last executing test programs: 5m47.324792425s ago: executing program 2 (id=3425): preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/61, 0x3d}], 0x1, 0x3, 0xfffffc04) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000003c0)=0x0) setuid(r1) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='hfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020) (fail_nth: 2) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x40d0) sendto$inet6(r0, &(0x7f0000000240)="499f70d51e20f9329506", 0xa, 0x4000000, 0x0, 0x0) 5m46.423631552s ago: executing program 2 (id=3433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000000240)=""/28, 0xffd2) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa, "24f84cc972ffbbdceaa5"}, &(0x7f00000001c0)=0x2e) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x1000, 0x0, {}, {0x5, 0x0, 0x0, 0x7, 0xfe, 0x6, '4ADM'}, 0xffffffbb, 0x2, {0x0}, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r4, &(0x7f0000000ac0)={0x52, 0x7d, 0x1, {{0x0, 0x3c, 0x10, 0x10001, {0x4, 0x0, 0x7}, 0x40000000, 0x81, 0x3ac, 0x4, 0x0, '', 0x4, 'GPL\x00', 0x1, '\x00', 0x4, 'GPL\x00'}, 0x1, '&'}}, 0x52) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x7, @private0, 0x9}, {0xa, 0x4e24, 0x5, @mcast2, 0x2d}, 0x0, {[0x5, 0xcd, 0x7, 0x9, 0x7, 0x1, 0x3, 0xe]}}, 0x5c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200a6000000000000000004000000000001a80016ea1f000840032e5f5cc92011148ed08734843cb12b0000fd03600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e88c60d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r9 = openat(r8, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r9, &(0x7f0000000d00)='nf \\27.0.0.1 2000000000 localhos\\\n', 0x24) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, &(0x7f00000001c0)=@other={'lock', ' ', 'mem'}, 0x9) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x10003) 5m45.559387674s ago: executing program 2 (id=3446): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000001c180)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)="cdbdf319", 0x4}], 0x1, &(0x7f000001be80)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000000000001400000000000000290000003e0000000080000000000000300000000000000029000000370000000602000000000000040105c2040000000105020007c2040000000400010000001400000000000000290000000b000000000000f6000000008801"], 0x200}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f0000000680)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x202}, 0x50) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 5m45.19017169s ago: executing program 2 (id=3449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x81e88c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) 5m45.026423256s ago: executing program 2 (id=3452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202", 0x4e}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d7", 0x3b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000500)={0x2, 0x8, 0xc000, 0x703}, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000600)={0xc5, 0x0, r2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m42.176002158s ago: executing program 2 (id=3469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e20284", 0x4f}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 3) 5m41.794397983s ago: executing program 32 (id=3469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e20284", 0x4f}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 3) 2.797516627s ago: executing program 3 (id=6919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2.776241948s ago: executing program 4 (id=6920): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 2.509554523s ago: executing program 3 (id=6923): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 2.46698s ago: executing program 4 (id=6924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}]}, 0x34}}, 0x0) 2.452726177s ago: executing program 0 (id=6926): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x2f, 0x0}}], 0x1, 0x800) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b80)="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", 0x4a7}], 0x1}, 0x44000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.192834732s ago: executing program 1 (id=6927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.023117394s ago: executing program 5 (id=6929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000940)="b9ff0300600d698c229e14f0080096f65878a46bdf847888e10b87210941fc5a8b6eb70494665ef02c6958c8", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.002904581s ago: executing program 4 (id=6930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.872775344s ago: executing program 0 (id=6931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x35, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.760188619s ago: executing program 5 (id=6932): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0x1, 0xc1, 0x0, 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000033c0)=""/4089, 0xff9}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.610025903s ago: executing program 5 (id=6933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x40810, 0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1.584264982s ago: executing program 4 (id=6934): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x1ff, 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) 1.435828435s ago: executing program 1 (id=6935): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x3ffffffe, 0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 1.433383308s ago: executing program 3 (id=6936): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x800002, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0xb3f97f6c43c4fec6, 0x8001}}, 0x50) 1.319122098s ago: executing program 5 (id=6937): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 1.234204435s ago: executing program 0 (id=6938): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000019380)="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", 0x2000, 0x0) 1.131193247s ago: executing program 1 (id=6939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) 1.129309614s ago: executing program 4 (id=6940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}]}, 0x34}}, 0x0) 1.036037529s ago: executing program 3 (id=6941): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x2f, 0x0}}], 0x1, 0x800) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b80)="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", 0x4a7}], 0x1}, 0x44000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.025253732s ago: executing program 5 (id=6942): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0xd1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd33) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1e811b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e812b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e8133) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1ffe00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1ffe0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1ffe30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0x1fff23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1fff2b) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000100)='config', 0x6, 0x100224) pwrite64(r0, &(0x7f0000000100)="00000000000010", 0x7, 0x10022e) pwrite64(r0, &(0x7f0000000100)='log', 0x3, 0x100246) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 962.29705ms ago: executing program 0 (id=6943): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 746.936ms ago: executing program 1 (id=6944): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0x73d, 0x100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 541.502874ms ago: executing program 1 (id=6945): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) readv(r0, 0x0, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 496.632035ms ago: executing program 4 (id=6946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 496.232418ms ago: executing program 5 (id=6947): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 467.534156ms ago: executing program 0 (id=6948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b00003c0012800b000100697036746e6c00002c00028014000300000000000000000011"], 0x5c}}, 0x24000000) 361.295396ms ago: executing program 3 (id=6949): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x35, 0x38, 0x0, 0x33, 0x32, 0x63, 0x62, 0x64, 0x39, 0x37, 0x33, 0x30, 0x34, 0x63, 0x35, 0x61]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "c94850b5422ef7349e00b19a68e1b8724095a25dcd3291884d1cdda78228ab264bc907f76304dd158ea3472972e50b3b674b92154dbfbd10938f75dcf44d2048", 0x35}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x31, 0x30, 0x30, 0x66, 0x30, 0x62, 0x30, 0x30, 0x66, 0x39, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x18}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x68, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 170.138258ms ago: executing program 1 (id=6950): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 162.268888ms ago: executing program 0 (id=6951): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, 0x0, 0x0, 0xd1b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, 0x0, 0x0, 0xd33) pwrite64(r0, 0x0, 0x0, 0x1e8000) pwrite64(r0, 0x0, 0x0, 0x1e800c) pwrite64(r0, 0x0, 0x0, 0x1e8030) pwrite64(r0, 0x0, 0x0, 0x1e811b) pwrite64(r0, 0x0, 0x0, 0x1e8123) pwrite64(r0, 0x0, 0x0, 0x1e812b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00', 0x3, 0x1e8133) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000100)='log', 0x3, 0x100246) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 0s ago: executing program 3 (id=6952): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 617.623170][ T5725] usb 4-1: USB disconnect, device number 67 [ 618.005705][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.239719][T15387] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 618.239743][T15387] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3595'. [ 618.379542][T15064] team0: Port device team_slave_0 added [ 618.663229][T14610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 618.702084][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.707430][T15064] team0: Port device team_slave_1 added [ 618.736630][T15400] FAULT_INJECTION: forcing a failure. [ 618.736630][T15400] name failslab, interval 1, probability 0, space 0, times 0 [ 618.736685][T15400] CPU: 1 UID: 0 PID: 15400 Comm: syz.4.3600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.736717][T15400] Tainted: [L]=SOFTLOCKUP [ 618.736738][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.736753][T15400] Call Trace: [ 618.736762][T15400] [ 618.736772][T15400] dump_stack_lvl+0xe8/0x150 [ 618.736811][T15400] should_fail_ex+0x467/0x600 [ 618.736850][T15400] should_failslab+0xa8/0x100 [ 618.736876][T15400] __kmalloc_cache_noprof+0xa0/0x6b0 [ 618.736898][T15400] ? vhost_task_create+0x123/0x380 [ 618.736929][T15400] ? vhost_task_create+0x123/0x380 [ 618.736967][T15400] vhost_task_create+0x123/0x380 [ 618.736998][T15400] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 618.737022][T15400] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 618.737046][T15400] ? __pfx_vhost_task_create+0x10/0x10 [ 618.737086][T15400] ? __pfx_vhost_task_fn+0x10/0x10 [ 618.737122][T15400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.737150][T15400] ? lockdep_hardirqs_on+0x7a/0x110 [ 618.737176][T15400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 618.737215][T15400] ? mutex_lock_nested+0x152/0x1d0 [ 618.737246][T15400] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 618.737275][T15400] kvm_mmu_post_init_vm+0x147/0x2b0 [ 618.737304][T15400] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 618.737353][T15400] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 618.737379][T15400] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.737424][T15400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.737452][T15400] ? lockdep_hardirqs_on+0x7a/0x110 [ 618.737477][T15400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 618.737501][T15400] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 618.737522][T15400] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.737549][T15400] ? lock_acquire+0x106/0x350 [ 618.737570][T15400] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 618.737598][T15400] ? rt_write_unlock+0x19c/0x360 [ 618.737626][T15400] ? rt_write_unlock+0x1a8/0x360 [ 618.737659][T15400] kvm_vcpu_ioctl+0xa64/0xfe0 [ 618.737691][T15400] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 618.737712][T15400] ? hook_file_ioctl+0x1f3/0x600 [ 618.737746][T15400] ? __asan_memset+0x22/0x50 [ 618.737775][T15400] ? smack_file_ioctl+0x331/0x360 [ 618.737811][T15400] ? __pfx_smack_file_ioctl+0x10/0x10 [ 618.737854][T15400] ? __fget_files+0x2a/0x420 [ 618.737875][T15400] ? __fget_files+0x3a8/0x420 [ 618.737906][T15400] ? __fget_files+0x2a/0x420 [ 618.737934][T15400] ? bpf_lsm_file_ioctl+0x9/0x20 [ 618.737967][T15400] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 618.737990][T15400] __se_sys_ioctl+0xff/0x170 [ 618.738018][T15400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.738042][T15400] do_syscall_64+0x174/0x580 [ 618.738065][T15400] ? trace_irq_disable+0x3b/0x140 [ 618.738083][T15400] ? clear_bhb_loop+0x70/0xc0 [ 618.738099][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.738111][T15400] RIP: 0033:0x7f8db8cce0d9 [ 618.738126][T15400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.738137][T15400] RSP: 002b:00007f8db6f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.738154][T15400] RAX: ffffffffffffffda RBX: 00007f8db8f56090 RCX: 00007f8db8cce0d9 [ 618.738165][T15400] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 618.738173][T15400] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 618.738181][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.738189][T15400] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 618.738209][T15400] [ 618.926791][T14610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 619.065088][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.201658][T14610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 619.247540][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.379007][T14610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 619.445781][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.447710][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.447726][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.447753][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.582224][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.582243][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.582270][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.118549][T15426] FAULT_INJECTION: forcing a failure. [ 620.118549][T15426] name failslab, interval 1, probability 0, space 0, times 0 [ 620.118601][T15426] CPU: 1 UID: 0 PID: 15426 Comm: syz.4.3609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.118666][T15426] Tainted: [L]=SOFTLOCKUP [ 620.118675][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.118689][T15426] Call