last executing test programs: 4.483361091s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xe9) 4.300919509s ago: executing program 0 (id=5): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4111) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x2, 0x5, 0x100000001}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write(r2, &(0x7f00000000c0)='\r', 0x1) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x101202, 0x0) write(r5, &(0x7f0000000480)='ipv4\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) 3.991012857s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa8c82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00003b4000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000340)="360f01cbf081329d643e0f01c5660f23630f0f399a0f20d86635200000000f22d8baf80c66b8a0d7a78f66efbafc0cb01beebaf80c66b800eb2d8466efbafc0c66b8ffffffff66ef2e0f01c9baf80c66b8bc16f98a66efbafc0cb80020ef", 0x5e}], 0x1, 0x68, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x2000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) read(r4, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 3.912337354s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r3, r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x2}, 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.173492061s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x43, 0x25, 0x32, 0x20, 0xc45, 0x6253, 0x8225, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x33ea2dbcbb6dcb29, 0x6, "", [{{0x9, 0x4, 0x68, 0xe, 0x0, 0x39, 0xf0, 0xfd, 0x1}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mount(0x0, &(0x7f00000001c0)='root/proc/sys\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat(r2, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/usb/drivers_autoprobe\x00', 0x100, 0x0) read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff6, 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="400c0100000021"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000002c0)=@riscv64_f={0x8020000005000013, &(0x7f0000000280)=0x7fffffff}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="400104000000530dcb36"], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x28, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296"}}, 0xfdef) getdents64(r3, &(0x7f0000000000)=""/256, 0x100) syz_usb_control_io$hid(r0, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.898334899s ago: executing program 0 (id=7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x1, 0x2, 0x2ffc, 0x2000, &(0x7f000000c000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)=@arm64={0x1, 0x4e, 0x4, '\x00', 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0xffffff2a, 0x9, 0x4, 0x0, 0x6, "012f2e20e1430ecd7d6435b5aa19489de4cc57", 0x1, 0x8}) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007060000000000000000f380500028804c000a8045"], 0x6c}}, 0x4000090) r8 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x80, 0xb, 0x10}, 0x18) landlock_restrict_self(r8, 0x3) ppoll(&(0x7f0000000140)=[{r6, 0xa74d}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0xfffffeb2) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d310987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b6c090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520119ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) 2.773056001s ago: executing program 3 (id=8): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44011, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') write(r1, &(0x7f00000008c0)="05010906a1", 0x5) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.212075218s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'team_slave_0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x30, 0x12, 0x7, {0xa, @ether_spec={@empty, @local, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x7, 0x30d, [0x8, 0x1ccb]}, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x24}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2, 0x6}, {0x0, @broadcast, 0x0, 0x3, [0x6, 0x9]}, 0x5, 0x7fffffff}}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'team_slave_0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x30, 0x12, 0x7, {0xa, @ether_spec={@empty, @local, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x7, 0x30d, [0x8, 0x1ccb]}, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x24}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2, 0x6}, {0x0, @broadcast, 0x0, 0x3, [0x6, 0x9]}, 0x5, 0x7fffffff}}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/../file0\x00', 0xd6c80, 0x191) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x10001011, r1, 0x0) mknodat(r1, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) r3 = openat(r1, &(0x7f0000000140)='./proc/../file0\x00', 0x543242, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000600)={0x6, [[0x100, 0x42, 0xe, 0x1, 0x5, 0x8436, 0xdf73, 0x1e000000], [0x8, 0x6, 0xfffffffd, 0xffff, 0x2, 0x8, 0xd], [0x10, 0x10001, 0x3ff, 0x0, 0x1, 0x4, 0x26, 0x6]], '\x00', [{0x3ff, 0x475ff645, 0x0, 0x1, 0x0, 0x1}, {0xfffffff7, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x516, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x1, 0xffffffff, 0x0, 0x0, 0x1}, {0x7, 0xf2, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0x80000001, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x990, 0xf, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x865, 0x1}, {0x50, 0xe5d, 0x0, 0x0, 0x1}, {0x1, 0xbb42, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './proc/../file0\x00'}) write(r3, &(0x7f0000000000)='7', 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0x100001, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) gettid() (async) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) 2.118250175s ago: executing program 3 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00') sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0xc884) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x5, 0x2, "5eb7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f00000022c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x0, @local}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000100)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}}], 