last executing test programs: 24.972408309s ago: executing program 0 (id=1): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000b00)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 24.644011108s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) syz_open_dev$usbfs(0x0, 0x74, 0x160341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r1 = openat$cachefiles(0xffffff9c, 0x0, 0x101002, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) memfd_create(&(0x7f00000002c0)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000500ffffb703000008000000b70400009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000), 0xc) unshare(0x40000000) 23.684697151s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xf0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 20.959038608s ago: executing program 0 (id=22): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x30, 0x200) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e20, 0x1, @local, 0x2}, 0x1c) listen(r5, 0x7c2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 20.893168459s ago: executing program 32 (id=22): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x30, 0x200) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e20, 0x1, @local, 0x2}, 0x1c) listen(r5, 0x7c2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 15.320150145s ago: executing program 4 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_extract_tcp_res$synack(&(0x7f0000000500)={0x0, 0x0}, 0x1, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0x3, 0x300) unshare(0x40000000) 12.307167199s ago: executing program 4 (id=55): openat$tun(0xffffffffffffff9c, 0x0, 0x43e41, 0x0) r0 = io_uring_setup(0x383a, &(0x7f00000001c0)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000380)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000003c0), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.710534268s ago: executing program 4 (id=60): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x3, 0x1, 0x0, &(0x7f0000000480)=""/71, &(0x7f0000000500)=""/9, 0x41000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x8, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x3, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}}) 7.194932174s ago: executing program 3 (id=74): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 7.048722038s ago: executing program 3 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r6, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 6.608623318s ago: executing program 3 (id=80): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x4cc6, 0x2) 6.346763065s ago: executing program 4 (id=81): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) signalfd4(r3, &(0x7f0000000180)={[0x5d786aa3]}, 0x8, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000c95d"}) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 5.563354534s ago: executing program 1 (id=84): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000400)="e8700e444d", 0x5}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/81, 0x51}], 0x1}, 0x0) 5.388133968s ago: executing program 1 (id=85): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000159, 0x40840) 5.254922282s ago: executing program 1 (id=86): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x6762}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 5.184258903s ago: executing program 2 (id=87): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7fffdaeb"], 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 4.992664948s ago: executing program 2 (id=88): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000480)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r1, &(0x7f0000000140)='md0\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/metadata_version\x00', 0x509000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) write(r2, &(0x7f0000000240)='externa', 0x7) syz_open_dev$sndctrl(&(0x7f0000000280), 0x8d, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='65536\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/layout\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/layout\x00', 0x2, 0x10) write(r3, &(0x7f0000000600)='12', 0x2) 4.686289525s ago: executing program 3 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000a40), 0x56) sendmsg$kcm(r5, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r4, 0x42, 0x4000}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.559188679s ago: executing program 5 (id=23): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r1) 4.348571094s ago: executing program 3 (id=90): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) personality(0x619641b6fb4b8591) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000280)='./file1\x00', 0x200802, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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") ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000005c0)={0x1, 0x0, [{0x4, 0x1, 0x1, 0x3ff, 0xffff28e6, 0xea, 0x6}]}) stat(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000010402000000fcdbdf2500000000fb33ce8dd56ada768eaf20c4c7632e8bbde7f1964c47046008015fe8b8d247c5afff58c493a21add36097f98e24d1a120f92a4a9491eeb2ae617286aee0c48c9acb9475f521380c0160d322b7e45b942", @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x20044014}, 0x4050) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004001000040122000b0000005100000092b7c596cd42e2d338d42f64ad1be33a392be3e8be5b8ca99498c88b36c84b990c8a21991315e346fd9752397b5732dae147ec30f834bb", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) uname(&(0x7f0000001f00)=""/222) 4.323644624s ago: executing program 1 (id=91): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) futex(0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c80)={0xc73e, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x83c], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffdfff, 0xffffffff, 0x3]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x138a, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x661cb7fb, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4001, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) readv(r4, &(0x7f0000000f00), 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) 2.546030228s ago: executing program 5 (id=92): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18c880914717c2650f0000000900000073112d00010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x10008, &(0x7f0000000440)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file1\x00', 0x400, &(0x7f0000000b80), 0x2, 0x786, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000001380)) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x8042, 0x81) openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x143042, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.380822572s ago: executing program 1 (id=93): r0 = fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) r2 = openat$cgroup(r1, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000640)=0x1, 0x12) 2.328716633s ago: executing program 2 (id=94): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000688900000000000000000000000000000000000000000000000000000000000000000000000000000000000000180003006d040000070a000000000000000000000600ff0900a10185021901292015002501750195408102c0"], 0x130) close_range(r0, r0, 0x0) 2.226538906s ago: executing program 3 (id=95): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000280)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000300)=0x1) ppoll(&(0x7f0000000340)=[{r2, 0x80a0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) lseek(r1, 0x0, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)}}], 0x1, 0x2000c090) close(r3) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x804) 2.131432058s ago: executing program 1 (id=96): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, 0x0) 1.864559655s ago: executing program 2 (id=97): setpriority(0x0, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 1.727348698s ago: executing program 4 (id=98): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000004c0)={0x6e37, {{0x2, 0x4e23, @remote}}}, 0x88) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x1c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADLINK(r4, 0x0, 0x0) 949.998947ms ago: executing program 2 (id=99): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) pselect6(0x4b, &(0x7f00000002c0), &(0x7f0000000680)={0x9}, 0x0, 0x0, 0x0) 568.493306ms ago: executing program 2 (id=100): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1403, 0x40, 0x121}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000680)={0xa0000, 0x0, {[0x100000000, 0x2, 0x8, 0xd12, 0x8, 0x9b, 0x100, 0x80]}}) r3 = openat(r1, &(0x7f00000005c0)='driver/unbind\x00', 0x1, 0x0) r4 = epoll_create(0x537) fgetxattr(r4, &(0x7f0000000700)=@known='security.apparmor\x00', 0x0, 0x0) write(r3, &(0x7f0000000440)='0000:00:01.0\x00', 0xd) r5 = openat(r1, &(0x7f0000000480)='driver_override\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='i915\x00', 0x5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/i915\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000540)='bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='0000:00:01.0\x00', 0xd) sendmsg$nl_crypto(r7, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000180)=0xe) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1c, 0x8, 0x10001, 0x2, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef000f00240012800bb617006d616373656300001400028005000c000000000005000a00a684c5584747552c24810100000008000500a2700b04919e8686d4a4397e896d1327e70acf8bfa3a61b2b9f1d20753ca5277c792fc1cd0d206fa11bc81661de12eb2c11b489dc28e8acdd521edf25f9d", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 249.463974ms ago: executing program 5 (id=101): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={r1}, &(0x7f00000005c0)=0x8) 0s ago: executing program 4 (id=102): setpriority(0x0, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. syzkaller login: [ 58.460926][ T4172] cgroup: Unknown subsys name 'net' [ 58.590293][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.811810][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.638004][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.700983][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.753768][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.807911][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.815600][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.823584][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.838078][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.845493][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.853410][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.861489][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.870251][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.879598][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.886892][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.894767][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.902564][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.909770][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.917725][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.963778][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.979687][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.021076][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.041387][ T4188] team0: Port device team_slave_0 added [ 62.054705][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.072358][ T4188] team0: Port device team_slave_1 added [ 62.116632][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.124162][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.132420][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.146250][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.153349][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.161260][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.169812][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.177198][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.186543][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.211340][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.218928][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.226856][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.242340][ T4191] team0: Port device team_slave_0 added [ 62.249209][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.256509][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.282864][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.301110][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.308352][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.334576][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.346207][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.353298][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.361779][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.376566][ T4191] team0: Port device team_slave_1 added [ 62.384276][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.395352][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.409139][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.416606][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.425444][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.438635][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.454289][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.494053][ T4189] team0: Port device team_slave_0 added [ 62.505352][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.512326][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.539007][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.552942][ T4184] team0: Port device team_slave_0 added [ 62.561287][ T4189] team0: Port device team_slave_1 added [ 62.575397][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.585020][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.591994][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.618187][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.630529][ T4184] team0: Port device team_slave_1 added [ 62.656589][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.689128][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.696072][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.703430][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.710708][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.737384][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.755605][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.762690][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.789869][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.809109][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.816185][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.842549][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.854881][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.861838][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.888581][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.929097][ T4185] team0: Port device team_slave_0 added [ 62.968917][ T4185] team0: Port device team_slave_1 added [ 62.990431][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.997464][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.004585][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.012402][ T4191] Cannot create hsr debugfs directory [ 63.035123][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.042874][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.050445][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.058898][ T4189] Cannot create hsr debugfs directory [ 63.079101][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.086309][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.112501][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.131419][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.138558][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.145719][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.153419][ T4184] Cannot create hsr debugfs directory [ 63.181008][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.188320][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.214948][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.308646][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.316713][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.323363][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.331296][ T4185] Cannot create hsr debugfs directory [ 63.395027][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.401982][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 63.438709][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 63.445057][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.451368][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 63.563299][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.576535][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.587441][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.598016][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.645114][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.654648][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.677768][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.701507][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.769664][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.790966][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.805845][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.816684][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.833017][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.840987][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.850667][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.860507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.900086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.909959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.920703][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.927998][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.937310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.948041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.958223][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.965620][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.974289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.990543][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.000087][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.029325][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.060929][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.077944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.088990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.100234][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.116071][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.141143][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.151012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.162627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.174897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.183636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.192698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.201678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.211287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.229019][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.239046][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.249890][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.263092][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.278892][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.296795][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.330391][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.339027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.350313][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.374715][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.382897][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.395581][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.419268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.430076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.440098][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.447255][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.468219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.477053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.486851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.497852][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.505055][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.513810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.523289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.532263][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.539532][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.550285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.598865][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.608011][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.617047][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.624168][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.633097][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.644301][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.652876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.661759][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.670641][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.680507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.689397][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.698495][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.707543][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.716820][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.731111][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.750566][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.761990][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.776444][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.785061][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.792876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.800720][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.808526][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.817657][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.826897][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.839924][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.849682][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.859955][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.871555][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.890506][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.907783][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.917570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.926075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.934579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.943254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.952333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.961708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.975684][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.000736][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