Trace: [ 620.118698][T15426] [ 620.118708][T15426] dump_stack_lvl+0xe8/0x150 [ 620.118767][T15426] should_fail_ex+0x467/0x600 [ 620.118807][T15426] should_failslab+0xa8/0x100 [ 620.118835][T15426] __kmalloc_cache_noprof+0xa0/0x6b0 [ 620.118859][T15426] ? vhost_task_create+0x123/0x380 [ 620.118904][T15426] ? vhost_task_create+0x123/0x380 [ 620.118943][T15426] vhost_task_create+0x123/0x380 [ 620.118972][T15426] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 620.118994][T15426] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 620.119018][T15426] ? __pfx_vhost_task_create+0x10/0x10 [ 620.119056][T15426] ? __pfx_vhost_task_fn+0x10/0x10 [ 620.119102][T15426] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 620.119129][T15426] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.119157][T15426] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 620.119184][T15426] ? mutex_lock_nested+0x152/0x1d0 [ 620.119216][T15426] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 620.119246][T15426] kvm_mmu_post_init_vm+0x147/0x2b0 [ 620.119276][T15426] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 620.119324][T15426] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 620.119349][T15426] ? do_raw_spin_lock+0x12b/0x2f0 [ 620.119395][T15426] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 620.119423][T15426] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.119449][T15426] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 620.119477][T15426] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 620.119500][T15426] ? do_raw_spin_lock+0x12b/0x2f0 [ 620.119529][T15426] ? lock_acquire+0x106/0x350 [ 620.119553][T15426] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 620.119585][T15426] ? rt_write_unlock+0x19c/0x360 [ 620.119611][T15426] ? rt_write_unlock+0x1a8/0x360 [ 620.119637][T15426] kvm_vcpu_ioctl+0xa64/0xfe0 [ 620.119674][T15426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 620.119696][T15426] ? hook_file_ioctl+0x1f3/0x600 [ 620.119730][T15426] ? __asan_memset+0x22/0x50 [ 620.119763][T15426] ? smack_file_ioctl+0x331/0x360 [ 620.119800][T15426] ? __pfx_smack_file_ioctl+0x10/0x10 [ 620.119845][T15426] ? __fget_files+0x2a/0x420 [ 620.119866][T15426] ? __fget_files+0x3a8/0x420 [ 620.119887][T15426] ? __fget_files+0x2a/0x420 [ 620.119913][T15426] ? bpf_lsm_file_ioctl+0x9/0x20 [ 620.119946][T15426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 620.119970][T15426] __se_sys_ioctl+0xff/0x170 [ 620.119999][T15426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.120025][T15426] do_syscall_64+0x174/0x580 [ 620.120051][T15426] ? trace_irq_disable+0x3b/0x140 [ 620.120085][T15426] ? clear_bhb_loop+0x70/0xc0 [ 620.120122][T15426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.120145][T15426] RIP: 0033:0x7f8db8cce0d9 [ 620.120167][T15426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.120186][T15426] RSP: 002b:00007f8db6f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.120211][T15426] RAX: ffffffffffffffda RBX: 00007f8db8f56090 RCX: 00007f8db8cce0d9 [ 620.120228][T15426] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 620.120252][T15426] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 620.120267][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.120281][T15426] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 620.120319][T15426] [ 621.271129][T15064] hsr_slave_0: entered promiscuous mode [ 621.289626][T15064] hsr_slave_1: entered promiscuous mode [ 621.290944][T15064] debugfs: 'hsr0' already exists in 'hsr' [ 621.290972][T15064] Cannot create hsr debugfs directory [ 621.399782][T15438] gretap1: entered promiscuous mode [ 621.399814][T15438] gretap1: entered allmulticast mode [ 621.591946][T15449] FAULT_INJECTION: forcing a failure. [ 621.591946][T15449] name failslab, interval 1, probability 0, space 0, times 0 [ 621.591984][T15449] CPU: 0 UID: 0 PID: 15449 Comm: syz.4.3618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 621.592011][T15449] Tainted: [L]=SOFTLOCKUP [ 621.592018][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.592030][T15449] Call Trace: [ 621.592037][T15449] [ 621.592045][T15449] dump_stack_lvl+0xe8/0x150 [ 621.592076][T15449] should_fail_ex+0x467/0x600 [ 621.592109][T15449] should_failslab+0xa8/0x100 [ 621.592131][T15449] __kmalloc_noprof+0xfe/0x780 [ 621.592149][T15449] ? tomoyo_encode+0x2ad/0x570 [ 621.592169][T15449] ? tomoyo_encode+0x2ad/0x570 [ 621.592196][T15449] tomoyo_encode+0x2ad/0x570 [ 621.592222][T15449] tomoyo_realpath_from_path+0x5fa/0x640 [ 621.592253][T15449] ? tomoyo_path_number_perm+0x219/0x5f0 [ 621.592282][T15449] tomoyo_path_number_perm+0x246/0x5f0 [ 621.592313][T15449] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.592339][T15449] ? __lock_acquire+0x683/0x2ce0 [ 621.592371][T15449] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 621.592393][T15449] ? hook_file_ioctl+0x1f3/0x600 [ 621.592416][T15449] ? lockdep_hardirqs_on+0x7a/0x110 [ 621.592454][T15449] ? __fget_files+0x2a/0x420 [ 621.592474][T15449] ? __fget_files+0x2a/0x420 [ 621.592491][T15449] ? __fget_files+0x3a8/0x420 [ 621.592510][T15449] ? __fget_files+0x2a/0x420 [ 621.592533][T15449] security_file_ioctl+0xc3/0x2a0 [ 621.592556][T15449] __se_sys_ioctl+0x47/0x170 [ 621.592582][T15449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.592606][T15449] do_syscall_64+0x174/0x580 [ 621.592631][T15449] ? trace_irq_disable+0x3b/0x140 [ 621.592665][T15449] ? clear_bhb_loop+0x70/0xc0 [ 621.592705][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.592728][T15449] RIP: 0033:0x7f8db8cce0d9 [ 621.592750][T15449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.592768][T15449] RSP: 002b:00007f8db6f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.592793][T15449] RAX: ffffffffffffffda RBX: 00007f8db8f55fa0 RCX: 00007f8db8cce0d9 [ 621.592809][T15449] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 621.592823][T15449] RBP: 00007f8db6f26090 R08: 0000000000000000 R09: 0000000000000000 [ 621.592836][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.592849][T15449] R13: 00007f8db8f56038 R14: 00007f8db8f55fa0 R15: 00007ffcf046e528 [ 621.592883][T15449] [ 621.592906][T15449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.592923][T15449] program syz.4.3618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.087552][T15460] FAULT_INJECTION: forcing a failure. [ 622.087552][T15460] name failslab, interval 1, probability 0, space 0, times 0 [ 622.087592][T15460] CPU: 1 UID: 0 PID: 15460 Comm: syz.4.3623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 622.087623][T15460] Tainted: [L]=SOFTLOCKUP [ 622.087632][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.087644][T15460] Call Trace: [ 622.087651][T15460] [ 622.087657][T15460] dump_stack_lvl+0xe8/0x150 [ 622.087681][T15460] should_fail_ex+0x467/0x600 [ 622.087704][T15460] should_failslab+0xa8/0x100 [ 622.087720][T15460] kmem_cache_alloc_noprof+0xa4/0x650 [ 622.087739][T15460] ? alloc_empty_file+0x5b/0x1d0 [ 622.087757][T15460] ? alloc_empty_file+0x5b/0x1d0 [ 622.087779][T15460] alloc_empty_file+0x5b/0x1d0 [ 622.087797][T15460] path_openat+0x8f/0x3850 [ 622.087815][T15460] ? __kernel_text_address+0xd/0x30 [ 622.087835][T15460] ? unwind_get_return_address+0x4d/0x90 [ 622.087848][T15460] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.087867][T15460] ? arch_stack_walk+0xfb/0x150 [ 622.087887][T15460] ? stack_trace_save+0xa9/0x100 [ 622.087908][T15460] do_file_open+0x23e/0x4a0 [ 622.087931][T15460] ? __pfx_do_file_open+0x10/0x10 [ 622.087944][T15460] ? __kasan_slab_alloc+0x6c/0x80 [ 622.087989][T15460] ? do_open_execat+0xad/0x590 [ 622.088013][T15460] do_open_execat+0x12b/0x590 [ 622.088026][T15460] ? __might_fault+0xaf/0x130 [ 622.088039][T15460] ? __pfx_do_open_execat+0x10/0x10 [ 622.088060][T15460] alloc_bprm+0x24/0x640 [ 622.088076][T15460] do_execveat_common+0x172/0x670 [ 622.088095][T15460] __x64_sys_execveat+0xc7/0xf0 [ 622.088110][T15460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.088132][T15460] do_syscall_64+0x174/0x580 [ 622.088148][T15460] ? trace_irq_disable+0x3b/0x140 [ 622.088167][T15460] ? clear_bhb_loop+0x70/0xc0 [ 622.088182][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.088194][T15460] RIP: 0033:0x7f8db8cce0d9 [ 622.088208][T15460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.088219][T15460] RSP: 002b:00007f8db6f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 622.088234][T15460] RAX: ffffffffffffffda RBX: 00007f8db8f56090 RCX: 00007f8db8cce0d9 [ 622.088244][T15460] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 622.088253][T15460] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 622.088261][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.088268][T15460] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 622.088288][T15460] [ 622.766342][ T5725] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 622.959933][ T5725] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.978724][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.978762][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.978786][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 622.978832][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.003507][ T5725] usb 4-1: config 0 descriptor?? [ 624.080507][ T5725] usbhid 4-1:0.0: can't add hid device: -71 [ 624.080643][ T5725] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 624.137763][ T5725] usb 4-1: USB disconnect, device number 68 [ 624.330916][T15502] program syz.3.3631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.648378][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.648453][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.002569][T14610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.126074][T14610] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.163494][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.163690][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.240536][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.240690][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.394546][T15535] bond0: option arp_validate: invalid value (1728) [ 626.242063][T15563] FAULT_INJECTION: forcing a failure. [ 626.242063][T15563] name failslab, interval 1, probability 0, space 0, times 0 [ 626.242100][T15563] CPU: 1 UID: 0 PID: 15563 Comm: syz.4.3647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.242130][T15563] Tainted: [L]=SOFTLOCKUP [ 626.242137][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 626.242151][T15563] Call Trace: [ 626.242160][T15563] [ 626.242169][T15563] dump_stack_lvl+0xe8/0x150 [ 626.242204][T15563] should_fail_ex+0x467/0x600 [ 626.242239][T15563] should_failslab+0xa8/0x100 [ 626.242265][T15563] kmem_cache_alloc_node_noprof+0xae/0x670 [ 626.242300][T15563] ? __alloc_skb+0x1d7/0x7a0 [ 626.242323][T15563] ? __alloc_skb+0x1d7/0x7a0 [ 626.242350][T15563] __alloc_skb+0x1d7/0x7a0 [ 626.242377][T15563] netlink_sendmsg+0x5d4/0xb40 [ 626.242417][T15563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.242446][T15563] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 626.242476][T15563] ? __kernel_text_address+0xd/0x30 [ 626.242509][T15563] ? unwind_get_return_address+0x4d/0x90 [ 626.242547][T15563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.242576][T15563] sock_sendmsg_nosec+0x13a/0x180 [ 626.242611][T15563] ____sys_sendmsg+0x565/0x870 [ 626.242638][T15563] ? __might_fault+0xaf/0x130 [ 626.242667][T15563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.242703][T15563] ? import_iovec+0x73/0xa0 [ 626.242733][T15563] ___sys_sendmsg+0x2a5/0x360 [ 626.242759][T15563] ? __lock_acquire+0x683/0x2ce0 [ 626.242786][T15563] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.242850][T15563] ? __fget_files+0x2a/0x420 [ 626.242869][T15563] ? __fget_files+0x3a8/0x420 [ 626.242901][T15563] __x64_sys_sendmsg+0x1b7/0x290 [ 626.242932][T15563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.242973][T15563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.242996][T15563] do_syscall_64+0x174/0x580 [ 626.243021][T15563] ? trace_irq_disable+0x3b/0x140 [ 626.243128][T15563] ? clear_bhb_loop+0x70/0xc0 [ 626.243158][T15563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.243179][T15563] RIP: 0033:0x7f8db8cce0d9 [ 626.243202][T15563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.243219][T15563] RSP: 002b:00007f8db6f05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.243245][T15563] RAX: ffffffffffffffda RBX: 00007f8db8f56090 RCX: 00007f8db8cce0d9 [ 626.243260][T15563] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000009 [ 626.243274][T15563] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 626.243288][T15563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.243302][T15563] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 626.243336][T15563] [ 626.358743][ T5601] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 626.507158][ T5601] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 626.512516][ T5601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.512543][ T5601] usb 4-1: Product: syz [ 626.512558][ T5601] usb 4-1: Manufacturer: syz [ 626.512572][ T5601] usb 4-1: SerialNumber: syz [ 626.674884][ T5601] usb 4-1: config 0 descriptor?? [ 626.692032][ T5601] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 069 [ 627.086546][ T5601] (null): error -EIO: failure setting delay to 10us [ 627.086632][ T5601] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 627.166414][ T5601] usb 4-1: USB disconnect, device number 69 [ 627.346408][ T199] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 627.497175][ T199] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 627.498901][ T199] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 627.498931][ T199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.498953][ T199] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 627.501987][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.502015][ T199] usb 5-1: Product: syz [ 627.502031][ T199] usb 5-1: Manufacturer: syz [ 627.502047][ T199] usb 5-1: SerialNumber: syz [ 627.747101][ T199] usb 5-1: config 0 descriptor?? [ 627.957514][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.958272][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.963477][ T199] usb 5-1: USB disconnect, device number 28 [ 628.128086][ T1428] bridge_slave_1: left allmulticast mode [ 628.128124][ T1428] bridge_slave_1: left promiscuous mode [ 628.128383][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.255199][T15591] netlink: 'syz.3.3651': attribute type 30 has an invalid length. [ 628.327288][ T1428] bridge_slave_0: left allmulticast mode [ 628.327317][ T1428] bridge_slave_0: left promiscuous mode [ 628.327641][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.646369][ T1428] bridge_slave_1: left allmulticast mode [ 628.646399][ T1428] bridge_slave_1: left promiscuous mode [ 628.646572][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.783437][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3658'. [ 