0x2, 0x44) syz_usb_control_io$uac3(r6, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) (async) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x4, 0x4) (async) recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r8 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 2.047516291s ago: executing program 2 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002030000004000000008080003400000000d14000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000500)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000300)="450000140000400040063ccd7f0000027f00000130390015000000010000000a5010100071780000", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x15, @loopback}, 0x10) 1.686969936s ago: executing program 2 (id=16): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x40000, 0x21, 0x31}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="0b000000010001", 0x7) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x7ffffffe) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r2, &(0x7f00000057c0)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1, 0x2, 0xffffff00) 1.501246041s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r3, r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x2}, 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) 498.742416ms ago: executing program 1 (id=18): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffa, 0x0) userfaultfd(0x801) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r7], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r8, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r8, 0x5, 0x4) 498.334008ms ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000200)='ocfs2\x00', 0x20600, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r2, 0x15, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x875a8d33276653aa}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000001d80)={0x5, &(0x7f00000004c0), &(0x7f0000001d00)=[{0x8, 0x3b, 0x6, &(0x7f0000000500)=""/59}, {0x8b7, 0x1000, 0x10001, &(0x7f0000000a40)=""/4096}, {0x8, 0xf5, 0x5df, &(0x7f0000001a40)=""/245}, {0x9f, 0xa4, 0x3, &(0x7f0000001b40)=""/164}, {0x20, 0xf5, 0x4, &(0x7f0000001c00)=""/245}]}) r4 = socket(0xa, 0x4, 0xd) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f00000001c0), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000400)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) ftruncate(r4, 0x3) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006000c00030000120800040043000000a8001600a400014020000600fef65cf07db3d1a4693dffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c097a19be6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14ded930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000024fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c", 0xd8}], 0x1}, 0x20000850) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write$FUSE_BMAP(r8, &(0x7f0000002440)={0x18, 0xfffffffffffffff5, 0x0, {0x7ff}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000440)='ceph\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {0x47}}, './dev\x00'}) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x8a, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$packet_int(r9, 0x107, 0x10, &(0x7f0000000380)=0x5, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5401, 0x0) 217.607472ms ago: executing program 2 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x811) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000200)=""/209, 0xd1}], 0x3}, 0x3fffff}], 0x1, 0x2, 0x0) 0s ago: executing program 3 (id=21): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20540, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x4, 0x7bb, 0x8, 0x1}, {0x5, 0x7fffffff, 0x0, 0xffffffffffffe3ed}, {0xff, 0xffffffffffffb940, 0x0, 0x9}], 0x3, 0x20, 0x6, 0xf12}) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x3f31a1e3e4296576, 0x3b, &(0x7f0000000180)="2cc28bbbc4820f331fa68363a33e850f248831b41cf390beec9a7e198cb0a8313e0c1c1d51452515aef679bd797ae2b7d77075b3ad6cb053ed8786"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x2, 0xfffffffffffffffa, 0x835b, 0xfffffffffffffff8, 0x4, 0x3, 0x9, 0x0, 0x7, 0x3, 0x80000001, 0x5, 0x7, 0x5}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000280)={{r4, 0x10000, 0x8, 0x4, 0x6, 0x40, 0x6, 0xfffffffc, 0x2, 0x5, 0x3, 0x3, 0x7f, 0x100000001, 0xc2bc}}) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000001280)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x9cbbcc6e94b6083f}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, 0x1407, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x24000000) readv(r2, &(0x7f0000002980)=[{&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/79, 0x4f}, {&(0x7f00000025c0)=""/239, 0xef}, {&(0x7f00000026c0)=""/168, 0xa8}, {&(0x7f0000002780)=""/4, 0x4}, {&(0x7f00000027c0)=""/148, 0x94}, {&(0x7f0000002880)=""/48, 0x30}, {&(0x7f00000028c0)=""/159, 0x9f}], 0xa) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a80), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xd}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000002b80)) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002c40), r1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x44, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000002dc0), 0x84082, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000002d80), r7) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r7) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000002f40)={&(0x7f0000002e40), 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002f80)={0x4, 0x6, "98beb4", 0x1, 0x81}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x24, r9, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x800) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x38, r9, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000003240)={&(0x7f0000ffe000/0x2000)=nil}) write$rfkill(r1, &(0x7f0000003280)={0x9, 0x5, 0x1}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 82.755756][ T5597] cgroup: Unknown subsys name 