.014545][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.027306][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.034457][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.043216][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.052520][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.061627][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.068801][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.079237][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.089734][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.131955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.141992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.158802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.171211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.187071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.203548][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.226475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.235185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.249070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.257971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.266689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.275360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.283711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.303087][ T4188] device veth0_vlan entered promiscuous mode [ 65.317161][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.333613][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.349097][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.385689][ T4188] device veth1_vlan entered promiscuous mode [ 65.399202][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.418468][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.428430][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.436820][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.445957][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.453745][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.462015][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.470767][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.478600][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 65.484943][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 65.491548][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 65.504920][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.514451][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 65.524252][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 65.526929][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.547372][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.562722][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.572039][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.587064][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.594235][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.602076][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.612156][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.621038][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.628622][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.637773][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.646782][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.654866][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.662654][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.694102][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.724403][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.739077][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.748255][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.757631][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.766389][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.777941][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.791315][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.801000][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.809841][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.822739][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.832526][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.850112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.859008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.876187][ T4188] device veth0_macvtap entered promiscuous mode [ 65.891986][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.911291][ T4188] device veth1_macvtap entered promiscuous mode [ 65.925668][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.934938][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.951175][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.961182][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.970378][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.983341][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.030215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.046984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.056709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.065764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.081257][ T4189] device veth0_vlan entered promiscuous mode [ 66.089850][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.108875][ T4184] device veth0_vlan entered promiscuous mode [ 66.118999][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.131445][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.140443][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.149551][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.162685][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.171561][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.181729][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.197959][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.207743][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.216875][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.225911][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.251114][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.260539][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.270103][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.279416][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.289194][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.296780][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.318261][ T4189] device veth1_vlan entered promiscuous mode [ 66.329825][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.372685][ T4184] device veth1_vlan entered promiscuous mode [ 66.391030][ T4191] device veth0_vlan entered promiscuous mode [ 66.410425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.427964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.438892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.448703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.457933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.471541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.482305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.490575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.537243][ T4189] device veth0_macvtap entered promiscuous mode [ 66.546579][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.555354][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.573100][ T4191] device veth1_vlan entered promiscuous mode [ 66.589591][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.600189][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.613905][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.624352][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.632971][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.667401][ T4189] device veth1_macvtap entered promiscuous mode [ 