628.834704][T15607] futex_wake_op: syz.4.3658 tries to shift op by -1; fix this program [ 628.856945][ T1428] bridge_slave_0: left allmulticast mode [ 628.856986][ T1428] bridge_slave_0: left promiscuous mode [ 628.857252][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.966950][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.046665][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.108410][ T1428] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 630.129696][ T1428] bond0 (unregistering): Released all slaves [ 630.386582][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.468406][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.527885][ T1428] bond0 (unregistering): Released all slaves [ 631.067567][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 631.195948][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3658'. [ 631.238422][T15591] netlink: 'syz.3.3651': attribute type 30 has an invalid length. [ 631.475336][T15615] FAULT_INJECTION: forcing a failure. [ 631.475336][T15615] name failslab, interval 1, probability 0, space 0, times 0 [ 631.475372][T15615] CPU: 0 UID: 0 PID: 15615 Comm: syz.4.3660 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.475408][T15615] Tainted: [L]=SOFTLOCKUP [ 631.475415][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.475426][T15615] Call Trace: [ 631.475433][T15615] [ 631.475441][T15615] dump_stack_lvl+0xe8/0x150 [ 631.475473][T15615] should_fail_ex+0x467/0x600 [ 631.475506][T15615] should_failslab+0xa8/0x100 [ 631.475534][T15615] __kmalloc_noprof+0xfe/0x780 [ 631.475552][T15615] ? do_sys_poll+0x2c4/0xf50 [ 631.475577][T15615] ? do_sys_poll+0x2c4/0xf50 [ 631.475609][T15615] do_sys_poll+0x2c4/0xf50 [ 631.475648][T15615] ? __lock_acquire+0x683/0x2ce0 [ 631.475667][T15615] ? __pfx_do_sys_poll+0x10/0x10 [ 631.475697][T15615] ? is_bpf_text_address+0x292/0x2b0 [ 631.475716][T15615] ? is_bpf_text_address+0x26/0x2b0 [ 631.475823][T15615] ? set_user_sigmask+0xcd/0x1c0 [ 631.475843][T15615] ? __pfx_set_user_sigmask+0x10/0x10 [ 631.475863][T15615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 631.475898][T15615] __se_sys_ppoll+0x209/0x2b0 [ 631.475925][T15615] ? fput+0xa0/0xd0 [ 631.475953][T15615] ? __pfx___se_sys_ppoll+0x10/0x10 [ 631.475979][T15615] ? __pfx_ksys_write+0x10/0x10 [ 631.476007][T15615] ? __x64_sys_ppoll+0x20/0xc0 [ 631.476031][T15615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.476052][T15615] do_syscall_64+0x174/0x580 [ 631.476075][T15615] ? trace_irq_disable+0x3b/0x140 [ 631.476104][T15615] ? clear_bhb_loop+0x70/0xc0 [ 631.476126][T15615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.476143][T15615] RIP: 0033:0x7f8db8cce0d9 [ 631.476160][T15615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.476175][T15615] RSP: 002b:00007f8db6f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 631.476195][T15615] RAX: ffffffffffffffda RBX: 00007f8db8f55fa0 RCX: 00007f8db8cce0d9 [ 631.476208][T15615] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 631.476220][T15615] RBP: 00007f8db6f26090 R08: 0000000000000000 R09: 0000000000000000 [ 631.476231][T15615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.476242][T15615] R13: 00007f8db8f56038 R14: 00007f8db8f55fa0 R15: 00007ffcf046e528 [ 631.476270][T15615] [ 632.737047][T15652] FAULT_INJECTION: forcing a failure. [ 632.737047][T15652] name failslab, interval 1, probability 0, space 0, times 0 [ 632.737087][T15652] CPU: 1 UID: 0 PID: 15652 Comm: syz.4.3673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.737118][T15652] Tainted: [L]=SOFTLOCKUP [ 632.737127][T15652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.737140][T15652] Call Trace: [ 632.737149][T15652] [ 632.737159][T15652] dump_stack_lvl+0xe8/0x150 [ 632.737197][T15652] should_fail_ex+0x467/0x600 [ 632.737236][T15652] should_failslab+0xa8/0x100 [ 632.737264][T15652] __kmalloc_cache_noprof+0xa0/0x6b0 [ 632.737288][T15652] ? vhost_task_create+0x123/0x380 [ 632.737319][T15652] ? vhost_task_create+0x123/0x380 [ 632.737357][T15652] vhost_task_create+0x123/0x380 [ 632.737388][T15652] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 632.737412][T15652] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 632.737437][T15652] ? __pfx_vhost_task_create+0x10/0x10 [ 632.737475][T15652] ? __pfx_vhost_task_fn+0x10/0x10 [ 632.737511][T15652] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.737540][T15652] ? lockdep_hardirqs_on+0x7a/0x110 [ 632.737568][T15652] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 632.737594][T15652] ? mutex_lock_nested+0x152/0x1d0 [ 632.737625][T15652] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 632.737656][T15652] kvm_mmu_post_init_vm+0x147/0x2b0 [ 632.737686][T15652] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 632.737733][T15652] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 632.737759][T15652] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.737805][T15652] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.737833][T15652] ? lockdep_hardirqs_on+0x7a/0x110 [ 632.737860][T15652] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 632.737887][T15652] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 632.737907][T15652] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.737935][T15652] ? lock_acquire+0x106/0x350 [ 632.737960][T15652] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 632.737991][T15652] ? rt_write_unlock+0x19c/0x360 [ 632.738020][T15652] ? rt_write_unlock+0x1a8/0x360 [ 632.738056][T15652] kvm_vcpu_ioctl+0xa64/0xfe0 [ 632.738088][T15652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 632.738109][T15652] ? hook_file_ioctl+0x1f3/0x600 [ 632.738145][T15652] ? __asan_memset+0x22/0x50 [ 632.738177][T15652] ? smack_file_ioctl+0x331/0x360 [ 632.738214][T15652] ? __pfx_smack_file_ioctl+0x10/0x10 [ 632.738259][T15652] ? __fget_files+0x2a/0x420 [ 632.738280][T15652] ? __fget_files+0x3a8/0x420 [ 632.738304][T15652] ? __fget_files+0x2a/0x420 [ 632.738330][T15652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 632.738361][T15652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 632.738385][T15652] __se_sys_ioctl+0xff/0x170 [ 632.738412][T15652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.738436][T15652] do_syscall_64+0x174/0x580 [ 632.738463][T15652] ? trace_irq_disable+0x3b/0x140 [ 632.738494][T15652] ? clear_bhb_loop+0x70/0xc0 [ 632.738523][T15652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.738545][T15652] RIP: 0033:0x7f8db8cce0d9 [ 632.738567][T15652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.738603][T15652] RSP: 002b:00007f8db6f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.738628][T15652] RAX: ffffffffffffffda RBX: 00007f8db8f56090 RCX: 00007f8db8cce0d9 [ 632.738644][T15652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 632.738658][T15652] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 632.738672][T15652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.738686][T15652] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 632.738724][T15652] [ 632.751116][T15654] FAULT_INJECTION: forcing a failure. [ 632.751116][T15654] name failslab, interval 1, probability 0, space 0, times 0 [ 632.751154][T15654] CPU: 1 UID: 0 PID: 15654 Comm: syz.3.3674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.751180][T15654] Tainted: [L]=SOFTLOCKUP [ 632.751187][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.751199][T15654] Call Trace: [ 632.751206][T15654] [ 632.751215][T15654] dump_stack_lvl+0xe8/0x150 [ 632.751245][T15654] should_fail_ex+0x467/0x600 [ 632.751277][T15654] should_failslab+0xa8/0x100 [ 632.751300][T15654] __kmalloc_noprof+0xfe/0x780 [ 632.751317][T15654] ? tomoyo_encode+0x2ad/0x570 [ 632.751337][T15654] ? tomoyo_encode+0x2ad/0x570 [ 632.751363][T15654] tomoyo_encode+0x2ad/0x570 [ 632.751389][T15654] tomoyo_realpath_from_path+0x5fa/0x640 [ 632.751420][T15654] ? tomoyo_path_number_perm+0x219/0x5f0 [ 632.751451][T15654] tomoyo_path_number_perm+0x246/0x5f0 [ 632.751480][T15654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 632.751506][T15654] ? __lock_acquire+0x683/0x2ce0 [ 632.751537][T15654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.751559][T15654] ? hook_file_ioctl+0x1f3/0x600 [ 632.751582][T15654] ? lockdep_hardirqs_on+0x7a/0x110 [ 632.751620][T15654] ? __fget_files+0x2a/0x420 [ 632.751640][T15654] ? __fget_files+0x2a/0x420 [ 632.751655][T15654] ? __fget_files+0x3a8/0x420 [ 632.751671][T15654] ? __fget_files+0x2a/0x420 [ 632.751691][T15654] security_file_ioctl+0xc3/0x2a0 [ 632.751711][T15654] __se_sys_ioctl+0x47/0x170 [ 632.751734][T15654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.751753][T15654] do_syscall_64+0x174/0x580 [ 632.751773][T15654] ? trace_irq_disable+0x3b/0x140 [ 632.751799][T15654] ? clear_bhb_loop+0x70/0xc0 [ 632.751820][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.751838][T15654] RIP: 0033:0x7fe61051e0d9 [ 632.751855][T15654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.751871][T15654] RSP: 002b:00007fe60e776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.751891][T15654] RAX: ffffffffffffffda RBX: 00007fe6107a5fa0 RCX: 00007fe61051e0d9 [ 632.751905][T15654] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 632.751916][T15654] RBP: 00007fe60e776090 R08: 0000000000000000 R09: 0000000000000000 [ 632.751927][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.751938][T15654] R13: 00007fe6107a6038 R14: 00007fe6107a5fa0 R15: 00007fff39fc6f38 [ 632.751967][T15654] [ 632.786015][T15654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.786037][T15654] program syz.3.3674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.405672][ T10] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 633.567249][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.00 [ 633.568793][ T10] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 633.568823][ T10] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 633.568844][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 633.568898][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.568943][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.584580][ T10] usb 4-1: config 0 descriptor?? [ 633.619945][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 633.953906][T14610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.469287][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 635.505563][ T1428] hsr_slave_0: left promiscuous mode [ 635.545820][ T1428] hsr_slave_1: left promiscuous mode [ 635.547061][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.547090][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.611034][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.611068][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.836619][ T1428] hsr_slave_0: left promiscuous mode [ 635.875817][ T1428] hsr_slave_1: left promiscuous mode [ 635.877005][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.917967][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.014115][ T199] usb 4-1: USB disconnect, device number 70 [ 636.270496][ T1428] veth1_macvtap: left promiscuous mode [ 636.270631][ T1428] veth0_macvtap: left promiscuous mode [ 636.271036][ T1428] veth1_vlan: left promiscuous mode [ 636.271131][ T1428] veth0_vlan: left promiscuous mode [ 636.337011][T15756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.337704][T15756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.426714][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 637.466638][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 637.489741][T15795] FAULT_INJECTION: forcing a failure. [ 637.489741][T15795] name failslab, interval 1, probability 0, space 0, times 0 [ 637.489781][T15795] CPU: 0 UID: 0 PID: 15795 Comm: syz.4.3722 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 637.489811][T15795] Tainted: [L]=SOFTLOCKUP [ 637.489820][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.489833][T15795] Call Trace: [ 637.489842][T15795] [ 637.489852][T15795] dump_stack_lvl+0xe8/0x150 [ 637.489892][T15795] should_fail_ex+0x467/0x600 [ 637.489932][T15795] should_failslab+0xa8/0x100 [ 637.489960][T15795] __kmalloc_cache_noprof+0xa0/0x6b0 [ 637.489982][T15795] ? vhost_task_create+0x123/0x380 [ 637.490014][T15795] ? vhost_task_create+0x123/0x380 [ 637.490055][T15795] vhost_task_create+0x123/0x380 [ 637.490087][T15795] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 637.490110][T15795] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 637.490136][T15795] ? __pfx_vhost_task_create+0x10/0x10 [ 637.490178][T15795] ? __pfx_vhost_task_fn+0x10/0x10 [ 637.490215][T15795] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 637.490244][T15795] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.490271][T15795] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 637.490297][T15795] ? mutex_lock_nested+0x152/0x1d0 [ 637.490329][T15795] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 637.490360][T15795] kvm_mmu_post_init_vm+0x147/0x2b0 [ 637.490389][T15795] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 637.490442][T15795] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 637.490467][T15795] ? do_raw_spin_lock+0x12b/0x2f0 [ 637.490521][T15795] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 637.490546][T15795] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.490572][T15795] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 637.490598][T15795] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 637.490620][T15795] ? do_raw_spin_lock+0x12b/0x2f0 [ 637.490647][T15795] ? lock_acquire+0x106/0x350 [ 637.490672][T15795] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 637.490702][T15795] ? rt_write_unlock+0x19c/0x360 [ 637.490730][T15795] ? rt_write_unlock+0x1a8/0x360 [ 637.490755][T15795] kvm_vcpu_ioctl+0xa64/0xfe0 [ 637.490787][T15795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 637.490809][T15795] ? hook_file_ioctl+0x1f3/0x600 [ 637.490845][T15795] ? __asan_memset+0x22/0x50 [ 637.490876][T15795] ? smack_file_ioctl+0x331/0x360 [ 637.490912][T15795] ? __pfx_smack_file_ioctl+0x10/0x10 [ 637.490957][T15795] ? __fget_files+0x2a/0x420 [ 637.490976][T15795] ? __fget_files+0x3a8/0x420 [ 637.490996][T15795] ? __fget_files+0x2a/0x420 [ 637.491021][T15795] ? bpf_lsm_file_ioctl+0x9/0x20 [ 637.491053][T15795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 637.491075][T15795] __se_sys_ioctl+0xff/0x170 [ 637.491101][T15795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.491124][T15795] do_syscall_64+0x174/0x580 [ 637.491148][T15795] ? trace_irq_disable+0x3b/0x140 [ 637.491180][T15795] ? clear_bhb_loop+0x70/0xc0 [ 637.491209][T15795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.491231][T15795] RIP: 0033:0x7f8db8cce0d9 [ 637.491253][T15795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.491272][T15795] RSP: 002b:00007f8db6f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.491298][T15795] RAX: ffffffffffffffda RBX: 00007f8db8f56090 RCX: 00007f8db8cce0d9 [ 637.491315][T15795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 637.491330][T15795] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 