last executing test programs: 13.311956918s ago: executing program 4 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000300)=""/3, 0x3}], 0x2, 0x0, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.03278154s ago: executing program 4 (id=139): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 9.7944978s ago: executing program 4 (id=146): write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000026c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002600), 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 8.934239686s ago: executing program 0 (id=149): openat(0xffffffffffffff9c, 0x0, 0x42, 0x173) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1c0, &(0x7f0000000380)="$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") preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xfffffffb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) 6.583504315s ago: executing program 0 (id=162): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2eb5, 0x30}, 0xc) r1 = dup(r0) write$make_it_fail(r1, &(0x7f00000000c0)='1\x00', 0x2) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="d580", 0x2}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 6.579984239s ago: executing program 1 (id=154): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 5.656259243s ago: executing program 0 (id=155): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5.656039413s ago: executing program 1 (id=156): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.598815579s ago: executing program 4 (id=158): syz_open_dev$mtd(0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x42, 0x38, 0x2d, 0x32, 0x36, 0x25, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r1, r1, 0x0, 0x1000200201005) 3.916048796s ago: executing program 1 (id=160): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000102, 0x0) 3.502731575s ago: executing program 2 (id=163): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.490758374s ago: executing program 0 (id=164): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x279, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1fffc, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x4, 0x1, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x1, 0xfffffffb}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0x3, 0xfb9, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.578482062s ago: executing program 2 (id=165): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$vcsn(0x0, 0x7f, 0x100) openat(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1cb) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000300)=ANY=[]) 2.053612878s ago: executing program 4 (id=167): r0 = inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xaf) open(0x0, 0x109cc2, 0x5c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40000) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 2.040674872s ago: executing program 0 (id=168): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 1.985712049s ago: executing program 2 (id=169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 1.946375595s ago: executing program 1 (id=170): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000002500)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x315d030, 0x0, 0x40, 0x0, &(0x7f0000000100)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) 1.904532018s ago: executing program 3 (id=171): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1, &(0x7f0000000cc0)=""/221, 0xdd}, 0x100) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 1.525866189s ago: executing program 0 (id=172): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.435027986s ago: executing program 3 (id=173): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 1.20785727s ago: executing program 3 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.197419084s ago: executing program 2 (id=175): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 1.056627087s ago: executing program 1 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c00)={0x4c, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write(r0, &(0x7f0000000000)='7', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 994.780772ms ago: executing program 2 (id=177): socket(0x2, 0x80805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) close(0x4) 912.123832ms ago: executing program 2 (id=178): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 823.706088ms ago: executing program 3 (id=179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140)=[{r0, 0xa0}], 0x1, 0x8) 725.396421ms ago: executing program 3 (id=180): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000300)=@string={0x4, 0x3, "9933"}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4041801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) 514.532083ms ago: executing program 4 (id=181): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) 298.600869ms ago: executing program 1 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x82002, 0x105) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x81, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0xa, 0x4, 0x43, 0x3, 0xfb, 0x80, 0x7, 0xe}, {0x100000, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xe, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) 0s ago: executing program 3 (id=183): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 71.608634][ T5599] cgroup: Unknown subsys name 'net' [ 71.706505][ T5599] cgroup: Unknown subsys name 'cpuset' [ 71.716862][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.351716][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.632867][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.633501][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.636791][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.638553][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.640822][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.642062][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.642507][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.643869][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.644190][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.647829][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.656506][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.670470][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.675172][ T4929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.678000][ T4929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.678704][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.678911][ T4929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.685206][ T4929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.686185][ T4929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.701176][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.713135][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.774148][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.776753][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.778892][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.784836][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.785496][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.703624][ T5611] Bluetooth: hci0: command tx timeout [ 77.704029][ T54] Bluetooth: hci1: command tx timeout [ 77.762413][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.762589][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.762988][ T5610] bridge_slave_0: entered allmulticast mode [ 77.764802][ T5610] bridge_slave_0: entered promiscuous mode [ 77.782531][ T5611] Bluetooth: hci2: command tx timeout [ 77.782779][ T54] Bluetooth: hci3: command tx timeout [ 77.800258][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.800373][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.800760][ T5614] bridge_slave_0: entered allmulticast mode [ 77.803257][ T5614] bridge_slave_0: entered promiscuous mode [ 77.807391][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.807494][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.807617][ T5614] bridge_slave_1: entered allmulticast mode [ 77.809364][ T5614] bridge_slave_1: entered promiscuous mode [ 77.855313][ T54] Bluetooth: hci4: command tx timeout [ 77.867920][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.867996][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.868151][ T5610] bridge_slave_1: entered allmulticast mode [ 77.870378][ T5610] bridge_slave_1: entered promiscuous mode [ 78.015226][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.015473][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.015704][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.015837][ T5621] bridge_slave_0: entered allmulticast mode [ 78.017475][ T5621] bridge_slave_0: entered promiscuous mode [ 78.021730][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.031294][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.031409][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.031532][ T5613] bridge_slave_0: entered allmulticast mode [ 78.034878][ T5613] bridge_slave_0: entered promiscuous mode [ 78.039508][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.039671][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.040073][ T5613] bridge_slave_1: entered allmulticast mode [ 78.041871][ T5613] bridge_slave_1: entered promiscuous mode [ 78.080059][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.095739][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.095844][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.095962][ T5621] bridge_slave_1: entered allmulticast mode [ 78.098030][ T5621] bridge_slave_1: entered promiscuous mode [ 78.131252][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.169792][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.216560][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.218980][ T5614] team0: Port device team_slave_0 added [ 78.221636][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.238018][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.238134][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.238590][ T5609] bridge_slave_0: entered allmulticast mode [ 78.240468][ T5609] bridge_slave_0: entered promiscuous mode [ 78.244281][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.244395][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.244522][ T5609] bridge_slave_1: entered allmulticast mode [ 78.246341][ T5609] bridge_slave_1: entered promiscuous mode [ 78.290584][ T5614] team0: Port device team_slave_1 added [ 78.313082][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.326614][ T5610] team0: Port device team_slave_0 added [ 78.346888][ T5613] team0: Port device team_slave_0 added [ 78.361128][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.361146][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.361166][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.389407][ T5610] team0: Port device team_slave_1 added [ 78.419132][ T5613] team0: Port device team_slave_1 added [ 78.430899][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.430921][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.430937][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.445389][ T5621] team0: Port device team_slave_0 added [ 78.466473][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.470396][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.494724][ T5621] team0: Port device team_slave_1 added [ 78.495670][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.495683][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.495705][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.499056][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.499079][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.499101][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.532840][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.532858][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.532879][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.617635][ T5609] team0: Port device team_slave_0 added [ 78.619304][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.619318][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.619339][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.656548][ T5609] team0: Port device team_slave_1 added [ 78.668739][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.668757][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.668778][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.696649][ T5614] hsr_slave_0: entered promiscuous mode [ 78.697822][ T5614] hsr_slave_1: entered promiscuous mode [ 78.717722][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.717738][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.717760][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.822785][ T5610] hsr_slave_0: entered promiscuous mode [ 78.823675][ T5610] hsr_slave_1: entered promiscuous mode [ 78.824143][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 78.824219][ T5610] Cannot create hsr debugfs directory [ 78.836112][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.836136][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.836158][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.857772][ T5613] hsr_slave_0: entered promiscuous mode [ 78.858797][ T5613] hsr_slave_1: entered promiscuous mode [ 78.859505][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 78.859522][ T5613] Cannot create hsr debugfs directory [ 78.860914][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.860925][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.860947][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.993698][ T5621] hsr_slave_0: entered promiscuous mode [ 78.994431][ T5621] hsr_slave_1: entered promiscuous mode [ 78.994876][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 78.994896][ T5621] Cannot create hsr debugfs directory [ 79.094205][ T5609] hsr_slave_0: entered promiscuous mode [ 79.094922][ T5609] hsr_slave_1: entered promiscuous mode [ 79.095398][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 79.095418][ T5609] Cannot create hsr debugfs directory [ 79.535350][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.546559][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.547678][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.556735][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.557728][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.570743][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.573913][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.583132][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.664731][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.676482][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.677530][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.685140][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.692840][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.703125][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.704872][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.715937][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.773196][ T54] Bluetooth: hci1: command tx timeout [ 79.773236][ T54] Bluetooth: hci0: command tx timeout [ 79.827914][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.831688][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.854477][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.859300][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.860036][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.862460][ T5611] Bluetooth: hci3: command tx timeout [ 79.862499][ T5611] Bluetooth: hci2: command tx timeout [ 79.864574][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.904934][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.908696][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.932782][ T54] Bluetooth: hci4: command tx timeout [ 79.972647][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.033668][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.037173][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.045621][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.062805][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.071794][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.076614][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.084937][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.098872][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.111503][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.129722][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.129819][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.165943][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.166047][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.206463][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.241223][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.247670][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.248639][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.255328][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.258005][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.268626][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.269632][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.276815][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.353986][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.373816][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.373882][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.401398][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.426271][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.426341][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.507746][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.570844][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.570960][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.619642][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.619779][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.628082][ T5613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.811279][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.839596][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.931676][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.973539][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.998455][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.998571][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.028759][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.028867][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.070901][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.071017][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.099206][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.099326][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.628654][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.852736][ T54] Bluetooth: hci0: command tx timeout [ 81.852747][ T5611] Bluetooth: hci1: command tx timeout [ 81.907650][ T5614] veth0_vlan: entered promiscuous mode [ 81.932701][ T54] Bluetooth: hci2: command tx timeout [ 81.932743][ T54] Bluetooth: hci3: command tx timeout [ 81.939102][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.993479][ T5614] veth1_vlan: entered promiscuous mode [ 82.013837][ T5611] Bluetooth: hci4: command tx timeout [ 82.245317][ T5614] veth0_macvtap: entered promiscuous mode [ 82.292115][ T5614] veth1_macvtap: entered promiscuous mode [ 82.417523][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.443968][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.520114][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.624458][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.625012][ T4385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633314][ T470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.763795][ T4385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.911928][ T5610] veth0_vlan: entered promiscuous mode [ 82.998311][ T5610] veth1_vlan: entered promiscuous mode [ 83.008241][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.028781][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.035230][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.035252][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.141083][ T5613] veth0_vlan: entered promiscuous mode [ 83.159900][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.159924][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.187760][ T5610] veth0_macvtap: entered promiscuous mode [ 83.224680][ T5610] veth1_macvtap: entered promiscuous mode [ 83.231269][ T5613] veth1_vlan: entered promiscuous mode [ 83.277388][ T5609] veth0_vlan: entered promiscuous mode [ 83.341608][ T5609] veth1_vlan: entered promiscuous mode [ 83.358439][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.371787][ T5613] veth0_macvtap: entered promiscuous mode [ 83.385613][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.407391][ T5621] veth0_vlan: entered promiscuous mode [ 83.408289][ T5613] veth1_macvtap: entered promiscuous mode [ 83.444010][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.473501][ T4385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.474718][ T4385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.474767][ T4385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.474800][ T4385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.527240][ T5621] veth1_vlan: entered promiscuous mode [ 83.621640][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.680752][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.733197][ T5806] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.769493][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.769527][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.793899][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793951][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793986][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.794018][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.800804][ T5609] veth0_macvtap: entered promiscuous mode [ 83.899917][ T5609] veth1_macvtap: entered promiscuous mode [ 83.904069][ T5621] veth0_macvtap: entered promiscuous mode [ 83.920487][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.920510][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.938553][ T54] Bluetooth: hci0: command tx timeout [ 83.939166][ T5621] veth1_macvtap: entered promiscuous mode [ 83.944317][ T54] Bluetooth: hci1: command tx timeout [ 84.012428][ T54] Bluetooth: hci3: command tx timeout [ 84.012461][ T54] Bluetooth: hci2: command tx timeout [ 84.068295][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.093819][ T5611] Bluetooth: hci4: command tx timeout [ 84.103044][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.106594][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.128626][ T470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.128650][ T470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.143256][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.289261][ T470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.289284][ T470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.400395][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411730][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411782][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411817][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411853][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411887][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411923][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411958][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.630888][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.630912][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.744415][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.744437][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.872464][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.872490][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.934793][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.934815][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.799540][ T5849] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 85.799582][ T5849] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 85.799617][ T5849] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 86.119891][ T5854] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 86.360854][ T5851] smbdirect: ib_dev[syz1] removed [ 86.714477][ T5868] syzkaller1: entered promiscuous mode [ 86.714506][ T5868] syzkaller1: entered allmulticast mode [ 87.154764][ T9] cfg80211: failed to load regulatory.db [ 87.739854][ T5890] fuse-io-uring is disabled by module parameter [ 87.739909][ T5890] fuse-io-uring is disabled by module parameter [ 87.739943][ T5890] fuse-io-uring is disabled by module parameter [ 87.739976][ T5890] fuse-io-uring is disabled by module parameter [ 87.740008][ T5890] fuse-io-uring is disabled by module parameter [ 87.740038][ T5890] fuse-io-uring is disabled by module parameter [ 87.740071][ T5890] fuse-io-uring is disabled by module parameter [ 87.740104][ T5890] fuse-io-uring is disabled by module parameter [ 87.740137][ T5890] fuse-io-uring is disabled by module parameter [ 87.740169][ T5890] fuse-io-uring is disabled by module parameter [ 88.718060][ T5904] kvm: faulting far call emulation tainted memory [ 88.718296][ T5904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.801937][ T5910] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 88.914068][ T5914] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 88.914257][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 88.963959][ T5913] loop4: detected capacity change from 0 to 512 [ 89.275655][ T5914] dummy0: entered promiscuous mode [ 89.286182][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.286334][ T5913] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.666677][ T5925] loop0: detected capacity change from 0 to 1024 [ 89.824597][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.824622][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.846595][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.846616][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.865269][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.865288][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.988866][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.988889][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.018210][ T5934] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.018234][ T5934] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.072179][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.072202][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.080471][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.080492][ T5925] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.368635][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.594534][ T5946] loop0: detected capacity change from 0 to 512 [ 90.609771][ T5946] ======================================================= [ 90.609771][ T5946] WARNING: The mand mount option has been deprecated and [ 90.609771][ T5946] and is ignored by this kernel. Remove the mand [ 90.609771][ T5946] option from the mount to silence this warning. [ 90.609771][ T5946] ======================================================= [ 90.725232][ T5946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 90.725499][ T5946] System zones: 0-7 [ 90.783616][ T5946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.285820][ T5963] loop3: detected capacity change from 0 to 128 [ 91.745379][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.950820][ T5969] loop1: detected capacity change from 0 to 512 [ 92.013749][ T5611] Bluetooth: hci4: command tx timeout [ 92.097598][ T5975] loop2: detected capacity change from 0 to 256 [ 92.405878][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.407012][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.543097][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.551973][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.955407][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.974885][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.011026][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.085209][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.085357][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.091845][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.091982][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.114783][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.118449][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.154049][ T5979] veth1_vlan: left promiscuous mode [ 93.155299][ T5979] veth0_vlan: left promiscuous mode [ 93.157777][ T5979] veth0_vlan: entered promiscuous mode [ 93.174164][ T5979] veth1_vlan: entered promiscuous mode [ 93.194004][ T5979] veth1_macvtap: left promiscuous mode [ 93.195236][ T5979] veth0_macvtap: left promiscuous mode [ 93.197576][ T5979] veth0_macvtap: entered promiscuous mode [ 93.199917][ T5979] veth1_macvtap: entered promiscuous mode [ 93.211325][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.217569][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.223529][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.225308][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.344359][ T5997] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 93.344398][ T5997] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 93.344433][ T5997] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 94.501303][ T6017] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.008059][ T6022] input: syz0 as /devices/virtual/input/input5 [ 95.061958][ T6008] loop3: detected capacity change from 0 to 32768 [ 95.138692][ T6008] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.59 (6008) [ 95.415448][ T6008] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 95.415475][ T6008] BTRFS info (device loop3): using blake2b checksum algorithm [ 95.621571][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 95.621599][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 95.654504][ T6035] netlink: 'syz.4.67': attribute type 11 has an invalid length. [ 95.660441][ T6008] BTRFS info (device loop3): enabling ssd optimizations [ 95.660467][ T6008] BTRFS info (device loop3): turning on async discard [ 95.660481][ T6008] BTRFS info (device loop3): enabling free space tree [ 95.994462][ T33] audit: type=1804 audit(1791553787.678:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.59" name="/newroot/12/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 96.057179][ T6052] siw: device registration error -23 [ 