bind() failure [ 156.950545][ T5917] usb 5-1: USB disconnect, device number 3 [ 157.104798][ T5971] usb 3-1: selecting invalid altsetting 6 [ 157.111360][ T5971] usb 3-1: digital interface selection failed (-22) [ 157.128914][ T5971] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 157.140855][ T5971] usb 3-1: setting power OFF [ 157.376522][ T5971] dvb-usb: bulk message failed: -22 (2/0) [ 157.398336][ T5971] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 157.425106][ T5971] (NULL device *): no alternate interface [ 157.578474][ T5971] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 157.698176][ T5971] usb 3-1: USB disconnect, device number 6 [ 157.881596][ T6789] overlayfs: conflicting lowerdir path [ 158.276454][ T6764] [U] ¹ [ 159.317314][ T6802] journal_path: Lookup failure for './file0/../file0' [ 159.324261][ T6802] EXT4-fs: error: could not find journal device path [ 159.767643][ T5864] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.772124][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.892302][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b652c00: rx timeout, send abort [ 159.900835][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b652c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 160.079170][ T5971] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.316541][ T5971] usb 4-1: device descriptor read/64, error -71 [ 160.606002][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.615039][ T6813] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 160.630246][ T6813] bond0: (slave gre0): Error -95 calling set_mac_address [ 160.801547][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 161.461187][ T5971] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.577231][ T6828] sp0: Synchronizing with TNC [ 161.767564][ T5971] usb 4-1: device descriptor read/64, error -71 [ 161.878023][ T5971] usb usb4-port1: attempt power cycle [ 162.090745][ T6847] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 162.180636][ T6847] EXT4-fs (loop4): unable to read superblock [ 162.487898][ T5971] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.610234][ T5971] usb 4-1: device descriptor read/8, error -71 [ 162.768068][ T6852] iso9660: Unknown parameter 'check' [ 163.170955][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.328833][ T6855] journal_path: Lookup failure for './file0/../file0' [ 163.339732][ T6855] EXT4-fs: error: could not find journal device path [ 163.439898][ T5946] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.467599][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.723540][ T5946] usb 5-1: config 0 descriptor?? [ 163.958506][ T5946] cp210x 5-1:0.0: cp210x converter detected [ 164.180579][ T6870] binder: BINDER_SET_CONTEXT_MGR already set [ 164.261875][ T5946] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 164.269602][ T6870] binder: 6868:6870 ioctl 4018620d 200000004a80 returned -16 [ 164.316329][ T5946] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 164.336564][ T5946] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 164.377142][ T5946] usb 5-1: cp210x converter now attached to ttyUSB0 [ 164.404786][ T5946] usb 5-1: USB disconnect, device number 4 [ 164.459028][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.501579][ T5946] cp210x 5-1:0.0: device disconnected [ 164.907975][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065c87c00: rx timeout, send abort [ 164.916484][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888065c87c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 166.906612][ T6906] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 166.917508][ T6906] EXT4-fs (loop4): unable to read superblock [ 166.959270][ T6905] bridge0: entered promiscuous mode [ 166.990658][ T6905] bridge0: port 3(macvtap1) entered blocking state [ 167.021691][ T6905] bridge0: port 3(macvtap1) entered disabled state [ 167.034791][ T6905] macvtap1: entered allmulticast mode [ 167.041149][ T6905] bridge0: entered allmulticast mode [ 167.152142][ T6905] macvtap1: left allmulticast mode [ 167.160681][ T6905] bridge0: left allmulticast mode [ 167.204999][ T6906] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.215154][ T6906] FAT-fs (loop4): unable to read boot sector [ 167.674716][ T6905] bridge0: left promiscuous mode [ 167.696884][ T6906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.237037][ T6921] bridge0: entered promiscuous mode [ 168.259496][ T6921] bridge0: port 3(macvtap1) entered blocking state [ 168.298065][ T6921] bridge0: port 3(macvtap1) entered disabled state [ 168.304738][ T6921] macvtap1: entered allmulticast mode [ 168.397517][ T6921] bridge0: entered allmulticast mode [ 168.480781][ T6921] macvtap1: left allmulticast mode [ 168.486623][ T6921] bridge0: left allmulticast mode [ 168.667121][ T5946] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.907770][ T6921] bridge0: left promiscuous mode [ 168.937290][ T6942] binder: BINDER_SET_CONTEXT_MGR already set [ 168.942167][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 168.958514][ T6942] binder: 6936:6942 ioctl 4018620d 200000004a80 returned -16 [ 168.994373][ T5946] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 169.226791][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.481666][ T5946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.565335][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.578941][ T5946] usb 2-1: Product: syz [ 169.597579][ T5946] usb 2-1: Manufacturer: syz [ 169.602397][ T5946] usb 2-1: SerialNumber: syz [ 169.809811][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 170.389340][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab2c400: rx timeout, send abort [ 170.399005][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ab2c400: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 172.248612][ T5946] usb 2-1: 0:2 : does not exist [ 172.293934][ T5946] usb 2-1: USB disconnect, device number 4 [ 172.448030][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.597848][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 172.615108][ T5917] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 172.626151][ T5917] usb 5-1: config 0 has no interface number 0 [ 172.633983][ T5917] usb 5-1: too many endpoints for config 0 interface 222 altsetting 195: 227, using maximum allowed: 30 [ 172.652279][ T5917] usb 5-1: config 0 interface 222 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 172.667237][ T5917] usb 5-1: config 0 interface 222 has no altsetting 0 [ 172.680475][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 172.691425][ T5917] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 172.699722][ T5917] usb 5-1: Product: syz [ 172.704694][ T5917] usb 5-1: Manufacturer: syz [ 172.709839][ T5917] usb 5-1: SerialNumber: syz [ 172.734245][ T5917] usb 5-1: config 0 descriptor?? [ 173.057571][ T6969] nbd0: detected capacity change from 0 to 127 [ 173.101323][ T52] block nbd0: Receive control failed (result -32) [ 173.103206][ T6177] block nbd0: Send control failed (result -32) [ 173.135281][ T5917] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 173.148290][ T5988] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.160526][ T6177] block nbd0: Request send failed, requeueing [ 173.227810][ T5917] gspca_zc3xx: reg_w_i err -71 [ 173.250095][ T1078] block nbd0: Dead connection, failed to find a fallback [ 173.257789][ T1078] block nbd0: shutting down sockets [ 173.263310][ T1078] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.274422][ T1078] Buffer I/O error on dev nbd0, logical block 0, async page read [ 173.283246][ T6177] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.294917][ T5917] gspca_zc3xx 5-1:0.222: probe with driver gspca_zc3xx failed with error -71 [ 173.304653][ T6177] Buffer I/O error on dev nbd0, logical block 1, async page read [ 173.315207][ T5917] usb 5-1: USB disconnect, device number 5 [ 173.321381][ T6177] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.346726][ T6177] Buffer I/O error on dev nbd0, logical block 2, async page read [ 173.355254][ T6177] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.364672][ T6177] Buffer I/O error on dev nbd0, logical block 3, async page read [ 173.373518][ T6177] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.384086][ T6177] Buffer I/O error on dev nbd0, logical