637.491343][T15795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.491356][T15795] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 637.491394][T15795] [ 638.335946][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 638.376207][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 638.727093][T14610] veth0_vlan: entered promiscuous mode [ 638.965925][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 639.349389][T14610] veth1_vlan: entered promiscuous mode [ 639.385307][ T5808] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 639.510479][T14610] veth0_macvtap: entered promiscuous mode [ 639.513874][T14610] veth1_macvtap: entered promiscuous mode [ 639.545211][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 639.548213][ T5808] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 639.549792][ T5808] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.549830][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 639.549868][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.563233][T14610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.606749][ T5808] usb 4-1: config 0 descriptor?? [ 639.622077][T14610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.273992][ T5808] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 640.458921][ T5808] nzxt-smart2 0003:1E71:2009.0010: init_device failed: -38 [ 640.580476][ T5808] nzxt-smart2 0003:1E71:2009.0010: probe with driver nzxt-smart2 failed with error -38 [ 640.598048][ T5808] usb 4-1: USB disconnect, device number 71 [ 640.863566][T15838] fido_id[15838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 640.964968][T14868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 641.359013][T15850] FAULT_INJECTION: forcing a failure. [ 641.359013][T15850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.359057][T15850] CPU: 0 UID: 0 PID: 15850 Comm: syz.4.3742 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 641.359088][T15850] Tainted: [L]=SOFTLOCKUP [ 641.359097][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 641.359111][T15850] Call Trace: [ 641.359121][T15850] [ 641.359131][T15850] dump_stack_lvl+0xe8/0x150 [ 641.359174][T15850] should_fail_ex+0x467/0x600 [ 641.359218][T15850] _copy_from_user+0x2d/0xb0 [ 641.359245][T15850] kstrtouint_from_user+0xd6/0x180 [ 641.359279][T15850] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 641.359311][T15850] ? __lock_acquire+0x683/0x2ce0 [ 641.359356][T15850] proc_fail_nth_write+0x8e/0x210 [ 641.359388][T15850] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 641.359421][T15850] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 641.359445][T15850] vfs_write+0x29f/0xbb0 [ 641.359482][T15850] ? __pfx_vfs_write+0x10/0x10 [ 641.359510][T15850] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 641.359540][T15850] ? lockdep_hardirqs_on+0x7a/0x110 [ 641.359567][T15850] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 641.359594][T15850] ? mutex_lock_nested+0x152/0x1d0 [ 641.359626][T15850] ? fdget_pos+0x252/0x320 [ 641.359658][T15850] ksys_write+0x156/0x270 [ 641.359688][T15850] ? __pfx_ksys_write+0x10/0x10 [ 641.359725][T15850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.359752][T15850] do_syscall_64+0x174/0x580 [ 641.359778][T15850] ? trace_irq_disable+0x3b/0x140 [ 641.359813][T15850] ? clear_bhb_loop+0x70/0xc0 [ 641.359842][T15850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.359864][T15850] RIP: 0033:0x7f8db8c8e90e [ 641.359886][T15850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.359905][T15850] RSP: 002b:00007f8db6f04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.359939][T15850] RAX: ffffffffffffffda RBX: 00007f8db6f056c0 RCX: 00007f8db8c8e90e [ 641.359955][T15850] RDX: 0000000000000001 RSI: 00007f8db6f050a0 RDI: 0000000000000005 [ 641.359970][T15850] RBP: 00007f8db6f05090 R08: 0000000000000000 R09: 0000000000000000 [ 641.359984][T15850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.359998][T15850] R13: 00007f8db8f56128 R14: 00007f8db8f56090 R15: 00007ffcf046e528 [ 641.360035][T15850] [ 641.362360][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.495532][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.495594][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.495630][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.495663][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.687864][T14868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 641.892442][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.052677][T14868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.196141][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.223013][T14868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.471397][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.868060][ T4901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 642.937037][ T4901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 642.944652][ T4901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 642.970707][ T4901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 642.989751][ T4901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 643.956794][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 645.254992][ T5601] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 645.404858][ T5603] Bluetooth: hci5: command tx timeout [ 645.433171][ T5601] usb 4-1: Using ep0 maxpacket: 16 [ 645.434073][ T5601] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 645.438102][ T5601] usb 4-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.438140][ T5601] usb 4-1: config 0 interface 0 has no altsetting 0 [ 645.438178][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.444926][ T5601] usb 4-1: config 0 descriptor?? [ 646.013647][T15909] program syz.4.3760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.051832][ T5601] glorious 0003:22D4:1503.0011: unknown main item tag 0x0 [ 646.051859][ T5601] glorious 0003:22D4:1503.0011: unknown main item tag 0x4 [ 646.051911][ T5601] glorious 0003:22D4:1503.0011: ignoring exceeding usage max [ 646.052715][ T5601] glorious 0003:22D4:1503.0011: unknown main item tag 0x7 [ 646.052730][ T5601] glorious 0003:22D4:1503.0011: item fetching failed at offset 41/42 [ 646.053489][ T5601] glorious 0003:22D4:1503.0011: probe with driver glorious failed with error -22 [ 646.282929][ T5601] usb 4-1: USB disconnect, device number 72 [ 646.526072][T15064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 646.618118][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.659218][T15064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 646.774284][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 646.801460][T15064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 646.837897][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 646.867302][T15064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 646.941561][T15917] FAULT_INJECTION: forcing a failure. [ 646.941561][T15917] name failslab, interval 1, probability 0, space 0, times 0 [ 646.941603][T15917] CPU: 1 UID: 0 PID: 15917 Comm: syz.3.3764 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.941633][T15917] Tainted: [L]=SOFTLOCKUP [ 646.941642][T15917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.941655][T15917] Call Trace: [ 646.941665][T15917] [ 646.941675][T15917] dump_stack_lvl+0xe8/0x150 [ 646.941711][T15917] should_fail_ex+0x467/0x600 [ 646.941750][T15917] should_failslab+0xa8/0x100 [ 646.941778][T15917] __kvmalloc_node_noprof+0x17a/0x8a0 [ 646.941807][T15917] ? io_ring_ctx_alloc+0x1d1/0xc60 [ 646.941828][T15917] ? io_ring_ctx_alloc+0x1d1/0xc60 [ 646.941856][T15917] io_ring_ctx_alloc+0x1d1/0xc60 [ 646.941886][T15917] io_uring_create+0x50/0x990 [ 646.941912][T15917] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 646.941941][T15917] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 646.941976][T15917] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 646.942018][T15917] ? __pfx_ksys_write+0x10/0x10 [ 646.942056][T15917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.942080][T15917] do_syscall_64+0x174/0x580 [ 646.942107][T15917] ? trace_irq_disable+0x3b/0x140 [ 646.942141][T15917] ? clear_bhb_loop+0x70/0xc0 [ 646.942169][T15917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.942191][T15917] RIP: 0033:0x7fe61051e0d9 [ 646.942212][T15917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.942232][T15917] RSP: 002b:00007fe60e775ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 646.942257][T15917] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fe61051e0d9 [ 646.942274][T15917] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 646.942288][T15917] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 646.942306][T15917] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 646.942321][T15917] R13: 0000200000000b10 R14: 00007fe60e775fd8 R15: 0000000000000000 [ 646.942354][T15917] [ 646.957687][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.425148][ T5603] Bluetooth: hci5: command tx timeout [ 647.896943][ T5725] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 648.106078][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 648.106957][ T5725] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 648.186182][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.186221][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 648.186284][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.242907][ T5725] usb 4-1: config 0 descriptor?? [ 648.992325][T15943] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 648.992347][T15943] PKCS7: Only support pkcs7_signedData type [ 649.453233][ T5708] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 649.484058][ T5725] usbhid 4-1:0.0: can't add hid device: -71 [ 649.484141][ T5725] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 649.507239][ T5603] Bluetooth: hci5: command tx timeout [ 649.557712][ T5725] usb 4-1: USB disconnect, device number 73 [ 649.617407][ T5708] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=64.dc [ 649.624168][ T5708] usb 5-1: config 128 has an invalid interface number: 96 but max is 0 [ 649.624210][ T5708] usb 5-1: config 128 has no interface number 0 [ 649.624262][ T5708] usb 5-1: config 128 interface 96 altsetting 4 endpoint 0x6 has an invalid bInterval 254, changing to 7 [ 649.624291][ T5708] usb 5-1: config 128 interface 96 has no altsetting 0 [ 649.681226][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.681258][ T5708] usb 5-1: Product: syz [ 649.681271][ T5708] usb 5-1: Manufacturer: syz [ 649.681280][ T5708] usb 5-1: SerialNumber: syz [ 650.709584][ T1428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.837291][ T5708] usbtest 5-1:128.96: couldn't get endpoints, -71 [ 650.837398][ T5708] usbtest 5-1:128.96: probe with driver usbtest failed with error -71 [ 650.942502][ T5708] usb 5-1: USB disconnect, device number 30 [ 651.584662][ T5603] Bluetooth: hci5: command tx timeout [ 652.043773][ T1428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.094668][ T5708] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 652.145528][T14868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.254556][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 652.255449][ T5708] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 652.257225][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.257341][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.257389][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.323630][ T5708] usb 4-1: config 0 descriptor?? [ 653.036680][ T1428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.352668][T14868] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.500961][ T5708] usbhid 4-1:0.0: can't add hid device: -71 [ 653.501100][ T5708] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 653.602575][ T5708] usb 4-1: USB disconnect, device number 74 [ 653.869362][ T1428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.045958][ T821] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.046102][ T821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.148831][ T5601] kernel read not supported for file /vcsa (pid: 5601 comm: kworker/0:4) [ 654.235303][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.235541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.643646][T15863] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.643787][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.673749][T15863] bridge_slave_0: entered allmulticast mode [ 654.683150][T15863] bridge_slave_0: entered promiscuous mode [ 655.073903][T15863] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.082854][T15863] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.083051][T15863] bridge_slave_1: entered allmulticast mode [ 655.101508][T15863] bridge_slave_1: entered promiscuous mode [ 655.231702][T15064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.652523][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.733713][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.600810][ T4901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.678446][ T4901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.688156][T15863] team0: Port device team_slave_0 added [ 656.701875][ T4901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.738578][ T4901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.749932][ T4901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.420191][T15863] team0: Port device team_slave_1 added [ 657.505048][ T1428] bridge_slave_1: left allmulticast mode [ 657.505091][ T1428] bridge_slave_1: left promiscuous mode [ 657.505413][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.716326][ T1428] bridge_slave_0: left allmulticast mode [ 657.716366][ T1428] bridge_slave_0: left promiscuous mode [ 657.716652][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.006213][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.086287][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.129535][ T1428] bond0 (unregistering): Released all slaves [ 659.250390][T15064] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.264324][ T4901] Bluetooth: hci1: command tx timeout [ 659.467174][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.467193][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.467220][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.518842][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.518862][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.518890][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.529079][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.529287][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.660898][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.661052][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.883027][T15863] hsr_slave_0: entered promiscuous mode [ 659.932871][T15863] hsr_slave_1: entered promiscuous mode [ 659.934101][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 659.934140][T15863] Cannot create hsr debugfs directory [ 660.274351][ T1428] hsr_slave_0: left promiscuous mode [ 