96.254630][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.256216][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.291580][ T33] audit: type=1804 audit(1791553787.978:3): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.59" name="/newroot/12/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 96.480377][ T6060] loop2: detected capacity change from 0 to 2048 [ 96.545860][ T6060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.580936][ T6060] Illegal XDP return value 4294967294 on prog (id 14) dev N/A, expect packet loss! [ 96.661184][ T6063] loop0: detected capacity change from 0 to 256 [ 96.674513][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.680732][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.806949][ T5614] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 98.410151][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.413167][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.418755][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.462170][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.462437][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.466272][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.466454][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.490949][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.502682][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.549408][ T6055] veth1_vlan: left promiscuous mode [ 98.551310][ T6055] veth0_vlan: left promiscuous mode [ 98.557636][ T6055] veth0_vlan: entered promiscuous mode [ 98.569190][ T6055] veth1_vlan: entered promiscuous mode [ 98.598267][ T6055] veth1_macvtap: left promiscuous mode [ 98.600990][ T6055] veth0_macvtap: left promiscuous mode [ 98.607024][ T6055] veth0_macvtap: entered promiscuous mode [ 98.613102][ T6055] veth1_macvtap: entered promiscuous mode [ 98.660227][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.669575][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.675181][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.677559][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.788462][ T6046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.411849][ T6097] loop4: detected capacity change from 0 to 128 [ 100.097506][ T6110] process 'syz.4.84' launched './file1' with NULL argv: empty string added [ 100.342072][ T6116] loop2: detected capacity change from 0 to 512 [ 100.421829][ T6116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 100.421974][ T6116] System zones: 0-7 [ 100.475953][ T6116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.207280][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.300373][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 101.396138][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 101.592060][ T6134] Zero length message leads to an empty skb [ 101.592466][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.592516][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.592551][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.592585][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.955519][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.956210][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.974458][ T6146] loop4: detected capacity change from 0 to 1024 [ 102.005239][ T6146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.035278][ T6146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 102.035414][ T6146] System zones: 0-1, 3-36 [ 102.085333][ T6146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.125896][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 102.125962][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 102.125976][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 102.238810][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.256606][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.786060][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.794712][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.795531][ T6138] dummy0: left promiscuous mode [ 102.809598][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.868746][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.868869][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.883937][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.884058][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.933870][ T33] audit: type=1804 audit(1791553794.618:4): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.99" name="/newroot/20/file0" dev="tmpfs" ino=125 res=1 errno=0 [ 102.949933][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.955488][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.001704][ T6138] veth1_vlan: left promiscuous mode [ 103.009312][ T6138] veth0_vlan: left promiscuous mode [ 103.018257][ T6138] veth0_vlan: entered promiscuous mode [ 103.038491][ T6138] veth1_vlan: entered promiscuous mode [ 103.054041][ T6138] veth1_macvtap: left promiscuous mode [ 103.055230][ T6138] veth0_macvtap: left promiscuous mode [ 103.057548][ T6138] veth0_macvtap: entered promiscuous mode [ 103.060470][ T6138] veth1_macvtap: entered promiscuous mode [ 103.102858][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.104709][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.105933][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.107121][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.555194][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.664670][ T6174] warning: `syz.0.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.664996][ T6174] FAULT_INJECTION: forcing a failure. [ 103.664996][ T6174] name failslab, interval 1, probability 0, space 0, times 1 [ 103.665025][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(full) [ 103.665048][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.665058][ T6174] Call Trace: [ 103.665066][ T6174] [ 103.665074][ T6174] dump_stack_lvl+0xe8/0x150 [ 103.665102][ T6174] should_fail_ex+0x3eb/0x540 [ 103.665128][ T6174] should_failslab+0xa8/0x100 [ 103.665150][ T6174] __kmalloc_noprof+0xf9/0x710 [ 103.665169][ T6174] ? __kmalloc_cache_noprof+0x148/0x600 [ 103.665201][ T6174] ? cfg80211_connect+0x134b/0x24a0 [ 103.665220][ T6174] ? cfg80211_connect+0x134b/0x24a0 [ 103.665248][ T6174] cfg80211_connect+0x134b/0x24a0 [ 103.665294][ T6174] cfg80211_mgd_wext_connect+0x42a/0x580 [ 103.665320][ T6174] cfg80211_wext_siwessid+0xbf/0x130 [ 103.665345][ T6174] ioctl_standard_iw_point+0x84e/0xdc0 [ 103.665379][ T6174] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 103.665398][ T6174] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 103.665423][ T6174] ? __pfx___mutex_lock+0x10/0x10 [ 103.665446][ T6174] ? __pfx__printk+0x10/0x10 [ 103.665473][ T6174] ioctl_standard_call+0xa6/0x160 [ 103.665491][ T6174] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 103.665507][ T6174] ? __pfx_ioctl_standard_call+0x10/0x10 [ 103.665527][ T6174] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 103.665544][ T6174] wext_ioctl_dispatch+0xee/0x410 [ 103.665561][ T6174] ? __pfx_ioctl_standard_call+0x10/0x10 [ 103.665584][ T6174] wext_handle_ioctl+0x110/0x1d0 [ 103.665607][ T6174] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 103.665623][ T6174] ? do_futex+0x3e7/0x4e0 [ 103.665661][ T6174] sock_ioctl+0x159/0x7e0 [ 103.665681][ T6174] ? __fget_files+0x2a/0x420 [ 103.665702][ T6174] ? __pfx_sock_ioctl+0x10/0x10 [ 103.665719][ T6174] ? __fget_files+0x2a/0x420 [ 103.665736][ T6174] ? __fget_files+0x2a/0x420 [ 103.665758][ T6174] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.665776][ T6174] ? __pfx_sock_ioctl+0x10/0x10 [ 103.665792][ T6174] __se_sys_ioctl+0xfc/0x170 [ 103.665814][ T6174] do_syscall_64+0x166/0x520 [ 103.665834][ T6174] ? trace_irq_disable+0x3b/0x140 [ 103.665850][ T6174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.665870][ T6174] ? clear_bhb_loop+0x70/0xc0 [ 103.665891][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.665911][ T6174] RIP: 0033:0x7f6e2359e1d9 [ 103.665930][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.665947][ T6174] RSP: 002b:00007f6e244aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.665969][ T6174] RAX: ffffffffffffffda RBX: 00007f6e23825fa0 RCX: 00007f6e2359e1d9 [ 103.665983][ T6174] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 103.665995][ T6174] RBP: 00007f6e23635888 R08: 0000000000000000 R09: 0000000000000000 [ 103.666007][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.666018][ T6174] R13: 00007f6e23826038 R14: 00007f6e23825fa0 R15: 00007fffb9224328 [ 103.666054][ T6174] [ 104.000293][ T6187] netlink: 'syz.4.104': attribute type 10 has an invalid length. [ 104.035508][ T6189] loop2: detected capacity change from 0 to 512 [ 104.040633][ T6187] syz_tun: entered promiscuous mode [ 104.104303][ T6183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.154300][ T33] audit: type=1326 audit(1791553795.848:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.0.105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e2359e1d9 code=0x0 [ 104.200806][ T6189] syz.2.107: attempt to access beyond end of device [ 104.200806][ T6189] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 104.218032][ T6189] syz.2.107: attempt to access beyond end of device [ 104.218032][ T6189] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 104.219435][ T33] audit: type=1800 audit(1791553795.908:6): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.107" name="file2" dev="loop2" ino=3 res=0 errno=-5 [ 105.290523][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.291278][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.485081][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.519558][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.635451][ T6213] loop4: detected capacity change from 0 to 512 [ 105.695246][ T6213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 105.695404][ T6213] System zones: 0-7 [ 105.737260][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.894219][ T6208] loop1: detected capacity change from 0 to 32768 [ 105.909088][ T6208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.111 (6208) [ 105.938552][ T6208] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.938592][ T6208] BTRFS info (device loop1): using crc32c checksum algorithm [ 106.052347][ T4385] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.052398][ T4385] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.052431][ T4385] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.052462][ T4385] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.121697][ T6208] BTRFS info (device loop1): enabling ssd optimizations [ 106.121731][ T6208] BTRFS info (device loop1): turning on flush-on-commit [ 106.121745][ T6208] BTRFS info (device loop1): enabling free space tree [ 106.121760][ T6208] BTRFS info (device loop1): enabling auto defrag [ 106.121777][ T6208] BTRFS info (device loop1): use lzo compression, level 1 [ 106.121794][ T6208] BTRFS info (device loop1): max_inline set to 4096 [ 106.241629][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.455597][ T5621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.682975][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.849173][ T27] usb 1-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 106.884374][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.884432][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.375727][ T27] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 107.447108][ T27] wwan wwan0: port wwan0qmi0 attached [ 107.655979][ T6253] FAULT_INJECTION: forcing a failure. [ 107.655979][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 107.656017][ T6253] CPU: 0 UID: 0 PID: 6253 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 107.656041][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.656052][ T6253] Call Trace: [ 107.656060][ T6253] [ 107.656069][ T6253] dump_stack_lvl+0xe8/0x150 [ 107.656099][ T6253] should_fail_ex+0x3eb/0x540 [ 107.656126][ T6253] should_failslab+0xa8/0x100 [ 107.656151][ T6253] __kvmalloc_node_noprof+0x171/0x820 [ 107.656172][ T6253] ? __nf_register_net_hook+0x1f1/0x940 [ 107.656193][ T6253] ? nf_hook_entries_grow+0x287/0x740 [ 107.656211][ T6253] ? nf_hook_entries_grow+0x287/0x740 [ 107.656239][ T6253] nf_hook_entries_grow+0x287/0x740 [ 107.656272][ T6253] __nf_register_net_hook+0x26f/0x940 [ 107.656303][ T6253] nf_register_net_hook+0xb2/0x190 [ 107.656325][ T6253] nf_register_net_hooks+0x44/0x1b0 [ 107.656348][ T6253] nf_ct_netns_do_get+0x212/0x5c0 [ 107.656370][ T6253] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 107.656390][ T6253] ? trace_contention_end+0x3d/0x140 [ 107.656420][ T6253] ? nf_ct_netns_get+0xe9/0x320 [ 107.656442][ T6253] connmark_mt_check+0x53/0xf0 [ 107.656464][ T6253] xt_check_match+0x602/0xce0 [ 107.656497][ T6253] ? __pfx_xt_check_match+0x10/0x10 [ 107.656520][ T6253] ? pcpu_alloc_noprof+0x1036/0x1900 [ 107.656551][ T6253] ? xt_find_match+0x213/0x260 [ 107.656583][ T6253] translate_table+0x160e/0x2110 [ 107.656615][ T6253] ? __lock_acquire+0x747/0x2de0 [ 107.656661][ T6253] ? __pfx_translate_table+0x10/0x10 [ 107.656681][ T6253] ? lock_acquire+0x115/0x350 [ 107.656720][ T6253] ? __might_fault+0xaf/0x130 [ 107.656746][ T6253] ? _copy_from_user+0x94/0xb0 [ 107.656771][ T6253] do_ip6t_set_ctl+0xa5c/0xe30 [ 107.656798][ T6253] ? rcu_is_watching+0x16/0xb0 [ 107.656817][ T6253] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 107.656851][ T6253] ? __mutex_unlock_slowpath+0x731/0x900 [ 107.656877][ T6253] ? __raw_spin_lock_init+0x45/0x100 [ 107.656893][ T6253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.656921][ T6253] ? do_futex+0x458/0x4e0 [ 107.656940][ T6253] ? __asan_memcpy+0x40/0x70 [ 107.656959][ T6253] nf_setsockopt+0x26f/0x290 [ 107.656986][ T6253] rawv6_setsockopt+0x276/0x5e0 [ 107.657006][ T6253] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 107.657028][ T6253] ? sock_common_setsockopt+0x36/0xc0 [ 107.657046][ T6253] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.657070][ T6253] do_sock_setsockopt+0x17c/0x1b0 [ 107.657096][ T6253] __x64_sys_setsockopt+0x13d/0x1b0 [ 107.657122][ T6253] do_syscall_64+0x166/0x520 [ 107.657138][ T6253] ? trace_irq_disable+0x3b/0x140 [ 107.657154][ T6253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.657173][ T6253] ? clear_bhb_loop+0x70/0xc0 [ 107.657196][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.657214][ T6253] RIP: 0033:0x7fdc80d9e1d9 [ 107.657235][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.657251][ T6253] RSP: 002b:00007fdc7eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.657275][ T6253] RAX: ffffffffffffffda RBX: 00007fdc81025fa0 RCX: 00007fdc80d9e1d9 [ 107.657289][ T6253] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 107.657302][ T6253] RBP: 00007fdc80e35888 R08: 00000000000006d0 R09: 0000000000000000 [ 107.657314][ T6253] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 107.657326][ T6253] R13: 00007fdc81026038 R14: 00007fdc81025fa0 R15: 00007ffdf602f068 [ 107.657360][ T6253] [ 107.664488][ T6253] cannot load conntrack support for proto=10 [ 107.849984][ T6257] loop1: detected capacity change from 0 to 512 [ 107.924736][ T6257] syz.1.121: attempt to access beyond end of device [ 107.924736][ T6257] loop1: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 107.938156][ T6257] syz.1.121: attempt to access beyond end of device [ 107.938156][ T6257] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 107.961372][ T33] audit: type=1800 audit(1791553799.628:7): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.121" name="file2" dev="loop1" ino=4 res=0 errno=-5 [ 107.999356][ T6259] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 108.150496][ T27] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 8e:cf:3b:cd:d2:1c [ 108.181166][ T27] usb 1-1: USB disconnect, device number 2 [ 108.233047][ T27] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 108.276405][ T6262] FAULT_INJECTION: forcing a failure. [ 108.276405][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 108.276447][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(full) [ 108.276476][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.276488][ T6262] Call Trace: [ 108.276497][ T6262] [ 108.276507][ T6262] dump_stack_lvl+0xe8/0x150 [ 108.276538][ T6262] should_fail_ex+0x3eb/0x540 [ 108.276567][ T6262] should_failslab+0xa8/0x100 [ 108.276593][ T6262] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 108.276616][ T6262] ? media_pipeline_add_pad+0x297/0x760 [ 108.276636][ T6262] ? media_pipeline_add_pad+0x297/0x760 [ 108.276660][ T6262] ? media_pipeline_add_pad+0x297/0x760 [ 108.276682][ T6262] krealloc_node_align_noprof+0x19a/0x390 [ 108.276711][ T6262] media_pipeline_add_pad+0x297/0x760 [ 108.276740][ T6262] __media_pipeline_start+0x1fb/0x2440 [ 108.276790][ T6262] ? __mutex_lock+0x5cd/0x15a0 [ 108.276817][ T6262] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 108.276844][ T6262] media_pipeline_start+0x51/0x70 [ 108.276866][ T6262] vimc_capture_start_streaming+0x7c/0x410 [ 108.276892][ T6262] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 108.276913][ T6262] vb2_start_streaming+0x11e/0x450 [ 108.276930][ T6262] ? __bitmap_weight+0xac/0x100 [ 108.276952][ T6262] vb2_core_streamon+0x2c0/0x4d0 [ 108.276973][ T6262] __video_do_ioctl+0x8af/0xc70 [ 108.277004][ T6262] ? __pfx___video_do_ioctl+0x10/0x10 [ 108.277029][ T6262] ? __might_fault+0xaf/0x130 [ 108.277061][ T6262] video_usercopy+0x860/0x1430 [ 108.277162][ T6262] ? __pfx___video_do_ioctl+0x10/0x10 [ 108.277202][ T6262] ? __pfx_video_usercopy+0x10/0x10 [ 108.277288][ T6262] ? __fget_files+0x2a/0x420 [ 108.277310][ T6262] ? __fget_files+0x2a/0x420 [ 108.277334][ T6262] v4l2_ioctl+0x18d/0x1e0 [ 108.277370][ T6262] ? __pfx_v4l2_ioctl+0x10/0x10 [ 108.277390][ T6262] __se_sys_ioctl+0xfc/0x170 [ 108.277414][ T6262] do_syscall_64+0x166/0x520 [ 108.277446][ T6262] ? trace_irq_disable+0x3b/0x140 [ 108.277470][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.277492][ T6262] ? clear_bhb_loop+0x70/0xc0 [ 108.277516][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.277539][ T6262] RIP: 0033:0x7fdc80d9e1d9 [ 108.277562][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.277580][ T6262] RSP: 002b:00007fdc7efd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.277603][ T6262] RAX: ffffffffffffffda RBX: 00007fdc81026090 RCX: 00007fdc80d9e1d9 [ 108.277619][ T6262] RDX: 0000200000000700 RSI: 0000000040045612 RDI: 0000000000000004 [ 108.277633][ T6262] RBP: 00007fdc80e35888 R08: 0000000000000000 R09: 0000000000000000 [ 108.277645][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.277657][ T6262] R13: 00007fdc81026128 R14: 00007fdc81026090 R15: 00007ffdf602f068 [ 108.277700][ T6262] [ 108.305340][ T6259] syz_tun: entered promiscuous mode [ 108.697927][ T27] wwan wwan0: port wwan0qmi0 disconnected [ 108.874638][ T6279] loop3: detected capacity change from 0 to 512 [ 108.912682][ T6279] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 108.912812][ T6279] System zones: 0-7 [ 108.918534][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.042239][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.042990][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.267842][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.379237][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.409624][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.984215][ T51] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.984272][ T51] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.984304][ T51] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.984336][ T51] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.877884][ T6317] loop0: detected capacity change from 0 to 512 [ 111.007393][ T6317] syz.0.136: attempt to access beyond end of device [ 111.007393][ T6317] loop0: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 111.010527][ T6317] syz.0.136: attempt to access beyond end of device [ 111.010527][ T6317] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 111.011083][ T33] audit: type=1800 audit(1791553802.698:8): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="file2" dev="loop0" ino=5 res=0 errno=-5 [ 111.538150][ T6326] FAULT_INJECTION: forcing a failure. [ 111.538150][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 111.538184][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) [ 111.538206][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.538218][ T6326] Call Trace: [ 111.538226][ T6326] [ 