block 0, async page read [ 173.384198][ T5988] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 173.404283][ T6177] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.437497][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.463601][ T6177] Buffer I/O error on dev nbd0, logical block 1, async page read [ 173.506406][ T5988] usb 3-1: config 0 descriptor?? [ 173.516642][ T6177] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.555352][ T5988] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 173.564694][ T6177] Buffer I/O error on dev nbd0, logical block 2, async page read [ 173.774038][ T6177] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.507929][ T6177] Buffer I/O error on dev nbd0, logical block 3, async page read [ 174.516056][ T6177] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.559423][ T5988] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 174.633950][ T6992] mkiss: ax0: crc mode is auto. [ 174.659866][ T6992] usb usb1: check_ctrlrecip: process 6992 (syz.0.253) requesting ep 01 but needs 81 [ 174.677490][ T6177] Buffer I/O error on dev nbd0, logical block 0, async page read [ 174.696126][ T6177] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.741999][ T6177] Buffer I/O error on dev nbd0, logical block 1, async page read [ 174.783698][ T5988] gspca_cpia1: usb_control_msg 01, error -32 [ 174.859695][ T6177] ldm_validate_partition_table(): Disk read failed. [ 174.900949][ T5988] gspca_cpia1: usb_control_msg 01, error -71 [ 175.009263][ T5988] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 175.031192][ T6177] Dev nbd0: unable to read RDB block 0 [ 175.124903][ T5988] usb 3-1: USB disconnect, device number 7 [ 175.326260][ T6177] nbd0: unable to read partition table [ 175.466053][ T6177] ldm_validate_partition_table(): Disk read failed. [ 175.502838][ T6177] Dev nbd0: unable to read RDB block 0 [ 175.524470][ T6177] nbd0: unable to read partition table [ 175.638288][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 175.659768][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 175.671026][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 175.704090][ T7008] EXT4-fs (loop3): unable to read superblock [ 175.716286][ T7007] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 175.734586][ T7007] UDF-fs: Scanning with blocksize 512 failed [ 175.742565][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 175.917754][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 175.960089][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 175.982510][ T7007] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 175.997147][ T7007] UDF-fs: Scanning with blocksize 1024 failed [ 176.156901][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 176.238241][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af5a800: rx timeout, send abort [ 176.246869][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807af5a800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 176.327714][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 176.350612][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 176.374865][ T7007] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 176.382683][ T7007] UDF-fs: Scanning with blocksize 2048 failed [ 176.460500][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 176.589549][ T7019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.908665][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 176.941556][ T7008] iso9660: Unknown parameter 'check' [ 176.962331][ T7007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 177.047455][ T7007] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 177.116445][ T7007] UDF-fs: Scanning with blocksize 4096 failed [ 177.126840][ T7007] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 177.819001][ T5945] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.990435][ T5945] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.268933][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.421124][ T5945] usb 4-1: config 0 descriptor?? [ 178.592083][ T7031] rdma_op ffff8880580381f0 conn xmit_rdma 0000000000000000 [ 179.782281][ T5945] cp210x 4-1:0.0: cp210x converter detected [ 180.106001][ T5945] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 180.127718][ T5989] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.136586][ T7041] random: crng reseeded on system resumption [ 180.146450][ T5945] cp210x 4-1:0.0: querying part number failed [ 180.290918][ T5945] usb 4-1: cp210x converter now attached to ttyUSB0 [ 180.321236][ T5945] usb 4-1: USB disconnect, device number 9 [ 180.327466][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 180.340863][ T5989] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 180.342014][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.356422][ T5989] usb 2-1: config 0 has no interface number 0 [ 180.370820][ T5945] cp210x 4-1:0.0: device disconnected [ 180.381488][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.405964][ T5989] usb 2-1: too many endpoints for config 0 interface 171 altsetting 48: 99, using maximum allowed: 30 [ 180.425641][ T5989] usb 2-1: config 0 interface 171 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 180.446477][ T5989] usb 2-1: config 0 interface 171 has no altsetting 0 [ 180.456592][ T5989] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 180.469006][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 180.478387][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.508805][ T5989] usb 2-1: config 0 descriptor?? [ 180.572083][ T5925] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.600410][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.618122][ T5925] usb 5-1: Product: syz [ 180.625045][ T5925] usb 5-1: Manufacturer: syz [ 180.689529][ T5925] usb 5-1: SerialNumber: syz [ 181.063959][ T5925] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.098105][ T5989] usb 2-1: string descriptor 0 read error: -32 [ 181.116071][ T5989] gspca_main: sunplus-2.14.0 probing 041e:400b [ 181.132082][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.377718][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.390797][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.545610][ T5989] gspca_sunplus: reg_w_riv err -71 [ 181.553027][ T5989] sunplus 2-1:0.171: probe with driver sunplus failed with error -71 [ 181.564781][ T5989] usb 2-1: USB disconnect, device number 5 [ 182.322166][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 182.344603][ T9] ath9k_htc: Failed to initialize the device [ 182.404731][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 182.659907][ T9] usb 5-1: USB disconnect, device number 6 [ 183.656840][ T7090] blk_print_req_error: 155 callbacks suppressed [ 183.656858][ T7090] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 183.678081][ T7090] EXT4-fs (loop3): unable to read superblock [ 183.685692][ T7092] bridge0: entered promiscuous mode [ 183.693428][ T7092] bridge0: port 3(macvtap1) entered blocking state [ 183.701131][ T7092] bridge0: port 3(macvtap1) entered disabled state [ 184.213201][ T7096] iso9660: Unknown parameter 'check' [ 184.218074][ T7092] macvtap1: entered allmulticast mode [ 184.236733][ T7092] bridge0: entered allmulticast mode [ 184.252541][ T7092] macvtap1: left allmulticast mode [ 184.272948][ T7092] bridge0: left allmulticast mode [ 184.316164][ T7099] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 184.376523][ T7099] EXT4-fs (loop4): unable to read superblock [ 184.389433][ T7092] bridge0: left promiscuous mode [ 184.487788][ T5946] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.006573][ T7099] iso9660: Unknown parameter 'check' [ 185.022933][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.051458][ T5946] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.063468][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.089430][ T5946] usb 4-1: config 0 descriptor?? [ 185.100581][ T5946] cp210x 4-1:0.0: cp210x converter detected [ 185.187913][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 185.201214][ T24] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 185.211447][ T24] usb 2-1: config 0 has no interface number 0 [ 185.218946][ T24] usb 2-1: too many endpoints for config 0 interface 222 altsetting 195: 227, using maximum allowed: 30 [ 185.230831][ T24] usb 2-1: config 0 interface 222 