660.315950][ T1428] hsr_slave_1: left promiscuous mode [ 660.317160][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.317179][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.367629][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.367651][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.536478][ T1428] veth1_macvtap: left promiscuous mode [ 660.540271][ T1428] veth0_macvtap: left promiscuous mode [ 660.540592][ T1428] veth1_vlan: left promiscuous mode [ 660.540797][ T1428] veth0_vlan: left promiscuous mode [ 661.344152][ T4901] Bluetooth: hci1: command tx timeout [ 661.646081][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 661.704880][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 663.470270][ T4901] Bluetooth: hci1: command tx timeout [ 663.714682][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 665.514050][ T4901] Bluetooth: hci1: command tx timeout [ 665.907702][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 665.941333][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 665.977388][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 665.992675][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 665.994841][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.680449][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 668.223855][ T5603] Bluetooth: hci2: command tx timeout [ 668.830937][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.831058][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.841483][T16037] bridge_slave_0: entered allmulticast mode [ 668.846951][T16037] bridge_slave_0: entered promiscuous mode [ 668.941595][T16037] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.941733][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.941912][T16037] bridge_slave_1: entered allmulticast mode [ 668.951225][T16037] bridge_slave_1: entered promiscuous mode [ 669.853106][T16037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.959089][T16037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.141182][T16037] team0: Port device team_slave_0 added [ 670.180844][T16037] team0: Port device team_slave_1 added [ 670.303570][ T5603] Bluetooth: hci2: command tx timeout [ 670.714913][T16037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.714933][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.714964][T16037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.777506][T16037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.777522][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.777548][T16037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.178378][T16037] hsr_slave_0: entered promiscuous mode [ 672.179885][T16037] hsr_slave_1: entered promiscuous mode [ 672.392358][ T5603] Bluetooth: hci2: command tx timeout [ 673.773028][T15863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 673.847655][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.207167][T15863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 674.249135][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.390173][T15863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.458841][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.473189][ T5603] Bluetooth: hci2: command tx timeout [ 674.598832][T15863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 674.640989][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.306714][ T1428] bridge_slave_1: left allmulticast mode [ 675.306770][ T1428] bridge_slave_1: left promiscuous mode [ 675.307078][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.520275][ T1428] bridge_slave_0: left allmulticast mode [ 675.520323][ T1428] bridge_slave_0: left promiscuous mode [ 675.520677][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.064124][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.153994][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.198332][ T1428] bond0 (unregistering): Released all slaves [ 678.135218][ T1428] hsr_slave_0: left promiscuous mode [ 678.295586][ T1428] hsr_slave_1: left promiscuous mode [ 678.301913][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.366608][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.195377][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 679.258441][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 679.723054][T16331] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.723273][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.723506][T16331] bridge_slave_0: entered allmulticast mode [ 679.762490][T16331] bridge_slave_0: entered promiscuous mode [ 679.822503][T16331] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.822679][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.839185][T16331] bridge_slave_1: entered allmulticast mode [ 679.842286][T16331] bridge_slave_1: entered promiscuous mode [ 681.021825][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.085647][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.387995][T16331] team0: Port device team_slave_0 added [ 681.947446][T16331] team0: Port device team_slave_1 added [ 682.631269][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.631289][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.631320][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.692552][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.692570][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.692596][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.071257][T16331] hsr_slave_0: entered promiscuous mode [ 683.081210][T16331] hsr_slave_1: entered promiscuous mode [ 683.082493][T16331] debugfs: 'hsr0' already exists in 'hsr' [ 683.082519][T16331] Cannot create hsr debugfs directory [ 684.492399][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.261668][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.485148][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.488816][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.065122][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.065212][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.082421][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.082611][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.852511][T16037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 686.926618][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.950365][T16037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 686.978223][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.011252][T16037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 687.044946][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 687.051586][T16037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 687.144090][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.252924][ T1428] bridge_slave_1: left allmulticast mode [ 689.252960][ T1428] bridge_slave_1: left promiscuous mode [ 689.253235][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.444540][ T1428] bridge_slave_0: left allmulticast mode [ 689.444567][ T1428] bridge_slave_0: left promiscuous mode [ 689.444778][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.677150][T17104] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4208'. [ 690.677175][T17104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4208'. [ 690.753309][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.848073][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.886328][ T1428] bond0 (unregistering): Released all slaves [ 692.042580][ T1428] hsr_slave_0: left promiscuous mode [ 692.083279][ T1428] hsr_slave_1: left promiscuous mode [ 692.084488][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.133800][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.254876][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 693.313399][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 693.785289][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 693.804146][T15863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.870842][T16037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.538046][T16037] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.667272][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.667527][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.038501][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.038829][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.152489][T15863] veth0_vlan: entered promiscuous mode [ 695.890171][T15863] veth1_vlan: entered promiscuous mode [ 696.244472][T15863] veth0_macvtap: entered promiscuous mode [ 696.259649][T15863] veth1_macvtap: entered promiscuous mode [ 696.776541][ T1428] bridge_slave_1: left allmulticast mode [ 696.776599][ T1428] bridge_slave_1: left promiscuous mode [ 696.776891][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.011101][ T1428] bridge_slave_0: left allmulticast mode [ 697.011143][ T1428] bridge_slave_0: left promiscuous mode [ 697.011470][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.623308][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.705970][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.758484][ T1428] bond0 (unregistering): Released all slaves [ 698.983453][T15863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.046712][T15863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.373048][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.377493][ T166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.392320][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.393874][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.144345][T16037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.910737][T16331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 702.172594][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.240304][T16331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 702.425984][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.557204][T16331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 702.633975][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.813056][ T1428] hsr_slave_0: left promiscuous mode [ 702.851875][ T1428] hsr_slave_1: left promiscuous mode [ 702.852592][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.852611][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.913946][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.913979][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.226221][ T4901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.324932][ T4901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.335428][ T4901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.565252][ T1428] veth1_macvtap: left promiscuous mode [ 703.565361][ T1428] veth0_macvtap: left promiscuous mode [ 703.565655][ T1428] veth1_vlan: left promiscuous mode [ 703.565829][ T1428] veth0_vlan: left promiscuous mode [ 703.582282][ T4901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.585653][ T4901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 705.093919][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 705.172752][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 705.625283][T16331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 705.719533][T16331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 705.741593][ T5603] Bluetooth: hci0: command tx timeout [ 705.947032][T17531] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 706.529104][T16037] veth0_vlan: entered promiscuous mode [ 706.810752][T16037] veth1_vlan: entered promiscuous mode [ 707.551993][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.616164][T16037] veth0_macvtap: entered promiscuous mode [ 707.822790][ T5603] Bluetooth: hci0: command tx timeout [ 708.072826][T16037] veth1_macvtap: entered promiscuous mode [ 708.250423][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.399030][T16037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.419896][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.420143][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.525897][T16037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.530982][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.552987][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.689827][ T1428] IPVS: stop unused estimator thread 0... [ 709.907507][ T5603] Bluetooth: hci0: command tx timeout [ 710.418964][ T1428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.702155][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.702181][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.773855][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.774024][T17448] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.774348][T17448] bridge_slave_0: entered allmulticast mode [ 710.795058][T17448] bridge_slave_0: entered promiscuous mode [ 710.867828][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.868015][T17448] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.868254][T17448] bridge_slave_1: entered allmulticast mode [ 710.886438][T17448] bridge_slave_1: entered promiscuous mode [ 710.994004][T17448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.018543][T17448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.555369][ T1428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.981509][ T5603] Bluetooth: hci0: command tx timeout [ 711.998843][T17448] team0: Port device team_slave_0 added [ 712.009130][ T3396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.009153][ T3396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.052474][T17448] team0: Port device team_slave_1 added [ 714.552649][ T1428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.907481][T17448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.907502][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.907532][T17448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.923923][T17448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.923941][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.923968][T17448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.799276][ T1428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.964839][T17448] hsr_slave_0: entered promiscuous mode [ 715.969074][T17448] hsr_slave_1: entered promiscuous mode [ 715.969131][T17723] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 715.996246][T17448] debugfs: 'hsr0' already exists in 'hsr' [ 715.996277][T17448] Cannot create hsr debugfs directory [ 716.754848][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.443508][T17763] syz.0.4485 (17763) used greatest stack depth: 18080 bytes left [ 718.124531][ T1428] bridge_slave_1: left allmulticast mode [ 718.124559][ T1428] bridge_slave_1: left promiscuous mode [ 718.145589][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.276813][ T1428] bridge_slave_0: left allmulticast mode [ 718.276854][ T1428] bridge_slave_0: left promiscuous mode [ 718.277139][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.816891][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.995494][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.044239][ T1428] bond0 (unregistering): Released all slaves [ 722.122698][ T1428] hsr_slave_0: left promiscuous mode [ 722.201335][ T1428] hsr_slave_1: left promiscuous mode [ 722.202483][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.202511][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.295990][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.296020][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.422069][ T1428] veth1_macvtap: left promiscuous mode [ 722.422140][ T1428] veth0_macvtap: left promiscuous mode [ 722.429426][ T1428] veth1_vlan: left promiscuous mode [ 722.429560][ T1428] veth0_vlan: left promiscuous mode [ 724.403402][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 724.482223][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 725.139277][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 725.545303][ T111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.647346][ T111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.257964][ T4901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.309324][ T4901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.359325][ T4901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.384439][ T4901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.387052][ T4901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 727.739496][T18052] fuse: Bad value for 'fd' [ 728.281025][ T1127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.498449][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.710297][ T5603] Bluetooth: hci5: command tx timeout [ 730.445199][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 730.445220][ T37] audit: type=1326 audit(2000000303.837:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.445272][ T37] audit: type=1326 audit(2000000303.847:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.548959][ T37] audit: type=1326 audit(2000000303.937:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.553631][ T37] audit: type=1326 audit(2000000303.947:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.553685][ T37] audit: type=1326 audit(2000000303.957:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.560613][ T37] audit: type=1326 audit(2000000303.957:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.564436][ T37] audit: type=1326 audit(2000000303.967:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.564499][ T37] audit: type=1326 audit(2000000303.967:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.564542][ T37] audit: type=1326 audit(2000000303.967:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.569596][ T37] audit: type=1326 audit(2000000303.967:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.0.4632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3835e0d9 code=0x7ffc0000 [ 730.790437][ T5603] Bluetooth: hci5: command tx timeout [ 731.148817][T18144] CUSE: info not properly terminated [ 731.906976][T18168] CUSE: info not properly terminated [ 732.171821][T17448] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.216345][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.359625][T17448] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.468656][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.824027][T18197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.824048][T18197] IPv6: NLM_F_CREATE should be set when creating new route [ 732.860890][ T5603] Bluetooth: hci5: command tx timeout [ 733.000770][T17448] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.046844][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.123817][T17448] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.174680][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.526149][T18225] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 733.734666][T18229] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 733.735720][T18229] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 733.735911][T18229] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 733.735967][T18229] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 733.736343][T18229] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 733.737257][T18229] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 733.737525][T18229] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 733.738598][T18229] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 733.738703][T18229] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 734.944758][ T5603] Bluetooth: hci5: command tx timeout [ 735.752602][T18008] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.752749][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.752995][T18008] bridge_slave_0: entered allmulticast mode [ 735.762520][T18008] bridge_slave_0: entered promiscuous mode [ 735.769459][T18008] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.775369][T18008] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.775613][T18008] bridge_slave_1: entered allmulticast mode [ 735.785294][T18008] bridge_slave_1: entered promiscuous mode [ 736.256636][T17448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.330848][T18008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.397599][T18008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.716727][T18008] team0: Port device team_slave_0 added [ 736.763213][T18008] team0: Port device team_slave_1 added [ 737.255024][T17448] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.256873][T18008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.256890][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.256920][T18008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.346450][T18008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.346470][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.346501][T18008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.404894][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.405192][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.532153][ T1428] bridge_slave_1: left allmulticast mode [ 737.532196][ T1428] bridge_slave_1: left promiscuous mode [ 737.532476][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.719058][ T1428] bridge_slave_0: left allmulticast mode [ 737.719099][ T1428] bridge_slave_0: left promiscuous mode [ 737.719366][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.281946][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.354199][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.393331][ T1428] bond0 (unregistering): Released all slaves [ 739.461888][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 739.536846][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.536994][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.815783][T18008] hsr_slave_0: entered promiscuous mode [ 739.818200][T18008] hsr_slave_1: entered promiscuous mode [ 739.819325][T18008] debugfs: 'hsr0' already exists in 'hsr' [ 739.819355][T18008] Cannot create hsr debugfs directory [ 740.319547][ T1428] hsr_slave_0: left promiscuous mode [ 740.361767][ T1428] hsr_slave_1: left promiscuous mode [ 740.363090][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.410271][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.530499][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 741.595428][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 745.827708][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 746.078775][T18625] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 747.501345][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.501414][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.097142][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.348323][T17448] veth0_vlan: entered promiscuous mode [ 748.396994][T17448] veth1_vlan: entered promiscuous mode [ 748.530201][T17448] veth0_macvtap: entered promiscuous mode [ 748.639615][T17448] veth1_macvtap: entered promiscuous mode [ 748.744857][T17448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.803235][T17448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.136346][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.140825][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.140874][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.140913][ T166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.105298][ T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.105322][ T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.469026][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.469068][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.517455][T18008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 752.704135][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.709164][T18008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 752.761207][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.766169][T18008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 752.854365][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.869076][T18008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 753.159762][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.297361][T18811] Line length is too long: Should be less than 4094 [ 754.424629][T18008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.513637][T18857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 754.513659][T18857] IPv6: NLM_F_CREATE should be set when creating new route [ 754.716549][T18008] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.780948][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.781606][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.811121][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.811244][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.506726][T18890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.744180][T18008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.766921][T18008] veth0_vlan: entered promiscuous mode [ 757.805084][T18008] veth1_vlan: entered promiscuous mode [ 758.008673][T18008] veth0_macvtap: entered promiscuous mode [ 758.032260][T18008] veth1_macvtap: entered promiscuous mode [ 758.189616][T18008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.262252][T18008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.319050][ T166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.319220][ T166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.319261][ T166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.319300][ T166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.004917][ T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.004939][ T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.373493][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.373518][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.019755][T19056] sctp: [Deprecated]: syz.0.4987 (pid 19056) Use of int in max_burst socket option deprecated. [ 761.019755][T19056] Use struct sctp_assoc_value instead [ 761.451107][ T4901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.502542][ T4901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.505878][ T4901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.538695][ T4901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.561776][ T4901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 763.749251][ T4901] Bluetooth: hci2: command tx timeout [ 765.853811][ T4901] Bluetooth: hci2: command tx timeout [ 766.445203][ T1127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.005818][T19064] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.006048][T19064] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.006260][T19064] bridge_slave_0: entered allmulticast mode [ 767.056262][T19064] bridge_slave_0: entered promiscuous mode [ 767.068914][T19064] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.069141][T19064] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.093566][T19064] bridge_slave_1: entered allmulticast mode [ 767.097570][T19064] bridge_slave_1: entered promiscuous mode [ 767.186798][T19064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.203731][T19064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.263512][T19064] team0: Port device team_slave_0 added [ 767.267640][T19064] team0: Port device team_slave_1 added [ 767.390009][T19064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.390023][T19064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.390041][T19064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.391588][T19064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.391598][T19064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.391615][T19064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.462583][T19064] hsr_slave_0: entered promiscuous mode [ 767.463950][T19064] hsr_slave_1: entered promiscuous mode [ 767.464882][T19064] debugfs: 'hsr0' already exists in 'hsr' [ 767.464907][T19064] Cannot create hsr debugfs directory [ 767.902577][ T4901] Bluetooth: hci2: command tx timeout [ 768.014084][ T1127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.284951][T19233] kvm: pic: single mode not supported [ 769.285085][T19233] kvm: pic: level sensitive irq not supported [ 769.519568][ T1127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.982179][ T4901] Bluetooth: hci2: command tx timeout [ 770.274780][ T1127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.354765][ T1127] bridge_slave_1: left allmulticast mode [ 773.354805][ T1127] bridge_slave_1: left promiscuous mode [ 773.378162][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.589328][ T1127] bridge_slave_0: left allmulticast mode [ 773.589368][ T1127] bridge_slave_0: left promiscuous mode [ 773.589654][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.162847][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.238363][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.283777][ T1127] bond0 (unregistering): Released all slaves [ 776.363977][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 778.100816][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 780.386642][ T4901] Bluetooth: hci1: command 0x0406 tx timeout [ 781.396095][T19506] syz.5.5155 (19506) used greatest stack depth: 17296 bytes left [ 783.199453][ T1127] hsr_slave_0: left promiscuous mode [ 783.242075][ T1127] hsr_slave_1: left promiscuous mode [ 783.244237][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.244268][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.319833][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.319863][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.689176][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 783.689199][ T37] audit: type=1326 audit(2000000357.100:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.690854][ T37] audit: type=1326 audit(2000000357.100:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.714155][ T37] audit: type=1326 audit(2000000357.120:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.715038][ T37] audit: type=1326 audit(2000000357.120:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.716119][ T37] audit: type=1326 audit(2000000357.120:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.716176][ T37] audit: type=1326 audit(2000000357.120:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.729721][ T37] audit: type=1326 