66.687285][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.696287][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.706654][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.720503][ T4184] device veth0_macvtap entered promiscuous mode [ 66.741380][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.752022][ T4184] device veth1_macvtap entered promiscuous mode [ 66.765484][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.781012][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.796394][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.808663][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.819772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.828789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.838594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.847338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.855668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.864517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.888525][ T4191] device veth0_macvtap entered promiscuous mode [ 66.902575][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.913315][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.923682][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.936181][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.948306][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.962296][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.978931][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.991521][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.014703][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.029245][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.038573][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.049217][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.058286][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.067702][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.078058][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.090298][ T4191] device veth1_macvtap entered promiscuous mode [ 67.100859][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.111928][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.122919][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.134619][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.145924][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.158159][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.167116][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.176171][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.185373][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.214332][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.222773][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.233270][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.243803][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.259013][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.272674][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.281757][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.291605][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.303549][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359902][ T4185] device veth0_vlan entered promiscuous mode [ 67.390885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.410759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.420030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.434650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.444429][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.460570][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.472897][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.490137][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.500381][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.511585][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.523367][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.551114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.563011][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 67.576910][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 67.583732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.593133][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 67.596839][ T4271] FAULT_INJECTION: forcing a failure. [ 67.596839][ T4271] name failslab, interval 1, probability 0, space 0, times 1 [ 67.600805][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 67.618715][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 67.619368][ T4271] CPU: 0 PID: 4271 Comm: syz.0.6 Not tainted syzkaller #0 [ 67.631978][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.642451][ T4271] Call Trace: [ 67.645737][ T4271] [ 67.648707][ T4271] dump_stack_lvl+0x188/0x250 [ 67.653555][ T4271] ? show_regs_print_info+0x20/0x20 [ 67.659366][ T4271] ? load_image+0x410/0x410 [ 67.663985][ T4271] ? __might_sleep+0xf0/0xf0 [ 67.668598][ T4271] ? __lock_acquire+0x7d40/0x7d40 [ 67.673925][ T4271] should_fail+0x383/0x4b0 [ 67.678625][ T4271] should_failslab+0x5/0x20 [ 67.684595][ T4271] slab_pre_alloc_hook+0x51/0xc0 [ 67.690904][ T4271] ? __proc_create+0x36f/0x8b0 [ 67.695962][ T4271] kmem_cache_alloc+0x3d/0x280 [ 67.700934][ T4271] __proc_create+0x36f/0x8b0 [ 67.705553][ T4271] ? proc_symlink+0x210/0x210 [ 67.710245][ T4271] ? proc_symlink+0x210/0x210 [ 67.714960][ T4271] proc_create_data+0xa0/0x2d0 [ 67.719743][ T4271] cache_register_net+0x2d6/0x480 [ 67.724785][ T4271] nfsd_idmap_init+0x157/0x1e0 [ 67.729556][ T4271] ? nfsd_init_net+0x34/0x1e0 [ 67.734239][ T4271] nfsd_init_net+0x47/0x1e0 [ 67.738745][ T4271] ops_init+0x360/0x5f0 [ 67.742991][ T4271] setup_net+0x39e/0xa10 [ 67.747234][ T4271] ? copy_net_ns+0x5b0/0x5b0 [ 67.751957][ T4271] ? copy_net_ns+0x324/0x5b0 [ 67.756568][ T4271] ? down_read_killable+0x1ce/0x340 [ 67.761773][ T4271] copy_net_ns+0x33e/0x5b0 [ 67.766193][ T4271] create_new_namespaces+0x3ce/0x700 [ 67.771763][ T4271] unshare_nsproxy_namespaces+0x116/0x160 [ 67.777495][ T4271] ksys_unshare+0x4f6/0x8e0 [ 67.782012][ T4271] ? __lock_acquire+0x7d40/0x7d40 [ 67.787485][ T4271] ? sighand_ctor+0x40/0x40 [ 67.791998][ T4271] ? lock_chain_count+0x20/0x20 [ 67.796851][ T4271] ? syscall_enter_from_user_mode+0x21/0x70 [ 67.802845][ T4271] __x64_sys_unshare+0x34/0x40 [ 67.807700][ T4271] do_syscall_64+0x4c/0xa0 [ 67.812141][ T4271] ? clear_bhb_loop+0x30/0x80 [ 67.816953][ T4271] ? clear_bhb_loop+0x30/0x80 [ 67.821642][ T4271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.828069][ T4271] RIP: 0033:0x7f15be3252d9 [ 67.832497][ T4271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.852116][ T4271] RSP: 002b:00007f15bc57d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 67.860553][ T4271] RAX: ffffffffffffffda RBX: 00007f15be5acfa0 RCX: 00007f15be3252d9 [ 67.868700][ T4271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 67.876776][ T4271] RBP: 00007f15be3bc888 R08: 0000000000000000 R09: 0000000000000000 [ 67.885060][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.893053][ T4271] R13: 00007f15be5ad038 R14: 00007f15be5acfa0 R15: 00007fff070ec648 [ 67.901038][ T4271] [ 67.919141][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.930859][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.942787][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.953579][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.971383][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.982071][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.993676][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.008263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.017608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.045973][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.059425][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.068973][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.078064][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146297][ T4185] device veth1_vlan entered promiscuous mode [ 68.185131][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.214953][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.280034][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.303556][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.313605][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.335741][ T4185] device veth0_macvtap entered promiscuous mode [ 68.344271][ T463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.350047][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.355776][ T4185] device veth1_macvtap entered promiscuous mode [ 68.366821][ T463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.373438][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.394657][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.404738][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.413382][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.422372][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.458479][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.462267][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.488844][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.498194][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.511676][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.523535][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.533790][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.544473][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.554620][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.565216][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.577535][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.588069][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.600169][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.610252][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.618118][ T4275] FAULT_INJECTION: forcing a failure. [ 68.618118][ T4275] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.627108][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.638456][ T4275] CPU: 0 PID: 4275 Comm: syz.0.7 Not tainted syzkaller #0 [ 68.647244][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.651179][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.662868][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.671854][ T4275] Call Trace: [ 68.671868][ T4275] [ 68.671876][ T4275] dump_stack_lvl+0x188/0x250 [ 68.671902][ T4275] ? show_regs_print_info+0x20/0x20 [ 68.671918][ T4275] ? load_image+0x410/0x410 [ 68.671936][ T4275] ? __lock_acquire+0x7d40/0x7d40 [ 68.671953][ T4275] ? mark_lock+0x94/0x320 [ 68.671975][ T4275] should_fail+0x383/0x4b0 [ 68.671999][ T4275] prepare_alloc_pages+0x1e3/0x5b0 [ 68.685924][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.688059][ T4275] __alloc_pages+0x11b/0x480 [ 68.692722][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.697920][ T4275] ? zone_statistics+0x170/0x170 [ 68.697957][ T4275] alloc_pages_vma+0x2bc/0x790 [ 68.697976][ T4275] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 68.697995][ T4275] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 68.698021][ T4275] ? shmem_swapin_page+0x22f0/0x22f0 [ 68.698054][ T4275] ? __lock_acquire+0x7d40/0x7d40 [ 68.707340][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.707571][ T4275] ? xas_descend+0x210/0x3b0 [ 68.789590][ T4275] ? xas_load+0x127/0x140 [ 68.793955][ T4275] ? pagecache_get_page+0xc32/0xf20 [ 68.799168][ T4275] ? page_cache_prev_miss+0x380/0x380 [ 68.804548][ T4275] ? mark_lock+0x94/0x320 [ 68.808889][ T4275] ? verify_lock_unused+0x140/0x140 [ 68.814092][ T4275] ? __lock_acquire+0x13b3/0x7d40 [ 68.819134][ T4275] shmem_getpage_gfp+0x14be/0x2c10 [ 68.824462][ T4275] shmem_fault+0x1ac/0x550 [ 68.828964][ T4275] ? shmem_fallocate+0xec0/0xec0 [ 68.833907][ T4275] ? filemap_read_page+0x4b0/0x4b0 [ 68.839049][ T4275] ? count_memcg_event_mm+0x324/0x370 [ 68.844438][ T4275] __do_fault+0x141/0x330 [ 68.848784][ T4275] handle_mm_fault+0x2982/0x4440 [ 68.853765][ T4275] ? get_page+0xe0/0xe0 [ 68.857935][ T4275] ? follow_page_mask+0xa51/0x12b0 [ 68.863080][ T4275] __get_user_pages+0x952/0x11e0 [ 68.868024][ T4275] ? populate_vma_page_range+0x290/0x290 [ 68.873752][ T4275] ? read_lock_is_recursive+0x10/0x10 [ 68.879130][ T4275] populate_vma_page_range+0x213/0x290 [ 68.884605][ T4275] __mm_populate+0x275/0x3b0 [ 68.889222][ T4275] ? check_vma_flags+0x470/0x470 [ 68.894168][ T4275] ? up_write+0x1b6/0x410 [ 68.898513][ T4275] vm_mmap_pgoff+0x212/0x2d0 [ 68.903097][ T4275] ? account_locked_vm+0xe0/0xe0 [ 68.908030][ T4275] ? __context_tracking_exit+0x4c/0x80 [ 68.913601][ T4275] ? __lock_acquire+0x7d40/0x7d40 [ 68.918666][ T4275] ksys_mmap_pgoff+0x140/0x790 [ 68.923436][ T4275] ? mmap_region+0x1730/0x1730 [ 68.928231][ T4275] ? lockdep_hardirqs_on+0x94/0x140 [ 68.933456][ T4275] do_syscall_64+0x4c/0xa0 [ 68.937873][ T4275] ? clear_bhb_loop+0x30/0x80 [ 68.942565][ T4275] ? clear_bhb_loop+0x30/0x80 [ 68.947264][ T4275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.953159][ T4275] RIP: 0033:0x7f15be3252d9 [ 68.957571][ T4275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.977261][ T4275] RSP: 002b:00007f15bc57d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.986559][ T4275] RAX: ffffffffffffffda RBX: 00007f15be5acfa0 RCX: 00007f15be3252d9 [ 68.994813][ T4275] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 69.002902][ T4275] RBP: 00007f15be3bc888 R08: ffffffffffffffff R09: 0000000000000000 [ 69.010916][ T4275] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 69.018891][ T4275] R13: 00007f15be5ad038 R14: 00007f15be5acfa0 R15: 00007fff070ec648 [ 69.027051][ T4275] [ 69.051718][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.077230][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.104952][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.124145][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.133521][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.169213][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.178114][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.187577][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.197350][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.210301][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.244207][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.262370][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.266648][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.284568][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.348291][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.466622][ T4239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.476835][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.493663][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.512987][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.526993][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.539084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.553319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.573608][ T4283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.634518][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.650588][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.672961][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 69.683184][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.750754][ T4294] FAULT_INJECTION: forcing a failure. [ 69.750754][ T4294] name failslab, interval 1, probability 0, space 0, times 0 [ 69.772921][ T4294] CPU: 1 PID: 4294 Comm: syz.4.12 Not tainted syzkaller #0 [ 69.780198][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.790278][ T4294] Call Trace: [ 69.793591][ T4294] [ 69.796545][ T4294] dump_stack_lvl+0x188/0x250 [ 69.801251][ T4294] ? show_regs_print_info+0x20/0x20 [ 69.806485][ T4294] ? load_image+0x410/0x410 [ 69.811025][ T4294] ? __might_sleep+0xf0/0xf0 [ 69.815845][ T4294] ? __lock_acquire+0x7d40/0x7d40 [ 69.820999][ T4294] ? stack_depot_save+0x41b/0x460 [ 69.826058][ T4294] should_fail+0x383/0x4b0 [ 69.830523][ T4294] should_failslab+0x5/0x20 [ 69.836454][ T4294] slab_pre_alloc_hook+0x51/0xc0 [ 69.842354][ T4294] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 69.848234][ T4294] ? blk_mq_init_tags+0x74/0x370 [ 69.853240][ T4294] blk_mq_init_tags+0x74/0x370 [ 69.858043][ T4294] ? blk_mq_hw_queue_to_node+0xda/0x120 [ 69.863632][ T4294] blk_mq_alloc_rq_map+0x7f/0x1a0 [ 69.868691][ T4294] __blk_mq_alloc_map_and_request+0x8e/0x320 [ 69.874714][ T4294] blk_mq_alloc_map_and_requests+0xd0/0x4d0 [ 69.880658][ T4294] blk_mq_alloc_tag_set+0x794/0xf30 [ 69.885902][ T4294] loop_add+0x257/0x890 [ 69.890095][ T4294] loop_control_ioctl+0x124/0x550 [ 69.895155][ T4294] ? xor_init+0x60/0x60 [ 69.899359][ T4294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 69.904346][ T4294] ? security_file_ioctl+0x7c/0xa0 [ 69.909510][ T4294] ? xor_init+0x60/0x60 [ 69.913708][ T4294] __se_sys_ioctl+0xfa/0x170 [ 69.918351][ T4294] do_syscall_64+0x4c/0xa0 [ 69.922804][ T4294] ? clear_bhb_loop+0x30/0x80 [ 69.927514][ T4294] ? clear_bhb_loop+0x30/0x80 [ 69.932239][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.938250][ T4294] RIP: 0033:0x7f489a62f2d9 [ 69.942692][ T4294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.962442][ T4294] RSP: 002b:00007f4898887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.970980][ T4294] RAX: ffffffffffffffda RBX: 00007f489a8b6fa0 RCX: 00007f489a62f2d9 [ 69.978989][ T4294] RDX: 0000000087000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 69.986999][ T4294] RBP: 00007f489a6c6888 R08: 0000000000000000 R09: 0000000000000000 [ 69.995004][ T4294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.003778][ T4294] R13: 00007f489a8b7038 R14: 00007f489a8b6fa0 R15: 00007ffd36a14508 [ 70.014742][ T4294] [ 70.032004][ T4294] blk-mq: reduced tag depth (128 -> 64) [ 70.204213][ T4239] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 70.213589][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 70.238644][ T4239] usb 3-1: Product: syz [ 70.259885][ T4239] usb 3-1: config 0 descriptor?? [ 70.317593][ T4239] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 70.330816][ T4305] Zero length message leads to an empty skb [ 70.339195][ T4239] usb 3-1: Detected FT232H [ 70.352022][ T4305] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 70.633991][ T4272] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.756731][ T4277] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 70.804666][ T4239] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 70.851916][ T4239] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 70.864250][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.968236][ T4239] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.974376][ T4272] usb 2-1: not running at top speed; connect to a high speed hub [ 71.002005][ T4239] usb 3-1: USB disconnect, device number 2 [ 71.018383][ T4239] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.029449][ T4239] ftdi_sio 3-1:0.0: device disconnected [ 71.134199][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 71.219634][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.240305][ T4272] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 71.258778][ T4230] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 71.267255][ T4272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.287563][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.308123][ T4272] usb 2-1: Product: syz [ 71.312739][ T4272] usb 2-1: Manufacturer: syz [ 71.320428][ T4230] usb 5-1: config 0 has no interface number 0 [ 71.329916][ T4277] syz.2.3 (4277) used greatest stack depth: 20944 bytes left [ 71.330064][ T4272] usb 2-1: SerialNumber: syz [ 71.395724][ T4272] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 71.418095][ T4272] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 71.437485][ T4272] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 71.455209][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.469602][ T4272] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 71.481363][ T4272] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 71.534275][ T4230] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 71.551572][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.580645][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.588320][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.598406][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.626068][ T4230] usb 5-1: Product: syz [ 71.630688][ T4230] usb 5-1: Manufacturer: syz [ 71.712459][ T4325] Invalid ELF header magic: != ELF [ 72.227747][ T4230] usb 5-1: SerialNumber: syz [ 72.242466][ T4230] usb 5-1: config 0 descriptor?? [ 72.274810][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 72.289052][ T4230] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 72.333409][ T4230] usb 5-1: No valid video chain found. [ 72.382576][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.403201][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.423912][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 72.468078][ T7] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 72.511483][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.524859][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.561617][ T7] usb 4-1: config 0 descriptor?? [ 72.589469][ T4254] usb 5-1: USB disconnect, device number 2 [ 72.633423][ T7] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 72.656004][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 72.915283][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.940984][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.962531][ T4327] device bridge_slave_0 entered promiscuous mode [ 72.979348][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.990555][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.003443][ T4327] device bridge_slave_1 entered promiscuous mode [ 73.142596][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.212458][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.275942][ T4327] team0: Port device team_slave_0 added [ 73.309290][ T4327] team0: Port device team_slave_1 added [ 73.360184][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.374215][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.431195][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.432558][ T4367] gadgetfs: bound to dummy_udc driver [ 73.468938][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.478876][ T26] audit: type=1800 audit(1791955606.975:2): pid=4369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.30" name="ep1in-bulk" dev="gadgetfs" ino=33448 res=0 errno=0 [ 73.506399][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.556485][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.570702][ T4371] netlink: 32 bytes leftover after parsing attributes in process `syz.4.31'. [ 73.610013][ T4371] FAULT_INJECTION: forcing a failure. [ 73.610013][ T4371] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.633216][ T26] audit: type=1326 audit(1791955607.125:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.644295][ T4371] CPU: 1 PID: 4371 Comm: syz.4.31 Not tainted syzkaller #0 [ 73.664298][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.674376][ T4371] Call Trace: [ 73.677725][ T4371] [ 73.680678][ T4371] dump_stack_lvl+0x188/0x250 [ 73.684020][ T26] audit: type=1326 audit(1791955607.