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 185.244829][ T24] usb 2-1: config 0 interface 222 has no altsetting 0 [ 185.256699][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 185.266478][ T24] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 185.274890][ T24] usb 2-1: Product: syz [ 185.279349][ T5945] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.287971][ T24] usb 2-1: Manufacturer: syz [ 185.293553][ T24] usb 2-1: SerialNumber: syz [ 185.301271][ T5946] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 185.311690][ T24] usb 2-1: config 0 descriptor?? [ 185.324707][ T5946] cp210x 4-1:0.0: querying part number failed [ 185.336773][ T5946] usb 4-1: cp210x converter now attached to ttyUSB0 [ 185.630008][ T5945] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.695532][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.707521][ T5945] usb 5-1: config 0 descriptor?? [ 185.716703][ T5945] cp210x 5-1:0.0: cp210x converter detected [ 185.723123][ T7103] nbd1: detected capacity change from 0 to 127 [ 185.744709][ T52] block nbd1: Receive control failed (result -104) [ 185.761004][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 185.770920][ T24] gspca_zc3xx: reg_w_i err -71 [ 185.775915][ T24] gspca_zc3xx 2-1:0.222: probe with driver gspca_zc3xx failed with error -71 [ 185.794411][ T24] usb 2-1: USB disconnect, device number 6 [ 185.862876][ T7114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 185.943983][ T5945] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 186.084669][ T5945] cp210x 5-1:0.0: querying part number failed [ 186.102025][ T5945] usb 5-1: cp210x converter now attached to ttyUSB1 [ 186.677084][ T5945] usb 5-1: USB disconnect, device number 7 [ 186.696675][ T5945] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 186.721599][ T5945] cp210x 5-1:0.0: device disconnected [ 186.751802][ T9] usb 4-1: USB disconnect, device number 10 [ 186.864128][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.872698][ T9] cp210x 4-1:0.0: device disconnected [ 186.947817][ T7121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.292'. [ 187.223474][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.294'. [ 188.320405][ T7139] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 188.338166][ T7140] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 188.365088][ T7142] FAULT_INJECTION: forcing a failure. [ 188.365088][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 188.393560][ T7142] CPU: 0 UID: 0 PID: 7142 Comm: syz.4.299 Not tainted syzkaller #0 PREEMPT(full) [ 188.393583][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.393594][ T7142] Call Trace: [ 188.393601][ T7142] [ 188.393609][ T7142] dump_stack_lvl+0x189/0x250 [ 188.393635][ T7142] ? __pfx____ratelimit+0x10/0x10 [ 188.393659][ T7142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.393678][ T7142] ? __pfx__printk+0x10/0x10 [ 188.393706][ T7142] ? __pfx___might_resched+0x10/0x10 [ 188.393728][ T7142] ? fs_reclaim_acquire+0x7d/0x100 [ 188.393750][ T7142] should_fail_ex+0x414/0x560 [ 188.393776][ T7142] should_failslab+0xa8/0x100 [ 188.393795][ T7142] kmem_cache_alloc_noprof+0x74/0x6e0 [ 188.393819][ T7142] ? alloc_vfsmnt+0x23/0x430 [ 188.393845][ T7142] alloc_vfsmnt+0x23/0x430 [ 188.393866][ T7142] clone_mnt+0x4b/0x9a0 [ 188.393891][ T7142] copy_tree+0xde/0x930 [ 188.393917][ T7142] ? alloc_mnt_ns+0x2fc/0x3d0 [ 188.393943][ T7142] copy_mnt_ns+0x19d/0x870 [ 188.393959][ T7142] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 188.393982][ T7142] ? create_new_namespaces+0x31/0x720 [ 188.394009][ T7142] create_new_namespaces+0xd1/0x720 [ 188.394034][ T7142] ? bpf_lsm_capable+0x9/0x20 [ 188.394054][ T7142] ? security_capable+0x7e/0x2e0 [ 188.394080][ T7142] unshare_nsproxy_namespaces+0x11c/0x170 [ 188.394112][ T7142] ksys_unshare+0x4c8/0x8c0 [ 188.394136][ T7142] ? __pfx_ksys_unshare+0x10/0x10 [ 188.394156][ T7142] ? ksys_write+0x1e1/0x250 [ 188.394186][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 188.394230][ T7142] __x64_sys_unshare+0x38/0x50 [ 188.394247][ T7142] do_syscall_64+0xfa/0xfa0 [ 188.394268][ T7142] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.394291][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.394307][ T7142] ? clear_bhb_loop+0x60/0xb0 [ 188.394327][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.394343][ T7142] RIP: 0033:0x7f44b218eba9 [ 188.394366][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.394379][ T7142] RSP: 002b:00007f44b03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.394404][ T7142] RAX: ffffffffffffffda RBX: 00007f44b23d5fa0 RCX: 00007f44b218eba9 [ 188.394416][ T7142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000 [ 188.394426][ T7142] RBP: 00007f44b03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.394436][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.394446][ T7142] R13: 00007f44b23d6038 R14: 00007f44b23d5fa0 R15: 00007fffac646438 [ 188.394481][ T7142] [ 188.394559][ T7142] ------------[ cut here ]------------ [ 188.404823][ T7139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.415039][ T7142] WARNING: kernel/nstree.c:115 at __ns_tree_remove+0x28d/0x330, CPU#0: syz.4.299/7142 [ 188.448928][ T7146] usb usb8: usbfs: process 7146 (syz.1.300) did not claim interface 0 before use [ 188.451837][ T7142] Modules linked in: [ 188.688805][ T7142] CPU: 0 UID: 0 PID: 7142 Comm: syz.4.299 Not tainted syzkaller #0 PREEMPT(full) [ 188.698565][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.709420][ T7142] RIP: 0010:__ns_tree_remove+0x28d/0x330 [ 188.715047][ T7142] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 b4 f8 09 e8 94 f1 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 86 f1 31 00 90 0f 0b 90 e9 ee fd ff ff [ 188.734688][ T7142] RSP: 0018:ffffc9001a317aa8 EFLAGS: 00010293 [ 188.740963][ T7142] RAX: ffffffff818de18c RBX: ffff888031b5a220 RCX: ffff88802eb90000 [ 188.749024][ T7142] RDX: 0000000000000000 RSI: ffff888031b5a220 RDI: ffff888031b5a220 [ 188.757074][ T7142] RBP: dffffc0000000000 R08: ffffffff8e1eff53 R09: 1ffffffff1c3dfea [ 188.765097][ T7142] R10: dffffc0000000000 R11: fffffbfff1c3dfeb R12: ffff888031b5a220 [ 188.773078][ T7142] R13: 1ffff1100636b443 R14: ffff888031b5a200 R15: ffffffff8e1ea7c0 [ 188.781068][ T7142] FS: 00007f44b03f66c0(0000) GS:ffff8881259e0000(0000) knlGS:0000000000000000 [ 188.790951][ T7142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.798249][ T7142] CR2: 0000200000000000 CR3: 0000000063eb6000 CR4: 00000000003526f0 [ 188.806216][ T7142] Call Trace: [ 188.809523][ T7142] [ 188.812475][ T7142] ? dec_ucount+0x15c/0x180 [ 188.816987][ T7142] free_mnt_ns+0xd1/0x110 [ 188.821329][ T7142] namespace_unlock+0x529/0x760 [ 188.826179][ T7142] ? clone_mnt+0xba/0x9a0 [ 188.830518][ T7142] ? __pfx_namespace_unlock+0x10/0x10 [ 188.835878][ T7142] ? alloc_mnt_ns+0x2fc/0x3d0 [ 188.840555][ T7142] copy_mnt_ns+0x6e0/0x870 [ 188.844983][ T7142] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 188.850385][ T7142] ? create_new_namespaces+0x31/0x720 [ 188.855769][ T7142] create_new_namespaces+0xd1/0x720 [ 188.861009][ T7142] ? bpf_lsm_capable+0x9/0x20 [ 188.865673][ T7142] ? security_capable+0x7e/0x2e0 [ 188.870668][ T7142] unshare_nsproxy_namespaces+0x11c/0x170 [ 188.876382][ T7142] ksys_unshare+0x4c8/0x8c0 [ 188.880911][ T7142] ? __pfx_ksys_unshare+0x10/0x10 [ 188.885918][ T7142] ? ksys_write+0x1e1/0x250 [ 188.891273][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 188.896129][ T7142] __x64_sys_unshare+0x38/0x50 [ 188.901490][ T7142] do_syscall_64+0xfa/0xfa0 [ 188.906032][ T7142] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.911244][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.917293][ T7142] ? clear_bhb_loop+0x60/0xb0 [ 188.921974][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.927883][ T7142] RIP: 0033:0x7f44b218eba9 [ 188.932293][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.951907][ T7142] RSP: 002b:00007f44b03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.960340][ T7142] RAX: ffffffffffffffda RBX: 00007f44b23d5fa0 RCX: 00007f44b218eba9 [ 188.968330][ T7142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000 [ 188.976295][ T7142] RBP: 00007f44b03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.984303][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.993255][ T7142] R13: 