audit(2000000357.140:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.731353][ T37] audit: type=1326 audit(2000000357.140:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.731411][ T37] audit: type=1326 audit(2000000357.140:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.731458][ T37] audit: type=1326 audit(2000000357.140:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19584 comm="syz.1.5180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0b1694e0d9 code=0x7ffc0000 [ 783.748800][ T1127] veth1_macvtap: left promiscuous mode [ 783.748909][ T1127] veth0_macvtap: left promiscuous mode [ 783.749168][ T1127] veth1_vlan: left promiscuous mode [ 786.980550][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 787.083305][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 789.317041][T19064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.428099][T19064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.490505][T19064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 789.538919][T19064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.540737][T19064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 789.653664][T19064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.656469][T19064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 789.790681][T19064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.465167][T19064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.572729][T19064] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.605092][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.687970][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.735711][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.735884][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.563278][T19064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.880082][T19064] veth0_vlan: entered promiscuous mode [ 794.920287][T19064] veth1_vlan: entered promiscuous mode [ 795.075285][T19064] veth0_macvtap: entered promiscuous mode [ 795.141106][T19064] veth1_macvtap: entered promiscuous mode [ 795.269930][T19064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.312632][T19064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.389386][ T821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.391651][ T111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.391701][ T111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.391741][ T111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.021109][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.021133][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.319084][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.319108][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.782859][ T4901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 798.844181][ T4901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 798.875452][ T4901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 798.909025][ T4901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 798.910164][ T4901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 801.106333][ T4901] Bluetooth: hci4: command tx timeout [ 802.277267][T19921] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.277422][T19921] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.277678][T19921] bridge_slave_0: entered allmulticast mode [ 802.283578][T19921] bridge_slave_0: entered promiscuous mode [ 802.324085][T19921] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.338335][T19921] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.338639][T19921] bridge_slave_1: entered allmulticast mode [ 802.341390][T19921] bridge_slave_1: entered promiscuous mode [ 802.416573][T19921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.420898][T19921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.492770][T19921] team0: Port device team_slave_0 added [ 802.502793][T19921] team0: Port device team_slave_1 added [ 802.596688][T19921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.596725][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.596754][T19921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.612204][T19921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.612221][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.612247][T19921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.865133][T19921] hsr_slave_0: entered promiscuous mode [ 802.876175][T19921] hsr_slave_1: entered promiscuous mode [ 802.877791][T19921] debugfs: 'hsr0' already exists in 'hsr' [ 802.877812][T19921] Cannot create hsr debugfs directory [ 803.187099][ T4901] Bluetooth: hci4: command tx timeout [ 803.884804][T20060] create_pit_timer: 4 callbacks suppressed [ 803.884825][T20060] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 804.955235][T19921] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.122553][T20084] kvm: apic: phys broadcast and lowest prio [ 805.256072][ T4901] Bluetooth: hci4: command tx timeout [ 805.960503][T19921] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.487593][T19921] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.346104][ T4901] Bluetooth: hci4: command tx timeout [ 807.429626][T19921] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.439631][T20135] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 808.937853][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.937932][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.359496][T19921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 809.427745][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.436299][T19921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 809.551569][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.557314][T19921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 809.607339][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.612289][T19921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 809.670486][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 810.283645][T20219] sit0: entered promiscuous mode [ 810.336284][T20220] IPv6: addrconf: prefix option has invalid lifetime [ 810.340051][T20219] netlink: 'syz.1.5404': attribute type 1 has an invalid length. [ 810.340076][T20219] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5404'. [ 810.382243][T19921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.418444][T19921] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.478983][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.479110][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.554357][ T821] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.554521][ T821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.039869][T19921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.202332][T19921] veth0_vlan: entered promiscuous mode [ 813.304238][T19921] veth1_vlan: entered promiscuous mode [ 813.417256][T19921] veth0_macvtap: entered promiscuous mode [ 813.483755][T19921] veth1_macvtap: entered promiscuous mode [ 813.579270][T19921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.640990][T19921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.709257][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.709530][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.709588][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.709628][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.666854][ T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.666879][ T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.935344][ T821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.935369][ T821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.591141][T20325] CUSE: info not properly terminated [ 816.591880][T20325] 9p: Bad value for 'wfdno' [ 819.688927][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5490'. [ 819.789065][T20423] vlan2: entered promiscuous mode [ 819.789092][T20423] syz_tun: entered promiscuous mode [ 819.822132][T20427] CUSE: info not properly terminated [ 819.823043][T20427] 9p: Bad value for 'rfdno' [ 821.083298][T20463] syz_tun: entered promiscuous mode [ 821.083500][T20463] macvtap1: entered promiscuous mode [ 821.083662][T20463] macvtap1: entered allmulticast mode [ 821.083672][T20463] syz_tun: entered allmulticast mode [ 821.261204][T20463] syz_tun: left allmulticast mode [ 821.261765][T20463] syz_tun: left promiscuous mode [ 824.276037][T20568] syzkaller0: entered promiscuous mode [ 824.276068][T20568] syzkaller0: entered allmulticast mode [ 826.374969][ T4901] Bluetooth: hci0: command 0x0406 tx timeout [ 828.608305][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 828.692573][T20712] IPv6: sit1: Disabled Multicast RS [ 832.210265][T20807] bonding: no command found in bonding_masters - use +ifname or -ifname [ 836.889709][T20932] syz.5.5697 (20932) used greatest stack depth: 16984 bytes left [ 846.667401][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 846.687760][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 846.688189][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 846.689540][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 851.973297][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 854.549796][T21480] fuse: Bad value for 'fd' [ 856.349489][T21521] fuse: Bad value for 'fd' [ 858.518923][T21581] 9p: Bad value for 'rfdno' [ 859.447581][T21611] 9p: Bad value for 'rfdno' [ 859.454094][T21606] syz_tun: entered promiscuous mode [ 859.470863][T21606] macvtap1: entered promiscuous mode [ 859.471145][T21606] macvtap1: entered allmulticast mode [ 859.471162][T21606] syz_tun: entered allmulticast mode [ 862.659704][T21716] syzkaller0: entered promiscuous mode [ 862.659732][T21716] syzkaller0: entered allmulticast mode [ 866.049043][T21811] syzkaller0: entered promiscuous mode [ 866.049074][T21811] syzkaller0: entered allmulticast mode [ 866.524590][T21826] macvtap2: entered promiscuous mode [ 866.524724][T21826] macvtap2: entered allmulticast mode [ 867.708404][T21860] macvtap3: entered promiscuous mode [ 867.708654][T21860] macvtap3: entered allmulticast mode [ 867.751906][T21856] syzkaller0: entered promiscuous mode [ 867.751952][T21856] syzkaller0: entered allmulticast mode [ 868.490046][T21894] macvtap1: entered promiscuous mode [ 868.490383][T21894] macvtap1: entered allmulticast mode [ 868.490406][T21894] syz_tun: entered allmulticast mode [ 869.984040][T21924] macvtap2: entered promiscuous mode [ 869.985489][T21924] macvtap2: entered allmulticast mode [ 870.377303][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.377388][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.550974][T21967] syz_tun: entered promiscuous mode [ 871.563627][T21967] macvtap1: entered promiscuous mode [ 871.567157][T21967] macvtap1: entered allmulticast mode [ 871.567189][T21967] syz_tun: entered allmulticast mode [ 883.434585][T22315] 9p: Bad value for 'rfdno' [ 883.665239][T22325] fuse: Unknown parameter 'group_id00000000000000000000' [ 884.335055][T22345] 9p: Bad value for 'rfdno' [ 884.447846][T22352] fuse: Bad value for 'user_id' [ 884.447870][T22352] fuse: Bad value for 'user_id' [ 885.349502][T22378] 9p: Bad value for 'rfdno' [ 887.349843][T22424] fuse: Bad value for 'fd' [ 887.821224][ T4901] Bluetooth: hci2: command 0x0406 tx timeout [ 888.472362][T22456] fuse: Bad value for 'fd' [ 891.036812][T22518] bond1 (unregistering): Released all slaves [ 902.123682][T22817] loop5: detected capacity change from 0 to 7 [ 902.998956][T22831] trusted_key: encrypted_key: key user:syz not found [ 903.086466][T22817] Dev loop5: unable to read RDB block 7 [ 903.086523][T22817] loop5: unable to read partition table [ 903.086757][T22817] loop5: partition table beyond EOD, truncated [ 903.110695][T22817] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 903.232257][T22835] fuse: Bad value for 'group_id' [ 903.232280][T22835] fuse: Bad value for 'group_id' [ 904.316537][T22862] trusted_key: encrypted_key: key user:syz not found [ 904.562905][T22867] fuse: Bad value for 'group_id' [ 904.562930][T22867] fuse: Bad value for 'group_id' [ 907.038275][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 907.038310][ T37] audit: type=1326 audit(2000000480.446:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.072242][ T37] audit: type=1326 audit(2000000480.486:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.102039][ T37] audit: type=1326 audit(2000000480.516:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.102215][ T37] audit: type=1326 audit(2000000480.516:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.102522][ T37] audit: type=1326 audit(2000000480.516:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.102716][ T37] audit: type=1326 audit(2000000480.516:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.107725][ T37] audit: type=1326 audit(2000000480.516:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.108290][ T37] audit: type=1326 audit(2000000480.516:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.108587][ T37] audit: type=1326 audit(2000000480.516:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 907.108813][ T37] audit: type=1326 audit(2000000480.516:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22942 comm="syz.5.6518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de572e0d9 code=0x7ffc0000 [ 908.035893][T22958] evm: overlay not supported [ 913.682709][T23147] ip6tnl1: entered allmulticast mode [ 914.348645][T23174] IPv6: NLM_F_REPLACE set, but no existing node found! [ 915.387131][T23209] IPv6: NLM_F_REPLACE set, but no existing node found! [ 915.800663][T16142] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 915.949926][T16142] usb 4-1: Using ep0 maxpacket: 32 [ 915.950794][T16142] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 915.954321][T16142] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 915.954351][T16142] usb 4-1: config 0 has no interface number 0 [ 915.954401][T16142] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 915.954425][T16142] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 915.954451][T16142] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 915.954478][T16142] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.961016][T16142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.961045][T16142] usb 4-1: Product: syz [ 915.961062][T16142] usb 4-1: Manufacturer: syz [ 915.961077][T16142] usb 4-1: SerialNumber: syz [ 915.989159][T16142] usb 4-1: config 0 descriptor?? [ 915.996469][T23217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 916.193970][T16142] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input30 [ 916.211571][ T4937] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 916.484382][T16142] usb 4-1: USB disconnect, device number 75 [ 916.484522][ C0] bcm5974 4-1:0.119: trackpad urb failed: -19 [ 917.511185][T23276] fuse: Unknown parameter 'grou00000000000000000000' [ 917.815485][T23288] 9pnet_fd: Insufficient options for proto=fd [ 918.392554][T23308] fuse: Unknown parameter 'grou00000000000000000000' [ 918.746635][T23319] 9pnet_fd: Insufficient options for proto=fd [ 918.993572][T23332] fuse: Unknown parameter 