'net' [ 82.867833][ T5597] cgroup: Unknown subsys name 'cpuset' [ 82.878193][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.532261][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.663795][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.666894][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.669825][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.671651][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.672622][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.673478][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.681410][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.689799][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.693815][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.714592][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.726575][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.729327][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.730478][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.738530][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.738926][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.741126][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.746848][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.752709][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.754911][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.758067][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.352794][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.352965][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.353115][ T5613] bridge_slave_0: entered allmulticast mode [ 90.360225][ T5613] bridge_slave_0: entered promiscuous mode [ 90.374842][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.374946][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.375085][ T5613] bridge_slave_1: entered allmulticast mode [ 90.376513][ T5613] bridge_slave_1: entered promiscuous mode [ 90.499083][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.544537][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.562835][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.563064][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.567266][ T5614] bridge_slave_0: entered allmulticast mode [ 90.572073][ T5614] bridge_slave_0: entered promiscuous mode [ 90.615031][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.615126][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.615467][ T5614] bridge_slave_1: entered allmulticast mode [ 90.616931][ T5614] bridge_slave_1: entered promiscuous mode [ 90.619195][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.619289][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.619401][ T5612] bridge_slave_0: entered allmulticast mode [ 90.620865][ T5612] bridge_slave_0: entered promiscuous mode [ 90.705591][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.705685][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.705796][ T5612] bridge_slave_1: entered allmulticast mode [ 90.707588][ T5612] bridge_slave_1: entered promiscuous mode [ 90.741236][ T5613] team0: Port device team_slave_0 added [ 90.767028][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.767224][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.767322][ T5611] bridge_slave_0: entered allmulticast mode [ 90.768503][ T5611] bridge_slave_0: entered promiscuous mode [ 90.781415][ T5613] team0: Port device team_slave_1 added [ 90.784595][ T5615] Bluetooth: hci1: command tx timeout [ 90.796359][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.824471][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.824584][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.824725][ T5611] bridge_slave_1: entered allmulticast mode [ 90.826994][ T5611] bridge_slave_1: entered promiscuous mode [ 90.854914][ T5615] Bluetooth: hci2: command tx timeout [ 90.854921][ T5616] Bluetooth: hci0: command tx timeout [ 90.864199][ T5616] Bluetooth: hci3: command tx timeout [ 90.868404][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.896229][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.938261][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.957998][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.958015][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.958043][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.961893][ T5614] team0: Port device team_slave_0 added [ 91.008197][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.012891][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.012936][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.013012][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.022563][ T5614] team0: Port device team_slave_1 added [ 91.072020][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.108078][ T5612] team0: Port device team_slave_0 added [ 91.157813][ T5612] team0: Port device team_slave_1 added [ 91.158649][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.158660][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.158679][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.161747][ T5611] team0: Port device team_slave_0 added [ 91.227383][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.227401][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.227426][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.274979][ T5611] team0: Port device team_slave_1 added [ 91.289354][ T5613] hsr_slave_0: entered promiscuous mode [ 91.290180][ T5613] hsr_slave_1: entered promiscuous mode [ 91.309163][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.309181][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.309204][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.357860][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.357878][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.357904][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.433869][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.433886][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.433909][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.506457][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.506476][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.506504][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.511812][ T5614] hsr_slave_0: entered promiscuous mode [ 91.512756][ T5614] hsr_slave_1: entered promiscuous mode [ 91.515492][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 91.515781][ T5614] Cannot create hsr debugfs directory [ 91.624281][ T5612] hsr_slave_0: entered promiscuous mode [ 91.625464][ T5612] hsr_slave_1: entered promiscuous mode [ 91.626032][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 91.626054][ T5612] Cannot create hsr debugfs directory [ 91.741538][ T5611] hsr_slave_0: entered promiscuous mode [ 91.742340][ T5611] hsr_slave_1: entered promiscuous mode [ 91.742862][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 91.742883][ T5611] Cannot create hsr debugfs directory [ 91.977454][ T9] cfg80211: failed to load regulatory.db [ 92.104596][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.110075][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.111390][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.137149][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.155780][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.159330][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.187033][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.191032][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.264320][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.271280][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.288436][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.301630][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.302639][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.319027][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.329048][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.333599][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.427215][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.431546][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.432439][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.456128][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.457181][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.460755][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.489427][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.495986][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.610130][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.615904][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.634925][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.638888][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.640636][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.647480][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.680898][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.682314][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.697952][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.757467][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.797314][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.797622][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.839891][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.839976][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.848047][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.860580][ T5616] Bluetooth: hci1: command tx timeout [ 92.903984][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.930459][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.933931][ T5615] Bluetooth: hci0: command tx timeout [ 92.933962][ T5615] Bluetooth: hci2: command tx timeout [ 92.934077][ T5616] Bluetooth: hci3: command tx timeout [ 92.986142][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.992285][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.992359][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.028968][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.029041][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.053180][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.053255][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.083787][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.083862][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.147775][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.232292][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.272132][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.272243][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.318750][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.318862][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.103958][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.269392][ T5613] veth0_vlan: entered promiscuous mode [ 94.318212][ T5613] veth1_vlan: entered promiscuous mode [ 94.371831][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.421220][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.493146][ T5613] veth0_macvtap: entered promiscuous mode [ 94.519133][ T5613] veth1_macvtap: entered promiscuous mode [ 94.538480][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.556177][ T5614] veth0_vlan: entered promiscuous mode [ 94.579010][ T5614] veth1_vlan: entered promiscuous mode [ 94.617425][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.639860][ T5612] veth0_vlan: entered promiscuous mode [ 94.656904][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.661174][ T5612] veth1_vlan: entered promiscuous mode [ 94.742607][ T5614] veth0_macvtap: entered promiscuous mode [ 94.772966][ T5614] veth1_macvtap: entered promiscuous mode [ 94.787386][ T5611] veth0_vlan: entered promiscuous mode [ 94.837270][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.838612][ T5612] veth0_macvtap: entered promiscuous mode [ 94.854635][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.856641][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.856762][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.887691][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.889577][ T5611] veth1_vlan: entered promiscuous mode [ 94.934005][ T5616] Bluetooth: hci1: command tx timeout [ 94.934275][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.935824][ T5612] veth1_macvtap: entered promiscuous mode [ 94.968856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.968883][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.016215][ T54] Bluetooth: hci2: command tx timeout [ 95.016251][ T54] Bluetooth: hci0: command tx timeout [ 95.016371][ T5616] Bluetooth: hci3: command tx timeout [ 95.067294][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.083801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.083822][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.112921][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.127862][ T5611] veth0_macvtap: entered promiscuous mode [ 95.168603][ T5611] veth1_macvtap: entered promiscuous mode [ 95.210738][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.213640][ T1009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.217162][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328673][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.384987][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.385007][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.390640][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.467129][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.467152][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.499211][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499262][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499301][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499339][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499377][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499415][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499453][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.591707][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.591729][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.594404][ T161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.594796][ T161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.595415][ T161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.658931][ T5768] nvmet: adding nsid 1 to subsystem testnqn [ 95.716256][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.716589][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.843673][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.843696][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.955559][ T5773] gadgetfs: bound to dummy_udc driver [ 95.977607][ T5773] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.033280][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.033302][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.174750][ T5774] FAULT_INJECTION: forcing a failure. [ 96.174750][ T5774] name failslab, interval 1, probability 0, space 0, times 1 [ 96.174801][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 96.174828][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.174851][ T5774] Call Trace: [ 96.174865][ T5774] [ 96.174876][ T5774] dump_stack_lvl+0xe8/0x150 [ 96.174923][ T5774] should_fail_ex+0x3eb/0x540 [ 96.174954][ T5774] should_failslab+0xa8/0x100 [ 96.174998][ T5774] __kmalloc_cache_noprof+0x9e/0x600 [ 96.175025][ T5774] ? __kmalloc_cache_noprof+0x148/0x600 [ 96.175049][ T5774] ? bfq_cpd_alloc+0x73/0x120 [ 96.175094][ T5774] ? bfq_cpd_alloc+0x73/0x120 [ 96.175129][ T5774] bfq_cpd_alloc+0x73/0x120 [ 96.175158][ T5774] blkcg_css_alloc+0x519/0xa80 [ 96.175199][ T5774] cgroup_apply_control_enable+0x5bb/0xda0 [ 96.175251][ T5774] cgroup_mkdir+0xe66/0x10f0 [ 96.175294][ T5774] ? __pfx_cgroup_mkdir+0x10/0x10 [ 96.175327][ T5774] kernfs_iop_mkdir+0x213/0x360 [ 96.175367][ T5774] vfs_mkdir+0x40e/0x630 [ 96.175407][ T5774] filename_mkdirat+0x285/0x510 [ 96.175437][ T5774] ? __might_fault+0xaf/0x130 [ 96.175478][ T5774] ? __pfx_filename_mkdirat+0x10/0x10 [ 96.175514][ T5774] ? do_getname+0x151/0x250 [ 96.175553][ T5774] __se_sys_mkdirat+0x35/0x150 [ 96.175589][ T5774] do_syscall_64+0x166/0x520 [ 96.175617][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.175642][ T5774] ? clear_bhb_loop+0x70/0xc0 [ 96.175671][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.175695][ T5774] RIP: 0033:0x7fb871b9e159 [ 96.175722][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.175743][ T5774] RSP: 002b:00007fb872b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.175774][ T5774] RAX: ffffffffffffffda RBX: 00007fb871e25fa0 RCX: 00007fb871b9e159 [ 96.175790][ T5774] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 96.175806][ T5774] RBP: 00007fb871c3506b R08: 0000000000000000 R09: 0000000000000000 [ 96.175821][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.175835][ T5774] R13: 00007fb871e26038 R14: 00007fb871e25fa0 R15: 00007fff044c4e78 [ 96.175867][ T5774] [ 96.193757][ T5705] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.194419][ C1] gadgetfs: connected [ 96.194845][ T5705] gadgetfs: disconnected [ 96.513661][ C1] gadgetfs: connected [ 96.514833][ T5705] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 96.520604][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.563296][ C1] gadgetfs: configuration #1 [ 96.596788][ T5705] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 96.709649][ C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 96.759482][ C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 96.867874][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 97.024218][ T5616] Bluetooth: hci1: command tx timeout [ 97.094279][ T5615] Bluetooth: hci0: command tx timeout [ 97.094316][ T5615] Bluetooth: hci2: command tx timeout [ 97.094375][ T5616] Bluetooth: hci3: command tx timeout [ 97.144001][ T5705] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.148415][ T5770] gadgetfs: suspended from state 3 [ 97.148789][ T5770] gadgetfs: disconnected [ 97.153851][ T9] usb 1-1: USB disconnect, device number 2 [ 97.266939][ T5793] mmap: syz.2.9 (5793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.303525][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 