00007f44b23d6038 R14: 00007f44b23d5fa0 R15: 00007fffac646438 [ 189.001809][ T7142] [ 189.004851][ T7142] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.012108][ T7142] CPU: 0 UID: 0 PID: 7142 Comm: syz.4.299 Not tainted syzkaller #0 PREEMPT(full) [ 189.021281][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.031334][ T7142] Call Trace: [ 189.034601][ T7142] [ 189.037522][ T7142] dump_stack_lvl+0x99/0x250 [ 189.042093][ T7142] ? __asan_memcpy+0x40/0x70 [ 189.046662][ T7142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.051835][ T7142] ? __pfx__printk+0x10/0x10 [ 189.056408][ T7142] vpanic+0x237/0x6d0 [ 189.060454][ T7142] ? __pfx_vpanic+0x10/0x10 [ 189.064932][ T7142] ? is_bpf_text_address+0x292/0x2b0 [ 189.070194][ T7142] ? is_bpf_text_address+0x26/0x2b0 [ 189.075371][ T7142] panic+0xb9/0xc0 [ 189.079071][ T7142] ? __pfx_panic+0x10/0x10 [ 189.083474][ T7142] __warn+0x334/0x4c0 [ 189.087438][ T7142] ? __ns_tree_remove+0x28d/0x330 [ 189.092446][ T7142] ? __ns_tree_remove+0x28d/0x330 [ 189.097471][ T7142] report_bug+0x2be/0x4f0 [ 189.101790][ T7142] ? __ns_tree_remove+0x28d/0x330 [ 189.106971][ T7142] ? __ns_tree_remove+0x28d/0x330 [ 189.111976][ T7142] ? __ns_tree_remove+0x28f/0x330 [ 189.116978][ T7142] handle_bug+0x84/0x160 [ 189.121201][ T7142] exc_invalid_op+0x1a/0x50 [ 189.125678][ T7142] asm_exc_invalid_op+0x1a/0x20 [ 189.130502][ T7142] RIP: 0010:__ns_tree_remove+0x28d/0x330 [ 189.136115][ T7142] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 b4 f8 09 e8 94 f1 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 86 f1 31 00 90 0f 0b 90 e9 ee fd ff ff [ 189.155694][ T7142] RSP: 0018:ffffc9001a317aa8 EFLAGS: 00010293 [ 189.161736][ T7142] RAX: ffffffff818de18c RBX: ffff888031b5a220 RCX: ffff88802eb90000 [ 189.169701][ T7142] RDX: 0000000000000000 RSI: ffff888031b5a220 RDI: ffff888031b5a220 [ 189.177658][ T7142] RBP: dffffc0000000000 R08: ffffffff8e1eff53 R09: 1ffffffff1c3dfea [ 189.185605][ T7142] R10: dffffc0000000000 R11: fffffbfff1c3dfeb R12: ffff888031b5a220 [ 189.193556][ T7142] R13: 1ffff1100636b443 R14: ffff888031b5a200 R15: ffffffff8e1ea7c0 [ 189.201512][ T7142] ? __ns_tree_remove+0x28c/0x330 [ 189.206527][ T7142] ? __ns_tree_remove+0x28c/0x330 [ 189.211534][ T7142] ? dec_ucount+0x15c/0x180 [ 189.216022][ T7142] free_mnt_ns+0xd1/0x110 [ 189.220329][ T7142] namespace_unlock+0x529/0x760 [ 189.225156][ T7142] ? clone_mnt+0xba/0x9a0 [ 189.229465][ T7142] ? __pfx_namespace_unlock+0x10/0x10 [ 189.234819][ T7142] ? alloc_mnt_ns+0x2fc/0x3d0 [ 189.239474][ T7142] copy_mnt_ns+0x6e0/0x870 [ 189.243867][ T7142] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 189.249219][ T7142] ? create_new_namespaces+0x31/0x720 [ 189.254578][ T7142] create_new_namespaces+0xd1/0x720 [ 189.259756][ T7142] ? bpf_lsm_capable+0x9/0x20 [ 189.264412][ T7142] ? security_capable+0x7e/0x2e0 [ 189.269345][ T7142] unshare_nsproxy_namespaces+0x11c/0x170 [ 189.275049][ T7142] ksys_unshare+0x4c8/0x8c0 [ 189.279530][ T7142] ? __pfx_ksys_unshare+0x10/0x10 [ 189.284531][ T7142] ? ksys_write+0x1e1/0x250 [ 189.289017][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 189.293851][ T7142] __x64_sys_unshare+0x38/0x50 [ 189.298599][ T7142] do_syscall_64+0xfa/0xfa0 [ 189.303088][ T7142] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.308283][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.314326][ T7142] ? clear_bhb_loop+0x60/0xb0 [ 189.318994][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.324863][ T7142] RIP: 0033:0x7f44b218eba9 [ 189.329255][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.348847][ T7142] RSP: 002b:00007f44b03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.357241][ T7142] RAX: ffffffffffffffda RBX: 00007f44b23d5fa0 RCX: 00007f44b218eba9 [ 189.365277][ T7142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000 [ 189.373225][ T7142] RBP: 00007f44b03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.381190][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.389139][ T7142] R13: 00007f44b23d6038 R14: 00007f44b23d5fa0 R15: 00007fffac646438 [ 189.397094][ T7142] [ 189.400347][ T7142] Kernel Offset: disabled [ 189.404678][ T7142] Rebooting in 86400 seconds..