'grou00000000000000000000' [ 919.861340][T23358] 9pnet_fd: Insufficient options for proto=fd [ 920.118495][T23366] fuse: Unknown parameter 'group_i00000000000000000000' [ 920.162266][T23338] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 920.416109][T23368] syzkaller0: entered promiscuous mode [ 920.416138][T23368] syzkaller0: entered allmulticast mode [ 921.078174][T23400] fuse: Unknown parameter 'group_i00000000000000000000' [ 922.043820][T23434] fuse: Unknown parameter 'group_i00000000000000000000' [ 922.819462][T23450] hsr0 speed is unknown, defaulting to 1000 [ 922.819686][T23450] hsr0 speed is unknown, defaulting to 1000 [ 922.838329][T23447] siw: device registration error -23 [ 922.871891][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6724'. [ 922.927616][T23462] syz_tun: entered promiscuous mode [ 923.052872][T23450] hsr0 speed is unknown, defaulting to 1000 [ 923.085853][T23465] fuse: Unknown parameter 'group_id00000000000000000000' [ 923.275203][T23450] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 923.275254][T23450] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 923.275299][T23450] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 923.637008][T23450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 923.649161][T23420] Bluetooth: hci4: command 0x0406 tx timeout [ 924.118231][T23450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 924.406976][T23497] fuse: Unknown parameter 'group_id00000000000000000000' [ 924.776118][T23511] syzkaller0: entered promiscuous mode [ 924.776151][T23511] syzkaller0: entered allmulticast mode [ 925.119664][T23450] hsr0 speed is unknown, defaulting to 1000 [ 925.336474][T23534] fuse: Unknown parameter 'group_id00000000000000000000' [ 925.475439][T23450] hsr0 speed is unknown, defaulting to 1000 [ 925.618272][T23542] fuse: Bad value for 'user_id' [ 925.618295][T23542] fuse: Bad value for 'user_id' [ 925.846760][T23450] hsr0 speed is unknown, defaulting to 1000 [ 926.018883][T23551] syzkaller0: entered promiscuous mode [ 926.018967][T23551] syzkaller0: entered allmulticast mode [ 926.034543][T23450] hsr0 speed is unknown, defaulting to 1000 [ 926.091622][T23560] fuse: Bad value for 'user_id' [ 926.091642][T23560] fuse: Bad value for 'user_id' [ 926.093537][T23450] hsr0 speed is unknown, defaulting to 1000 [ 926.095593][T23450] hsr0 speed is unknown, defaulting to 1000 [ 926.516366][T23568] fuse: Bad value for 'fd' [ 927.252118][T23589] loop0: detected capacity change from 0 to 4096 [ 927.415311][T23592] fuse: Bad value for 'user_id' [ 927.415351][T23592] fuse: Bad value for 'user_id' [ 927.895717][T23589] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 927.904490][T23589] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 927.904518][T23589] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 927.904531][T23589] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 927.904567][T23589] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 927.904632][T23589] loop0: [ 928.218016][T23600] fuse: Bad value for 'fd' [ 929.162649][T23625] overlayfs: overlapping lowerdir path [ 929.198532][T23629] loop0: detected capacity change from 0 to 3904 [ 929.206004][T23625] overlayfs: overlapping lowerdir path [ 929.208986][ T9858] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 929.275747][T23629] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 929.275784][T23629] ldm_validate_privheads(): Disk read failed. [ 929.278499][T23629] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 929.278576][T23629] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 929.278593][T23629] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 929.289202][T23629] ldm_parse_vmdb(): Cannot find the VMDB, database may be corrupt. [ 929.289276][T23629] loop0: [ 929.289296][T23629] loop0: partition table partially beyond EOD, truncated [ 929.312907][T23623] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6789'. [ 929.358890][ T9858] usb 5-1: Using ep0 maxpacket: 8 [ 929.365533][ T9858] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 929.368045][ T9858] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.368074][ T9858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 929.368091][ T9858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 929.368106][ T9858] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.368133][ T9858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.615645][T23633] fuse: Bad value for 'fd' [ 929.642050][ T9858] usb 5-1: GET_CAPABILITIES returned 0 [ 929.642100][ T9858] usbtmc 5-1:16.0: can't read capabilities [ 929.946578][ T9858] usb 5-1: USB disconnect, device number 31 [ 930.455037][T23658] fuse: Bad value for 'fd' [ 930.762316][T23672] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6811'. [ 931.137353][T23688] fuse: Bad value for 'fd' [ 931.156558][T23689] loop0: detected capacity change from 0 to 4095 [ 931.313991][T23689] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 931.314024][T23689] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 931.314039][T23689] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 931.314104][T23689] loop0: [ 931.547734][ T36] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 931.749660][ T36] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 931.751269][ T36] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 931.751303][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 931.754357][ T36] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 931.754387][ T36] usb 5-1: Product: syz [ 931.754403][ T36] usb 5-1: Manufacturer: syz [ 931.754418][ T36] usb 5-1: SerialNumber: syz [ 931.815045][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.815134][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.851508][ T36] usb 5-1: config 0 descriptor?? [ 931.980529][ T36] usb 5-1: selecting invalid altsetting 0 [ 932.141039][T23706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6827'. [ 932.355017][T23714] fuse: Bad value for 'fd' [ 933.360216][T23742] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 933.964626][T23754] fuse: Unknown parameter '0x0000000000000004' [ 934.167066][T23758] fuse: Invalid rootmode [ 934.302011][ T9858] usb 5-1: USB disconnect, device number 32 [ 934.365763][T23739] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.473204][T23768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6845'. [ 934.651236][T23739] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.675294][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ab83c00: rx timeout, send abort [ 935.175354][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ab83c00: abort rx timeout. Force session deactivation [ 935.178543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ab82800: rx timeout, send abort [ 935.681146][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ab82800: abort rx timeout. Force session deactivation [ 935.708456][T23786] fuse: Unknown parameter 'fd0x0000000000000004' [ 935.980773][T23792] fuse: Invalid rootmode [ 936.411891][T23739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.425432][T23739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.453435][T23811] fuse: Unknown parameter 'fd0x0000000000000004' [ 937.689733][T23815] fuse: Invalid rootmode [ 938.599261][T23739] syz_tun: left allmulticast mode [ 939.249181][T23741] sit0: left promiscuous mode [ 939.572629][T23741] syz_tun: left promiscuous mode [ 939.742071][T23741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.777214][T23741] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.915162][T23741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.057434][T23741] socket: no more sockets [ 940.057448][T23741] wireguard: wg0: Could not create IPv4 socket [ 940.057460][T23741] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 940.108333][T23839] fuse: Unknown parameter 'fd0x0000000000000004' [ 940.239839][T23843] fuse: Bad value for 'rootmode' [ 940.398649][ T1428] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.398717][ T1428] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.398766][ T1428] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.398805][ T1428] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.223953][T23874] fuse: Bad value for 'rootmode' [ 941.561788][T23886] file system registered [ 942.406188][T17448] ffs_data_put(): freeing [ 942.526500][T23902] bridge_slave_0: left allmulticast mode [ 942.526538][T23902] bridge_slave_0: left promiscuous mode [ 942.527230][T23902] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.739506][T23902] bridge_slave_1: left allmulticast mode [ 942.739545][T23902] bridge_slave_1: left promiscuous mode [ 942.739908][T23902] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.926092][T23902] bond0: (slave bond_slave_0): Releasing backup interface [ 943.019187][T23902] bond0: (slave bond_slave_1): Releasing backup interface [ 943.111380][T23902] team0: Port device team_slave_0 removed [ 943.145566][T23902] team0: Port device team_slave_1 removed [ 943.160276][T23902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.160311][T23902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.220494][T23902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.220516][T23902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.270935][T23902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 943.309044][T23904] team0: Mode changed to "loadbalance" [ 943.707193][T23941] bridge0: port 3(syz_tun) entered blocking state [ 943.707350][T23941] bridge0: port 3(syz_tun) entered disabled state [ 945.442654][T23997] IPv6: NLM_F_REPLACE set, but no existing node found! [ 945.880188][T24008] loop0: detected capacity change from 0 to 4096 [ 946.055385][T24008] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 946.085446][T24008] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 946.085483][T24008] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 946.085501][T24008] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 946.085516][T24008] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 946.085581][T24008] loop0: [ 946.444201][T24024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6948'. [ 946.546809][T24024] ip6tnl1: entered allmulticast mode [ 946.674231][T24031] loop0: detected capacity change from 0 to 3904 [ 946.788938][T24031] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 946.788976][T24031] ldm_validate_privheads(): Disk read failed. [ 946.852595][T24031] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''. [ 946.852635][T24031] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 946.852649][T24031] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 946.852664][T24031] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 946.852679][T24031] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 946.852731][T24031] loop0: [ 946.852748][T24031] loop0: partition table partially beyond EOD, truncated [ 946.971799][T24039] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI [ 946.971856][T24039] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 946.971925][T24039] CPU: 1 UID: 0 PID: 24039 Comm: syz.1.6950 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 946.971956][T24039] Tainted: [L]=SOFTLOCKUP [ 946.971963][T24039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.971976][T24039] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 946.972017][T24039] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 be a3 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 96 a3 c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 946.972035][T24039] RSP: 0018:ffffc9000f1cfc80 EFLAGS: 00010202 [ 946.972056][T24039] RAX: 0000000000000016 RBX: ffff888038e56d48 RCX: dffffc0000000000 [ 946.972073][T24039] RDX: 0000000000000006 RSI: ffffffff8d884ffb RDI: 00000000ffffffff [ 946.972087][T24039] RBP: ffffc9000f1cfd88 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 946.972102][T24039] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 00000000000000b0 [ 946.972117][T24039] R13: 0000000000000000 R14: ffffffff8c21fe48 R15: 1ffff92001e39fa0 [ 946.972131][T24039] FS: 00007f0b14b856c0(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 946.972148][T24039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.972163][T24039] CR2: 00007f0b14b84ff8 CR3: 000000004bc82000 CR4: 00000000003526f0 [ 946.972182][T24039] Call Trace: [ 946.972190][T24039] [ 946.972205][T24039] ? __pfx_configfs_symlink+0x10/0x10 [ 946.972236][T24039] ? bpf_lsm_inode_symlink+0x9/0x20 [ 946.972264][T24039] vfs_symlink+0x18b/0x330 [ 946.972293][T24039] ? security_path_symlink+0xfd/0x360 [ 946.972324][T24039] filename_symlinkat+0x1cd/0x420 [ 946.972352][T24039] ? __pfx_filename_symlinkat+0x10/0x10 [ 946.972379][T24039] ? do_getname+0x151/0x250 [ 946.972406][T24039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.972427][T24039] __se_sys_symlink+0x4d/0x2b0 [ 946.972454][T24039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.972474][T24039] do_syscall_64+0x174/0x580 [ 946.972502][T24039] ? trace_irq_disable+0x3b/0x140 [ 946.972545][T24039] ? clear_bhb_loop+0x70/0xc0 [ 946.972566][T24039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.972585][T24039] RIP: 0033:0x7f0b1694e0d9 [ 946.972603][T24039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.972620][T24039] RSP: 002b:00007f0b14b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 946.972641][T24039] RAX: ffffffffffffffda RBX: 00007f0b16bd6090 RCX: 00007f0b1694e0d9 [ 946.972655][T24039] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400 [ 946.972670][T24039] RBP: 00007f0b169e5024 R08: 0000000000000000 R09: 0000000000000000 [ 946.972684][T24039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.972698][T24039] R13: 00007f0b16bd6128 R14: 00007f0b16bd6090 R15: 00007fff8ceced58 [ 946.972721][T24039] [ 946.972729][T24039] Modules linked in: [ 946.972746][T24039] ---[ end trace 0000000000000000 ]--- [ 946.972758][T24039] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 946.972786][T24039] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 be a3 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 96 a3 c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 946.972891][T24039] RSP: 0018:ffffc9000f1cfc80 EFLAGS: 00010202 [ 946.972910][T24039] RAX: 0000000000000016 RBX: ffff888038e56d48 RCX: dffffc0000000000 [ 946.972925][T24039] RDX: 0000000000000006 RSI: ffffffff8d884ffb RDI: 00000000ffffffff [ 946.972939][T24039] RBP: ffffc9000f1cfd88 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 946.972954][T24039] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 00000000000000b0 [ 946.972970][T24039] R13: 0000000000000000 R14: ffffffff8c21fe48 R15: 1ffff92001e39fa0 [ 946.972984][T24039] FS: 00007f0b14b856c0(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 946.973003][T24039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.973016][T24039] CR2: 00007f0b14b84ff8 CR3: 000000004bc82000 CR4: 00000000003526f0 [ 946.973077][T24039] Kernel panic - not syncing: Fatal exception [ 946.973541][T24039] Kernel Offset: disabled