97.305018][ T5705] usb 2-1: New USB device found: idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 97.306323][ T5705] usb 2-1: config 139 has an invalid interface number: 104 but max is 0 [ 97.306350][ T5705] usb 2-1: config 139 has no interface number 0 [ 97.306381][ T5705] usb 2-1: config 139 interface 104 has no altsetting 0 [ 97.308900][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.308927][ T5705] usb 2-1: Product: syz [ 97.308945][ T5705] usb 2-1: Manufacturer: syz [ 97.308961][ T5705] usb 2-1: SerialNumber: syz [ 97.390364][ T5795] CIFS: VFS: bad security option: krb5iż [ 97.564505][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.722237][ T5806] XFS (nbd3): SB validate failed with error -5. [ 97.725035][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 97.732851][ T9] usb 1-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.750941][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.750972][ T9] usb 1-1: config 0 has no interface number 0 [ 97.751014][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.785295][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.785327][ T9] usb 1-1: Product: syz [ 97.785351][ T9] usb 1-1: SerialNumber: syz [ 97.788604][ T9] usb 1-1: config 0 descriptor?? [ 97.812479][ T9] cm109 1-1:0.8: invalid payload size 8, expected 4 [ 97.841669][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 97.845809][ T5806] XFS (nbd3): io_pages changed from 0 to 1024, not restoring. [ 97.845946][ T5806] XFS (nbd3): ra_pages changed from 0 to 64, not restoring. [ 97.903718][ T5815] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 98.025779][ T5341] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.032067][ T5787] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 98.081506][ T5705] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 98.158362][ T5822] Bluetooth: MGMT ver 1.23 [ 98.177263][ T5341] usb 4-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 98.179034][ T5341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 17408, setting to 1024 [ 98.179071][ T5341] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 98.182415][ T5341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.182445][ T5341] usb 4-1: Product: syz [ 98.182462][ T5341] usb 4-1: Manufacturer: syz [ 98.182478][ T5341] usb 4-1: SerialNumber: syz [ 98.255372][ T5808] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.259347][ T5341] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 98.294439][ T5341] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 98.294439][ T5341] Please send a copy of this message to and [ 98.358905][ T5826] FAULT_INJECTION: forcing a failure. [ 98.358905][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 98.358942][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 98.358960][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.358970][ T5826] Call Trace: [ 98.358993][ T5826] [ 98.359003][ T5826] dump_stack_lvl+0xe8/0x150 [ 98.359042][ T5826] should_fail_ex+0x3eb/0x540 [ 98.359071][ T5826] should_failslab+0xa8/0x100 [ 98.359105][ T5826] __kmalloc_cache_noprof+0x9e/0x600 [ 98.359125][ T5826] ? percpu_ref_init+0xc5/0x350 [ 98.359171][ T5826] ? percpu_ref_init+0xc5/0x350 [ 98.359212][ T5826] ? __pfx_css_release+0x10/0x10 [ 98.359234][ T5826] percpu_ref_init+0xc5/0x350 [ 98.359268][ T5826] ? init_and_link_css+0x4bd/0x690 [ 98.359287][ T5826] cgroup_apply_control_enable+0x617/0xda0 [ 98.359348][ T5826] cgroup_mkdir+0xe66/0x10f0 [ 98.359388][ T5826] ? __pfx_cgroup_mkdir+0x10/0x10 [ 98.359427][ T5826] kernfs_iop_mkdir+0x213/0x360 [ 98.359469][ T5826] vfs_mkdir+0x40e/0x630 [ 98.359509][ T5826] filename_mkdirat+0x285/0x510 [ 98.359537][ T5826] ? __might_fault+0xaf/0x130 [ 98.359575][ T5826] ? __pfx_filename_mkdirat+0x10/0x10 [ 98.359601][ T5826] ? do_getname+0x151/0x250 [ 98.359655][ T5826] __se_sys_mkdirat+0x35/0x150 [ 98.359689][ T5826] do_syscall_64+0x166/0x520 [ 98.359717][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.359740][ T5826] ? clear_bhb_loop+0x70/0xc0 [ 98.359769][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.359793][ T5826] RIP: 0033:0x7fef9039e159 [ 98.359813][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.359832][ T5826] RSP: 002b:00007fef911a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 98.359857][ T5826] RAX: ffffffffffffffda RBX: 00007fef90625fa0 RCX: 00007fef9039e159 [ 98.359874][ T5826] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 98.359890][ T5826] RBP: 00007fef9043506b R08: 0000000000000000 R09: 0000000000000000 [ 98.359911][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.359925][ T5826] R13: 00007fef90626038 R14: 00007fef90625fa0 R15: 00007fff425feb48 [ 98.359962][ T5826] [ 98.727919][ T5705] gspca_sn9c20x: Write register 1001 failed -71 [ 98.727966][ T5705] gspca_sn9c20x: Device initialization failed [ 98.728047][ T5705] gspca_sn9c20x 2-1:139.104: probe with driver gspca_sn9c20x failed with error -71 [ 98.763570][ T5705] usb 2-1: USB disconnect, device number 2 [ 99.074867][ T5341] scsi host1: usb-storage 4-1:1.0 [ 99.090328][ T5341] usb 4-1: USB disconnect, device number 2 [ 99.350822][ T5836] gadgetfs: bound to dummy_udc driver [ 99.405359][ T5838] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19'. [ 99.405457][ T5838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.406987][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 99.407081][ T5838] bridge_slave_1: left allmulticast mode [ 99.407103][ T5838] bridge_slave_1: left promiscuous mode [ 99.408068][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.474108][ T5838] bridge_slave_0: left allmulticast mode [ 99.474137][ T5838] bridge_slave_0: left promiscuous mode [ 99.475769][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.492746][ T5840] ceph: No source [ 99.607207][ T5690] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.607427][ C0] gadgetfs: connected [ 99.609137][ T5690] gadgetfs: disconnected [ 99.765638][ C0] gadgetfs: connected [ 99.766323][ T5690] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 99.767189][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.809022][ C0] gadgetfs: configuration #1 [ 99.841443][ T5690] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 100.029829][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 100.029894][ C0] ------------[ cut here ]------------ [ 100.029912][ C0] URB ffff8880297f4e00 submitted while active [ 100.029933][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: syz.0.7/5786 [ 100.058386][ C0] Modules linked in: [ 100.062337][ C0] CPU: 0 UID: 0 PID: 5786 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 100.071409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.081506][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 100.087037][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 10 ba fa 49 83 3e 00 74 40 e8 2e 43 48 fa 48 8d 3d c7 61 49 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 13 43 48 fa eb 05 e8 0c 43 [ 100.106680][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010087 [ 100.112792][ C0] RAX: ffffffff8780ee22 RBX: ffff8880297f4e00 RCX: 0000000000040000 [ 100.120811][ C0] RDX: ffffc90002332000 RSI: ffff8880297f4e00 RDI: ffffffff90ca4ff0 [ 100.128826][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 100.136844][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff8880588b1048 [ 100.144863][ C0] R13: ffff8880588b1030 R14: ffff8880297f4e08 R15: 0000000000000820 [ 100.152877][ C0] FS: 0000000000000000(0000) GS:ffff888124623000(0000) knlGS:0000000000000000 [ 100.161845][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.168470][ C0] CR2: 00007fcc4fccd170 CR3: 0000000079e52000 CR4: 00000000003526f0 [ 100.176498][ C0] Call Trace: [ 100.179821][ C0] [ 100.182709][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.188580][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 100.194026][ C0] __usb_hcd_giveback_urb+0x378/0x540 [ 100.199464][ C0] dummy_timer+0xa91/0x4cf0 [ 100.204048][ C0] ? __lock_acquire+0x747/0x2de0 [ 100.209077][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.214535][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 100.219539][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.225397][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 100.230406][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 100.235698][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 100.240871][ C0] handle_softirqs+0x223/0x840 [ 100.245693][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 100.250522][ C0] __irq_exit_rcu+0xcb/0x220 [ 100.255191][ C0] irq_exit_rcu+0x9/0x30 [ 100.260830][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 100.266554][ C0] [ 100.269520][ C0] [ 100.272485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.278518][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 100.284996][ C0] Code: f7 e8 1d 34 a2 f5 f7 c3 00 02 00 00 74 05 e8 d0 c2 ce f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 2d 93 f5 65 48 8b 05 2c 10 dd 07 48 85 c0 74 18 5b 41 5e c3 [ 100.304657][ C0] RSP: 0018:ffffc90004a07668 EFLAGS: 00000206 [ 100.310842][ C0] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 8000000000000001 [ 100.318864][ C0] RDX: 0000000000000006 RSI: ffffffff8e74f1c1 RDI: 0000000000000001 [ 100.326883][ C0] RBP: ffffc90004a07760 R08: ffffffff90bc9ebf R09: 1ffffffff21793d7 [ 100.334948][ C0] R10: dffffc0000000000 R11: fffffbfff21793d8 R12: dffffc0000000000 [ 100.342969][ C0] R13: ffff8880295ecd00 R14: ffffffff8ff20b20 R15: 0000000000000001 [ 100.351005][ C0] usb_hcd_poll_rh_status+0x3e9/0x600 [ 100.356456][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 100.362413][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.368275][ C0] dummy_pullup+0xde/0x120 [ 100.372775][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 100.377861][ C0] usb_gadget_disconnect_locked+0x126/0x480 [ 100.383832][ C0] gadget_unbind_driver+0xc2/0x410 [ 100.389020][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 100.394812][ C0] device_release_driver_internal+0x48b/0x880 [ 100.400951][ C0] driver_detach+0x1f3/0x2d0 [ 100.405616][ C0] bus_remove_driver+0x226/0x320 [ 100.410613][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 100.416485][ C0] raw_release+0xd7/0x260 [ 100.420878][ C0] ? __pfx_raw_release+0x10/0x10 [ 100.425957][ C0] __fput+0x413/0xa50 [ 100.429990][ C0] fput_close_sync+0x11f/0x240 [ 100.434797][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 100.440147][ C0] filp_close_sync+0x6e/0xa0 [ 100.444785][ C0] put_files_struct+0x230/0x3c0 [ 100.449685][ C0] do_exit+0x6f0/0x2380 [ 100.453911][ C0] ? __pfx_do_exit+0x10/0x10 [ 100.458573][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.463676][ C0] do_group_exit+0x22d/0x2f0 [ 100.468336][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.473596][ C0] get_signal+0x1216/0x12c0 [ 100.478181][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 100.483789][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 100.490020][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 100.495448][ C0] ? rcu_is_watching+0x16/0xb0 [ 100.500272][ C0] do_syscall_64+0x328/0x520 [ 100.504919][ C0] ? trace_irq_disable+0x3b/0x140 [ 100.510009][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.516266][ C0] ? clear_bhb_loop+0x70/0xc0 [ 100.521007][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.526961][ C0] RIP: 0033:0x7f56a6f9e159 [ 100.531426][ C0] Code: Unable to access opcode bytes at 0x7f56a6f9e12f. [ 100.538478][ C0] RSP: 002b:00007f56a7dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.546946][ C0] RAX: 0000000000000121 RBX: 00007f56a7225fa0 RCX: 00007f56a6f9e159 [ 100.555144][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 100.563176][ C0] RBP: 00007f56a703506b R08: 0000000000000000 R09: 0000000000000000 [ 100.571194][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.579208][ C0] R13: 00007f56a7226038 R14: 00007f56a7225fa0 R15: 00007ffe31dd2a78 [ 100.587245][ C0] [ 100.590304][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.597625][ C0] CPU: 0 UID: 0 PID: 5786 