111.538236][ T6326] dump_stack_lvl+0xe8/0x150 [ 111.538266][ T6326] should_fail_ex+0x3eb/0x540 [ 111.538294][ T6326] should_failslab+0xa8/0x100 [ 111.538317][ T6326] __kmalloc_cache_noprof+0x9e/0x600 [ 111.538335][ T6326] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.538355][ T6326] ? qdisc_alloc+0x6cf/0x9d0 [ 111.538377][ T6326] ? tcf_block_get_ext+0x2b4/0x17d0 [ 111.538396][ T6326] ? tcf_block_get_ext+0x2b4/0x17d0 [ 111.538415][ T6326] ? netlink_sendmsg+0x7c3/0xae0 [ 111.538440][ T6326] tcf_block_get_ext+0x2b4/0x17d0 [ 111.538473][ T6326] tcf_block_get+0x67/0xa0 [ 111.538491][ T6326] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 111.538532][ T6326] drr_init_qdisc+0x2e/0xd0 [ 111.538551][ T6326] ? __pfx_drr_init_qdisc+0x10/0x10 [ 111.538572][ T6326] qdisc_create+0xc23/0x1450 [ 111.538592][ T6326] ? lockdep_rtnl_is_held+0x26/0x40 [ 111.538606][ T6326] ? qdisc_lookup+0x364/0x6c0 [ 111.538625][ T6326] tc_modify_qdisc+0x17af/0x2390 [ 111.538659][ T6326] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 111.538680][ T6326] ? __pfx_hook_capable+0x10/0x10 [ 111.538730][ T6326] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 111.538751][ T6326] rtnetlink_rcv_msg+0x7b9/0xc00 [ 111.538776][ T6326] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 111.538795][ T6326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.538818][ T6326] ? __copy_skb_header+0xa3/0x4a0 [ 111.538838][ T6326] ? __asan_memcpy+0x40/0x70 [ 111.538865][ T6326] netlink_rcv_skb+0x226/0x4a0 [ 111.538886][ T6326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.538907][ T6326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.538940][ T6326] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.538961][ T6326] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.538983][ T6326] netlink_unicast+0x7bd/0x940 [ 111.539016][ T6326] netlink_sendmsg+0x7c3/0xae0 [ 111.539043][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.539070][ T6326] ? apparmor_socket_sendmsg+0x18b/0x360 [ 111.539104][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.539122][ T6326] sock_sendmsg_nosec+0x14e/0x190 [ 111.539148][ T6326] ____sys_sendmsg+0x54e/0x850 [ 111.539176][ T6326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.539207][ T6326] ? import_iovec+0x73/0xa0 [ 111.539232][ T6326] ___sys_sendmsg+0x2a5/0x360 [ 111.539250][ T6326] ? __lock_acquire+0x747/0x2de0 [ 111.539277][ T6326] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.539302][ T6326] ? futex_wake+0x51b/0x5f0 [ 111.539358][ T6326] ? __fget_files+0x3a2/0x420 [ 111.539377][ T6326] ? __fget_files+0x2a/0x420 [ 111.539406][ T6326] __x64_sys_sendmsg+0x1b1/0x290 [ 111.539431][ T6326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.539476][ T6326] do_syscall_64+0x166/0x520 [ 111.539498][ T6326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.539518][ T6326] ? clear_bhb_loop+0x70/0xc0 [ 111.539541][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.539561][ T6326] RIP: 0033:0x7fb21179e1d9 [ 111.539581][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.539597][ T6326] RSP: 002b:00007fb2125fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.539621][ T6326] RAX: ffffffffffffffda RBX: 00007fb211a25fa0 RCX: 00007fb21179e1d9 [ 111.539636][ T6326] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000004 [ 111.539710][ T6326] RBP: 00007fb211835888 R08: 0000000000000000 R09: 0000000000000000 [ 111.539737][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.539749][ T6326] R13: 00007fb211a26038 R14: 00007fb211a25fa0 R15: 00007ffc51b18e58 [ 111.539781][ T6326] [ 111.811336][ T6328] loop0: detected capacity change from 0 to 32768 [ 113.156455][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 113.792276][ T5724] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.952401][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 113.953178][ T5724] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 113.957610][ T5724] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.957643][ T5724] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.957661][ T5724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.957738][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.957758][ T5724] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.957780][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.957821][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.130815][ T5724] usb 5-1: config 0 descriptor?? [ 114.255143][ T6345] FAULT_INJECTION: forcing a failure. [ 114.255143][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 114.255204][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 114.255226][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.255235][ T6345] Call Trace: [ 114.255244][ T6345] [ 114.255253][ T6345] dump_stack_lvl+0xe8/0x150 [ 114.255282][ T6345] should_fail_ex+0x3eb/0x540 [ 114.255313][ T6345] should_failslab+0xa8/0x100 [ 114.255337][ T6345] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 114.255360][ T6345] ? media_pipeline_add_pad+0x297/0x760 [ 114.255380][ T6345] ? media_pipeline_add_pad+0x297/0x760 [ 114.255403][ T6345] ? media_pipeline_add_pad+0x297/0x760 [ 114.255425][ T6345] krealloc_node_align_noprof+0x19a/0x390 [ 114.255453][ T6345] media_pipeline_add_pad+0x297/0x760 [ 114.255480][ T6345] __media_pipeline_start+0x1fb/0x2440 [ 114.255521][ T6345] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 114.255545][ T6345] media_pipeline_start+0x51/0x70 [ 114.255575][ T6345] vimc_capture_start_streaming+0x7c/0x410 [ 114.255600][ T6345] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 114.255623][ T6345] vb2_start_streaming+0x11e/0x450 [ 114.255642][ T6345] ? __bitmap_weight+0xac/0x100 [ 114.255667][ T6345] vb2_core_streamon+0x2c0/0x4d0 [ 114.255692][ T6345] __video_do_ioctl+0x8af/0xc70 [ 114.255724][ T6345] ? __pfx___video_do_ioctl+0x10/0x10 [ 114.255749][ T6345] ? __might_fault+0xaf/0x130 [ 114.255777][ T6345] video_usercopy+0x860/0x1430 [ 114.255805][ T6345] ? __pfx___video_do_ioctl+0x10/0x10 [ 114.255828][ T6345] ? __pfx_video_usercopy+0x10/0x10 [ 114.255869][ T6345] ? security_file_ioctl+0x19/0x2a0 [ 114.255892][ T6345] v4l2_ioctl+0x18d/0x1e0 [ 114.255914][ T6345] ? __pfx_v4l2_ioctl+0x10/0x10 [ 114.255934][ T6345] __se_sys_ioctl+0xfc/0x170 [ 114.255957][ T6345] do_syscall_64+0x166/0x520 [ 114.255978][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.255999][ T6345] ? clear_bhb_loop+0x70/0xc0 [ 114.256022][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.256043][ T6345] RIP: 0033:0x7fb21179e1d9 [ 114.256062][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.256080][ T6345] RSP: 002b:00007fb2125fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.256103][ T6345] RAX: ffffffffffffffda RBX: 00007fb211a25fa0 RCX: 00007fb21179e1d9 [ 114.256118][ T6345] RDX: 0000200000000700 RSI: 0000000040045612 RDI: 0000000000000004 [ 114.256131][ T6345] RBP: 00007fb211835888 R08: 0000000000000000 R09: 0000000000000000 [ 114.256142][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.256154][ T6345] R13: 00007fb211a26038 R14: 00007fb211a25fa0 R15: 00007ffc51b18e58 [ 114.256190][ T6345] [ 114.343297][ T6348] loop0: detected capacity change from 0 to 8 [ 114.472072][ T5702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.792865][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 114.800633][ T5702] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 114.823239][ T5702] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.823269][ T5702] usb 3-1: config 0 has no interface number 0 [ 114.827517][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.827905][ T5702] usb 3-1: Product: syz [ 114.827924][ T5702] usb 3-1: Manufacturer: syz [ 114.827938][ T5702] usb 3-1: SerialNumber: syz [ 115.054462][ T5702] usb 3-1: config 0 descriptor?? [ 115.197880][ T5702] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.197912][ T5702] usb 3-1: selecting invalid altsetting 1 [ 115.197928][ T5702] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.279082][ T5724] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.283321][ T5724] usb 5-1: USB disconnect, device number 2 [ 115.369809][ T6348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.392294][ T6348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.400312][ T5702] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.400787][ T5702] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.400843][ T5702] usb 3-1: media controller created [ 115.456321][ T5724] usblp0: removed [ 115.508380][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.602877][ T6348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.631351][ T6348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.631489][ T6348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.655836][ T6348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.698780][ T6348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.699065][ T6348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.723348][ T6348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.728755][ T6348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.728909][ T6348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.762566][ T6348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.789018][ T6348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.789128][ T6348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.812610][ T6348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.899136][ T5702] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 115.899225][ T5702] zl10353_read_register: readreg error (reg=127, ret==-71) [ 115.900024][ T5702] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 115.905684][ T5724] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.019796][ T5702] usb 3-1: USB disconnect, device number 2 [ 116.062756][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 116.066614][ T5724] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 116.073233][ T5724] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.073261][ T5724] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.073279][ T5724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.073321][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.073340][ T5724] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.073360][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.073398][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.092932][ T5724] usb 5-1: config 0 descriptor?? [ 116.308878][ T5724] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.668612][ T6389] loop3: detected capacity change from 0 to 512 [ 116.689839][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.771449][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.807344][ T6389] syz.3.153: attempt to access beyond end of device [ 116.807344][ T6389] loop3: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 116.808856][ T6389] syz.3.153: attempt to access beyond end of device [ 116.808856][ T6389] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 116.809071][ T33] audit: type=1800 audit(1791553808.498:9): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.153" name="file2" dev="loop3" ino=6 res=0 errno=-5 [ 116.934468][ T6396] erspan0: entered promiscuous mode [ 116.970746][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 116.986537][ T10] usb 5-1: USB disconnect, device number 3 [ 117.052078][ T10] usblp0: removed [ 117.372288][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.604032][ T6405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.702309][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.772451][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.772514][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.852806][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.541676][ T33] audit: type=1326 audit(1791553810.228:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.1.156" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21179e1d9 code=0x0 [ 118.604431][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.607029][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.630630][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.707880][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.711472][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.738254][ T6410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.738283][ T6410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.769747][ T6410] veth1_vlan: left promiscuous mode [ 118.771465][ T6410] veth0_vlan: left promiscuous mode [ 118.788633][ T6410] veth0_vlan: entered promiscuous mode [ 118.808422][ T6410] veth1_vlan: entered promiscuous mode [ 118.839661][ T6410] veth1_macvtap: left promiscuous mode [ 118.840472][ T6410] veth0_macvtap: left promiscuous mode [ 118.858924][ T6410] veth0_macvtap: entered promiscuous mode [ 118.872675][ T6410] veth1_macvtap: entered promiscuous mode [ 118.928494][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.929337][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.951305][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.962647][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.037953][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.038078][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.067253][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.067369][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.313513][ T6371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.313580][ T6371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.313614][ T6371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.313648][ T6371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.422397][ T6412] loop4: detected capacity change from 0 to 32768 [ 119.423830][ T6412] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 119.424534][ T6412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.158 (6412) [ 119.452346][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.471319][ T6412] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.471356][ T6412] BTRFS info (device loop4): using sha256 checksum algorithm [ 119.575719][ T6412] BTRFS info (device loop4): rebuilding free space tree [ 119.773221][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.815710][ T6412] BTRFS info (device loop4): disabling free space tree [ 119.815804][ T6412] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.815827][ T6412] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.852630][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.852670][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.921162][ T6412] BTRFS info (device loop4): enabling ssd optimizations [ 119.921191][ T6412] BTRFS info (device loop4): force clearing of disk cache [ 119.921208][ T6412] BTRFS info (device loop4): enabling auto defrag [ 119.921223][ T6412] BTRFS info (device loop4): max_inline set to 0 [ 119.937274][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.235704][ T33] audit: type=1800 audit(1791553811.928:11): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.158" name="bus" dev="loop4" ino=263 res=0 errno=-22 [ 120.391597][ T33] audit: type=1800 audit(1791553812.078:12): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.158" name="bus" dev="loop4" ino=263 res=0 errno=-22 [ 120.839175][ T6447] FAULT_INJECTION: forcing a failure. [ 120.839175][ T6447] name failslab, interval 1, probability 0, space 0, times 0 [ 120.839206][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: syz.2.165 Not tainted syzkaller #0 PREEMPT(full) [ 120.839228][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.839240][ T6447] Call Trace: [ 120.839247][ T6447] [ 120.839255][ T6447] dump_stack_lvl+0xe8/0x150 [ 120.839282][ T6447] should_fail_ex+0x3eb/0x540 [ 120.839307][ T6447] should_failslab+0xa8/0x100 [ 120.839329][ T6447] __kmalloc_cache_noprof+0x9e/0x600 [ 120.839348][ T6447] ? p9_client_create+0xbc/0xc60 [ 120.839365][ T6447] ? p9_client_create+0xbc/0xc60 [ 120.839388][ T6447] p9_client_create+0xbc/0xc60 [ 120.839411][ T6447] ? __pfx_p9_client_create+0x10/0x10 [ 120.839451][ T6447] v9fs_session_init+0x46/0xd40 [ 120.839467][ T6447] ? __kmalloc_cache_noprof+0x148/0x600 [ 120.839483][ T6447] ? v9fs_get_tree+0xaa/0xac0 [ 120.839498][ T6447] ? v9fs_get_tree+0xaa/0xac0 [ 120.839523][ T6447] v9fs_get_tree+0xbd/0xac0 [ 120.839541][ T6447] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 120.839563][ T6447] ? __pfx_v9fs_get_tree+0x10/0x10 [ 120.839593][ T6447] vfs_get_tree+0x92/0x2a0 [ 120.839613][ T6447] do_new_mount+0x325/0xb00 [ 120.839637][ T6447] ? __pfx_do_new_mount+0x10/0x10 [ 120.839658][ T6447] ? ns_capable+0x84/0xe0 [ 120.839677][ T6447] ? path_mount+0x647/0x1050 [ 120.839699][ T6447] ? user_path_at+0xd4/0x160 [ 120.839722][ T6447] __se_sys_mount+0x31d/0x420 [ 120.839746][ T6447] ? __pfx___se_sys_mount+0x10/0x10 [ 120.839773][ T6447] ? __x64_sys_mount+0x20/0xc0 [ 120.839794][ T6447] do_syscall_64+0x166/0x520 [ 120.839813][ T6447] ? trace_irq_disable+0x3b/0x140 [ 120.839831][ T6447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.839852][ T6447] ? clear_bhb_loop+0x70/0xc0 [ 120.839873][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.839892][ T6447] RIP: 0033:0x7f17afb9e1d9 [ 120.839924][ T6447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.839939][ T6447] RSP: 002b:00007f17b0ab5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.839961][ T6447] RAX: ffffffffffffffda RBX: 00007f17afe25fa0 RCX: 00007f17afb9e1d9 [ 120.839975][ T6447] RDX: 00002000000000c0 RSI: 0000200000000200 RDI: 0000000000000000 [ 120.839987][ T6447] RBP: 00007f17afc35888 R08: 0000200000000300 R09: 0000000000000000 [ 120.840000][ T6447] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 120.840011][ T6447] R13: 00007f17afe26038 R14: 00007f17afe25fa0 R15: 00007ffe3ca29fb8 [ 120.840045][ T6447] [ 121.151697][ T6449] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 121.173228][ T5613] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.218550][ T6371] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 121.356063][ T33] audit: type=1804 audit(1791553813.038:13): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.168" name="/newroot/35/file0" dev="tmpfs" ino=209 res=1 errno=0 [ 121.412849][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 121.532380][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.535856][ T6455] bond1: entered promiscuous mode [ 121.536332][ T6455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.757292][ T6455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.757745][ T6455] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 121.760550][ T6455] bond1: (slave sit1): Error -95 calling set_mac_address [ 121.852854][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.870674][ T6454] loop1: detected capacity change from 0 to 32768 [ 121.875807][ T6466] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 121.932263][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.932318][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.013171][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.072408][ T5724] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.223357][ T5724] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.228949][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.229011][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.265820][ T5724] usb 1-1: config 0 descriptor?? [ 122.283960][ T5724] pwc: Askey VC010 type 2 USB webcam detected. [ 122.574262][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.691279][ T5724] pwc: recv_control_msg error -32 req 02 val 2b00 [ 122.700158][ T5724] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.700954][ T5724] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.701592][ T5724] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.717936][ T6483] FAULT_INJECTION: forcing a failure. [ 122.717936][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 122.717974][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT(full) [ 122.717997][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.718009][ T6483] Call Trace: [ 122.718017][ T6483] [ 122.718027][ T6483] dump_stack_lvl+0xe8/0x150 [ 122.718058][ T6483] should_fail_ex+0x3eb/0x540 [ 122.718086][ T6483] should_failslab+0xa8/0x100 [ 122.718110][ T6483] __kmalloc_noprof+0xf9/0x710 [ 122.718131][ T6483] ? hash_netport4_add+0x2397/0x2f70 [ 122.718150][ T6483] ? hash_netport4_add+0x2397/0x2f70 [ 122.718179][ T6483] hash_netport4_add+0x2397/0x2f70 [ 122.718236][ T6483] hash_netport4_uadt+0xbf0/0xfa0 [ 122.718263][ T6483] ? __pfx_hash_netport4_add+0x10/0x10 [ 122.718283][ T6483] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 122.718313][ T6483] ? call_ad+0x2ba/0xb50 [ 122.718330][ T6483] ? __local_bh_enable_ip+0xd6/0x140 [ 122.718361][ T6483] call_ad+0x360/0xb50 [ 122.718379][ T6483] ? __lock_acquire+0x747/0x2de0 [ 122.718403][ T6483] ? __pfx_call_ad+0x10/0x10 [ 122.718437][ T6483] ? __nla_parse+0x40/0x60 [ 122.718459][ T6483] ip_set_ad+0x82a/0x9d0 [ 122.718486][ T6483] ? __pfx_ip_set_ad+0x10/0x10 [ 122.718502][ T6483] ? __mutex_lock+0x305/0x15a0 [ 122.718560][ T6483] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 122.718580][ T6483] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 122.718617][ T6483] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.718672][ T6483] ? hook_capable+0x24b/0x7b0 [ 122.718701][ T6483] netlink_rcv_skb+0x226/0x4a0 [ 122.718721][ T6483] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.718741][ T6483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.718776][ T6483] ? bpf_lsm_capable+0x9/0x20 [ 122.718792][ T6483] ? security_capable+0x7e/0x2c0 [ 122.718818][ T6483] nfnetlink_rcv+0x2b9/0x28c0 [ 122.718843][ T6483] ? __dev_queue_xmit+0x29b/0x3920 [ 122.718864][ T6483] ? __local_bh_enable_ip+0xd6/0x140 [ 122.718882][ T6483] ? lockdep_hardirqs_on+0x7b/0x110 [ 122.718899][ T6483] ? __dev_queue_xmit+0x29b/0x3920 [ 122.718917][ T6483] ? __local_bh_enable_ip+0xd6/0x140 [ 122.718933][ T6483] ? __dev_queue_xmit+0x29b/0x3920 [ 122.718949][ T6483] ? __dev_queue_xmit+0x1efb/0x3920 [ 122.718970][ T6483] ? __dev_queue_xmit+0x29b/0x3920 [ 122.718993][ T6483] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 122.719022][ T6483] ? __pfx___dev_queue_xmit+0x10/0x10 [ 122.719049][ T6483] ? __copy_skb_header+0xa3/0x4a0 [ 122.719068][ T6483] ? __asan_memcpy+0x40/0x70 [ 122.719085][ T6483] ? __skb_clone+0x5c/0x6c0 [ 122.719107][ T6483] ? __skb_clone+0x449/0x6c0 [ 122.719130][ T6483] ? skb_clone+0x246/0x3a0 [ 122.719151][ T6483] ? __netlink_deliver_tap+0x681/0x6e0 [ 122.719167][ T6483] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.719192][ T6483] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.719208][ T6483] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.719231][ T6483] netlink_unicast+0x7bd/0x940 [ 122.719262][ T6483] netlink_sendmsg+0x7c3/0xae0 [ 122.719286][ T6483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.719313][ T6483] ? apparmor_socket_sendmsg+0x98/0x360 [ 122.719334][ T6483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.719359][ T6483] sock_sendmsg_nosec+0x14e/0x190 [ 122.719381][ T6483] ____sys_sendmsg+0x54e/0x850 [ 122.719405][ T6483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.719433][ T6483] ? import_iovec+0x73/0xa0 [ 122.719454][ T6483] ___sys_sendmsg+0x2a5/0x360 [ 122.719470][ T6483] ? __lock_acquire+0x747/0x2de0 [ 122.719492][ T6483] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.719514][ T6483] ? futex_wait+0x2a2/0x390 [ 122.719564][ T6483] ? __fget_files+0x3a2/0x420 [ 122.719581][ T6483] ? __fget_files+0x2a/0x420 [ 122.719610][ T6483] __x64_sys_sendmsg+0x1b1/0x290 [ 122.719631][ T6483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.719672][ T6483] do_syscall_64+0x166/0x520 [ 122.719688][ T6483] ? trace_irq_disable+0x3b/0x140 [ 122.719704][ T6483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.719722][ T6483] ? clear_bhb_loop+0x70/0xc0 [ 122.719742][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.719760][ T6483] RIP: 0033:0x7fb21179e1d9 [ 122.719779][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.719794][ T6483] RSP: 002b:00007fb2125fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.719815][ T6483] RAX: ffffffffffffffda RBX: 00007fb211a25fa0 RCX: 00007fb21179e1d9 [ 122.719827][ T6483] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 122.719839][ T6483] RBP: 00007fb211835888 R08: 0000000000000000 R09: 0000000000000000 [ 122.719850][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.719861][ T6483] R13: 00007fb211a26038 R14: 00007fb211a25fa0 R15: 00007ffc51b18e58 [ 122.719893][ T6483] [ 122.738509][ T5724] pwc: recv_control_msg error -32 req 04 val 1300 [ 122.742919][ T5724] pwc: recv_control_msg error -32 req 04 val 1400 [ 122.753715][ T5776] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 122.754942][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.754968][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.755028][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.759527][ T5776] usb 3-1: config 0 descriptor?? [ 122.885537][ T6486] ------------[ cut here ]------------ [ 122.885554][ T6486] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 122.885569][ T6486] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#0: syz.4.181/6486 [ 123.234552][ T6494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.305788][ T6486] Modules linked in: [ 123.309739][ T6486] CPU: 0 UID: 0 PID: 6486 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) [ 123.319048][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.329245][ T6486] RIP: 0010:__fortify_report+0x89/0xa0 [ 123.334925][ T6486] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 123.354654][ T6486] RSP: 0018:ffffc90003507dc8 EFLAGS: 00010246 [ 123.354972][ T33] audit: type=1326 audit(1791553815.048:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.3.183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc80d9e1d9 code=0x0 [ 123.387362][ T6486] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 123.396054][ T6486] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 123.404414][ T6486] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff110047d91b1 [ 123.412586][ T6486] R10: dffffc0000000000 R11: ffffed10047d91b2 R12: 0000000000000000 [ 123.420658][ T6486] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 123.429376][ T6486] FS: 00007efe2140d6c0(0000) GS:ffff888123ab6000(0000) knlGS:0000000000000000 [ 123.438593][ T6486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.445284][ T6486] CR2: 00005555632e9a48 CR3: 000000007a52e000 CR4: 00000000003526f0 [ 123.455223][ T6486] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 123.464114][ T6486] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 123.472392][ T6486] Call Trace: [ 123.475808][ T6486] [ 123.478974][ T6486] __fortify_panic+0x9/0x10 [ 123.483714][ T6486] landlock_merge_ruleset+0xc46/0xc90 [ 123.489428][ T6486] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 123.495702][ T6486] do_syscall_64+0x166/0x520 [ 123.500347][ T6486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.506940][ T6486] ? clear_bhb_loop+0x70/0xc0 [ 123.511687][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.517970][ T6486] RIP: 0033:0x7efe2059e1d9 [ 123.522481][ T6486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.543355][ T6486] RSP: 002b:00007efe2140d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 123.552206][ T6486] RAX: ffffffffffffffda RBX: 00007efe20825fa0 RCX: 00007efe2059e1d9 [ 123.560326][ T6486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 123.568962][ T6486] RBP: 00007efe20635888 R08: 0000000000000000 R09: 0000000000000000 [ 123.577295][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.585869][ T6486] R13: 00007efe20826038 R14: 00007efe20825fa0 R15: 00007ffd5bbc5398 [ 123.594049][ T6486] [ 123.597110][ T6486] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.604545][ T6486] CPU: 0 UID: 0 PID: 6486 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) [ 123.613801][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.624680][ T6486] Call Trace: [ 123.628126][ T6486] [ 123.631191][ T6486] vpanic+0x26f/0x710 [ 123.635220][ T6486] panic+0xc5/0xd0 [ 123.638955][ T6486] ? __pfx_panic+0x10/0x10 [ 123.643398][ T6486] __warn+0x315/0x4c0 [ 123.647471][ T6486] ? __fortify_report+0x6b/0xa0 [ 123.652514][ T6486] ? __fortify_report+0x6b/0xa0 [ 123.657996][ T6486] __report_bug+0x276/0x570 [ 123.662525][ T6486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.668902][ T6486] ? __fortify_report+0x6b/0xa0 [ 123.673981][ T6486] ? __pfx___report_bug+0x10/0x10 [ 123.679284][ T6486] ? __fortify_report+0x8e/0xa0 [ 123.684970][ T6486] report_bug_entry+0x19b/0x290 [ 123.690105][ T6486] ? __fortify_report+0x89/0xa0 [ 123.695097][ T6486] ? __fortify_report+0x8e/0xa0 [ 123.700161][ T6486] handle_bug+0xce/0x200 [ 123.704454][ T6486] exc_invalid_op+0x1a/0x50 [ 123.709153][ T6486] asm_exc_invalid_op+0x1a/0x20 [ 123.714278][ T6486] RIP: 0010:__fortify_report+0x89/0xa0 [ 123.719748][ T6486] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 123.739752][ T6486] RSP: 0018:ffffc90003507dc8 EFLAGS: 00010246 [ 123.745930][ T6486] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 123.754355][ T6486] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 123.762344][ T6486] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff110047d91b1 [ 123.770332][ T6486] R10: dffffc0000000000 R11: ffffed10047d91b2 R12: 0000000000000000 [ 123.778360][ T6486] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 123.786654][ T6486] ? __fortify_report+0x2c/0xa0 [ 123.791638][ T6486] __fortify_panic+0x9/0x10 [ 123.796420][ T6486] landlock_merge_ruleset+0xc46/0xc90 [ 123.802082][ T6486] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 123.808447][ T6486] do_syscall_64+0x166/0x520 [ 123.813058][ T6486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.819134][ T6486] ? clear_bhb_loop+0x70/0xc0 [ 123.823829][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.829845][ T6486] RIP: 0033:0x7efe2059e1d9 [ 123.834536][ T6486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.854803][ T6486] RSP: 002b:00007efe2140d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 123.863434][ T6486] RAX: ffffffffffffffda RBX: 00007efe20825fa0 RCX: 00007efe2059e1d9 [ 123.871505][ T6486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 123.879483][ T6486] RBP: 00007efe20635888 R08: 0000000000000000 R09: 0000000000000000 [ 123.887644][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.895901][ T6486] R13: 00007efe20826038 R14: 00007efe20825fa0 R15: 00007ffd5bbc5398 [ 123.903998][ T6486] [ 123.907361][ T6486] Kernel Offset: disabled [ 123.911887][ T6486] Rebooting in 86400 seconds..