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 100.606701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.616810][ C0] Call Trace: [ 100.620136][ C0] [ 100.623015][ C0] vpanic+0x26f/0x710 [ 100.627074][ C0] panic+0xc5/0xd0 [ 100.630860][ C0] ? __pfx_panic+0x10/0x10 [ 100.635358][ C0] __warn+0x315/0x4c0 [ 100.639402][ C0] ? usb_submit_urb+0x79/0x18b0 [ 100.644318][ C0] ? usb_submit_urb+0x79/0x18b0 [ 100.649234][ C0] __report_bug+0x276/0x570 [ 100.653798][ C0] ? usb_submit_urb+0x79/0x18b0 [ 100.658711][ C0] ? __pfx___report_bug+0x10/0x10 [ 100.663801][ C0] ? __lock_acquire+0x747/0x2de0 [ 100.668803][ C0] report_bug_entry+0x19b/0x290 [ 100.673706][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 100.678627][ C0] ? usb_submit_urb+0x81/0x18b0 [ 100.683532][ C0] handle_bug+0xce/0x200 [ 100.687842][ C0] exc_invalid_op+0x1a/0x50 [ 100.692377][ C0] asm_exc_invalid_op+0x1a/0x20 [ 100.697261][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 100.702767][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 10 ba fa 49 83 3e 00 74 40 e8 2e 43 48 fa 48 8d 3d c7 61 49 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 13 43 48 fa eb 05 e8 0c 43 [ 100.722404][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010087 [ 100.728564][ C0] RAX: ffffffff8780ee22 RBX: ffff8880297f4e00 RCX: 0000000000040000 [ 100.736586][ C0] RDX: ffffc90002332000 RSI: ffff8880297f4e00 RDI: ffffffff90ca4ff0 [ 100.744599][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 100.752614][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff8880588b1048 [ 100.760645][ C0] R13: ffff8880588b1030 R14: ffff8880297f4e08 R15: 0000000000000820 [ 100.768668][ C0] ? usb_submit_urb+0x72/0x18b0 [ 100.773590][ C0] ? usb_submit_urb+0x72/0x18b0 [ 100.778504][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.784370][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 100.789814][ C0] __usb_hcd_giveback_urb+0x378/0x540 [ 100.795248][ C0] dummy_timer+0xa91/0x4cf0 [ 100.799817][ C0] ? __lock_acquire+0x747/0x2de0 [ 100.804837][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.810278][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 100.815258][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.821108][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 100.826114][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 100.831416][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 100.836575][ C0] handle_softirqs+0x223/0x840 [ 100.841387][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 100.846323][ C0] __irq_exit_rcu+0xcb/0x220 [ 100.850973][ C0] irq_exit_rcu+0x9/0x30 [ 100.855273][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 100.860958][ C0] [ 100.863924][ C0] [ 100.866893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.872906][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 100.879454][ C0] Code: f7 e8 1d 34 a2 f5 f7 c3 00 02 00 00 74 05 e8 d0 c2 ce f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 2d 93 f5 65 48 8b 05 2c 10 dd 07 48 85 c0 74 18 5b 41 5e c3 [ 100.899111][ C0] RSP: 0018:ffffc90004a07668 EFLAGS: 00000206 [ 100.905229][ C0] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 8000000000000001 [ 100.913239][ C0] RDX: 0000000000000006 RSI: ffffffff8e74f1c1 RDI: 0000000000000001 [ 100.921259][ C0] RBP: ffffc90004a07760 R08: ffffffff90bc9ebf R09: 1ffffffff21793d7 [ 100.929278][ C0] R10: dffffc0000000000 R11: fffffbfff21793d8 R12: dffffc0000000000 [ 100.937302][ C0] R13: ffff8880295ecd00 R14: ffffffff8ff20b20 R15: 0000000000000001 [ 100.945353][ C0] usb_hcd_poll_rh_status+0x3e9/0x600 [ 100.950782][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 100.956743][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.962606][ C0] dummy_pullup+0xde/0x120 [ 100.967079][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 100.972163][ C0] usb_gadget_disconnect_locked+0x126/0x480 [ 100.978116][ C0] gadget_unbind_driver+0xc2/0x410 [ 100.983303][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 100.989075][ C0] device_release_driver_internal+0x48b/0x880 [ 100.995213][ C0] driver_detach+0x1f3/0x2d0 [ 100.999879][ C0] bus_remove_driver+0x226/0x320 [ 101.004878][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 101.010665][ C0] raw_release+0xd7/0x260 [ 101.015053][ C0] ? __pfx_raw_release+0x10/0x10 [ 101.020039][ C0] __fput+0x413/0xa50 [ 101.024085][ C0] fput_close_sync+0x11f/0x240 [ 101.028888][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 101.034233][ C0] filp_close_sync+0x6e/0xa0 [ 101.038875][ C0] put_files_struct+0x230/0x3c0 [ 101.043801][ C0] do_exit+0x6f0/0x2380 [ 101.048029][ C0] ? __pfx_do_exit+0x10/0x10 [ 101.052685][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.057768][ C0] do_group_exit+0x22d/0x2f0 [ 101.062413][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.067663][ C0] get_signal+0x1216/0x12c0 [ 101.072235][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 101.077842][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.084081][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 101.089501][ C0] ? rcu_is_watching+0x16/0xb0 [ 101.094330][ C0] do_syscall_64+0x328/0x520 [ 101.098982][ C0] ? trace_irq_disable+0x3b/0x140 [ 101.104070][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.110281][ C0] ? clear_bhb_loop+0x70/0xc0 [ 101.115010][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.120948][ C0] RIP: 0033:0x7f56a6f9e159 [ 101.125410][ C0] Code: Unable to access opcode bytes at 0x7f56a6f9e12f. [ 101.132463][ C0] RSP: 002b:00007f56a7dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.140929][ C0] RAX: 0000000000000121 RBX: 00007f56a7225fa0 RCX: 00007f56a6f9e159 [ 101.148955][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 101.156976][ C0] RBP: 00007f56a703506b R08: 0000000000000000 R09: 0000000000000000 [ 101.165026][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.173045][ C0] R13: 00007f56a7226038 R14: 00007f56a7225fa0 R15: 00007ffe31dd2a78 [ 101.181091][ C0] [ 101.184833][ C0] Kernel Offset: disabled [ 101.189205][ C0] Rebooting in 86400 seconds..