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.685579][ T4371] ? show_regs_print_info+0x20/0x20 [ 73.714616][ T4371] ? load_image+0x410/0x410 [ 73.718071][ T26] audit: type=1326 audit(1791955607.175:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.719155][ T4371] ? netlink_getsockopt+0x570/0x570 [ 73.748048][ T4371] ? aa_sock_msg_perm+0x94/0x150 [ 73.753018][ T4371] ? apparmor_socket_sendmsg+0x88/0x230 [ 73.758594][ T4371] should_fail+0x383/0x4b0 [ 73.762034][ T26] audit: type=1326 audit(1791955607.175:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.763046][ T4371] get_futex_key+0x1a1/0x12d0 [ 73.791610][ T4371] ? __lock_acquire+0x13b3/0x7d40 [ 73.796659][ T4371] ? futex_wait_restart+0x250/0x250 [ 73.801899][ T4371] futex_wake+0x101/0x540 [ 73.806274][ T4371] ? futex_wait+0x680/0x680 [ 73.810808][ T4371] ? verify_lock_unused+0x140/0x140 [ 73.816039][ T4371] ? verify_lock_unused+0x140/0x140 [ 73.821275][ T4371] do_futex+0xd83/0x12b0 [ 73.823259][ T26] audit: type=1326 audit(1791955607.175:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.825555][ T4371] ? futex_exit_release+0x1c0/0x1c0 [ 73.825594][ T4371] ? __context_tracking_exit+0x4c/0x80 [ 73.825616][ T4371] __se_sys_futex+0x389/0x420 [ 73.825638][ T4371] ? __x64_sys_futex+0xf0/0xf0 [ 73.825662][ T4371] ? __x64_sys_futex+0x1d/0xf0 [ 73.825682][ T4371] do_syscall_64+0x4c/0xa0 [ 73.825699][ T4371] ? clear_bhb_loop+0x30/0x80 [ 73.825717][ T4371] ? clear_bhb_loop+0x30/0x80 [ 73.854688][ T26] audit: type=1326 audit(1791955607.175:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.854787][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.860305][ T26] audit: type=1326 audit(1791955607.315:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 73.864968][ T4371] RIP: 0033:0x7f489a62f2d9 [ 73.864994][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.865006][ T4371] RSP: 002b:00007f48988870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.865024][ T4371] RAX: ffffffffffffffda RBX: 00007f489a8b6fa8 RCX: 00007f489a62f2d9 [ 73.865035][ T4371] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f489a8b6fac [ 73.865045][ T4371] RBP: 00007f489a8b6fa0 R08: 00221c04d317acd8 R09: 0000000000000000 [ 73.865055][ T4371] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 73.865064][ T4371] R13: 00007f489a8b7038 R14: 00007ffd36a14420 R15: 00007ffd36a14508 [ 73.865087][ T4371] [ 73.972097][ T23] usb 2-1: USB disconnect, device number 2 [ 73.987546][ T4327] device hsr_slave_0 entered promiscuous mode [ 74.025266][ T26] audit: type=1326 audit(1791955607.315:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 74.058613][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 74.068353][ T26] audit: type=1326 audit(1791955607.485:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd891602d9 code=0x7ffc0000 [ 74.101553][ T4327] device hsr_slave_1 entered promiscuous mode [ 74.101643][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 74.129804][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.252718][ T4327] Cannot create hsr debugfs directory [ 74.519262][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 74.538724][ T4239] Bluetooth: hci3: command 0x0409 tx timeout [ 74.558757][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 74.572843][ T23] keyspan 2-1:1.0: device disconnected [ 74.656295][ T4389] loop4: detected capacity change from 0 to 4096 [ 74.817364][ T4392] ip_tables: iptables: counters copy to user failed while replacing table [ 74.837516][ T4392] ip_tables: iptables: counters copy to user failed while replacing table [ 75.283338][ T4389] EXT4-fs (loop4): Ignoring removed nobh option [ 75.474923][ T4389] EXT4-fs (loop4): Test dummy encryption mode enabled [ 75.482681][ T4389] EXT4-fs (loop4): Ignoring removed bh option [ 75.512257][ T4389] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 75.619526][ T4412] ======================================================= [ 75.619526][ T4412] WARNING: The mand mount option has been deprecated and [ 75.619526][ T4412] and is ignored by this kernel. Remove the mand [ 75.619526][ T4412] option from the mount to silence this warning. [ 75.619526][ T4412] ======================================================= [ 75.666734][ T4412] jffs2: notice: (4412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.729929][ T4327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.734990][ T23] usb 4-1: USB disconnect, device number 2 [ 75.852041][ T4418] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.900631][ T4421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 75.934194][ T4327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.961160][ T4421] FAULT_INJECTION: forcing a failure. [ 75.961160][ T4421] name failslab, interval 1, probability 0, space 0, times 0 [ 75.993801][ T4327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.048406][ T4421] CPU: 0 PID: 4421 Comm: syz.1.42 Not tainted syzkaller #0 [ 76.055797][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.065878][ T4421] Call Trace: [ 76.069178][ T4421] [ 76.070288][ T4327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.072123][ T4421] dump_stack_lvl+0x188/0x250 [ 76.083493][ T4421] ? show_regs_print_info+0x20/0x20 [ 76.088775][ T4421] ? load_image+0x410/0x410 [ 76.093308][ T4421] ? __lock_acquire+0x7d40/0x7d40 [ 76.098364][ T4421] should_fail+0x383/0x4b0 [ 76.102816][ T4421] should_failslab+0x5/0x20 [ 76.107331][ T4421] slab_pre_alloc_hook+0x51/0xc0 [ 76.112358][ T4421] ? new_inode_pseudo+0x77/0x210 [ 76.117309][ T4421] kmem_cache_alloc+0x3d/0x280 [ 76.122091][ T4421] new_inode_pseudo+0x77/0x210 [ 76.126876][ T4421] alloc_anon_inode+0x1b/0x300 [ 76.131659][ T4421] aio_setup_ring+0x101/0xda0 [ 76.136350][ T4421] ? pcpu_alloc+0x11e6/0x16d0 [ 76.141129][ T4421] ? free_ioctx_reqs+0x180/0x180 [ 76.146084][ T4421] ? percpu_ref_init+0x210/0x340 [ 76.151037][ T4421] ? free_ioctx_users+0x1c0/0x1c0 [ 76.156084][ T4421] ioctx_alloc+0x316/0x770 [ 76.160609][ T4421] __se_sys_io_setup+0x7b/0x190 [ 76.165471][ T4421] do_syscall_64+0x4c/0xa0 [ 76.169899][ T4421] ? clear_bhb_loop+0x30/0x80 [ 76.174585][ T4421] ? clear_bhb_loop+0x30/0x80 [ 76.179273][ T4421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.185178][ T4421] RIP: 0033:0x7fee5ec832d9 [ 76.189606][ T4421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.209312][ T4421] RSP: 002b:00007fee5cedb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 76.217752][ T4421] RAX: ffffffffffffffda RBX: 00007fee5ef0afa0 RCX: 00007fee5ec832d9 [ 76.225736][ T4421] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000007e [ 76.233711][ T4421] RBP: 00007fee5ed1a888 R08: 0000000000000000 R09: 0000000000000000 [ 76.241693][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.249665][ T4421] R13: 00007fee5ef0b038 R14: 00007fee5ef0afa0 R15: 00007ffdfcc57b98 [ 76.257678][ T4421] [ 76.631039][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 76.704533][ T144] device hsr_slave_0 left promiscuous mode [ 76.733685][ T144] device hsr_slave_1 left promiscuous mode [ 76.759037][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.808633][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.849767][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.927899][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.978410][ T144] device bridge_slave_1 left promiscuous mode [ 77.035540][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.073690][ T144] device bridge_slave_0 left promiscuous mode [ 77.111274][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.121852][ T4443] FAULT_INJECTION: forcing a failure. [ 77.121852][ T4443] name failslab, interval 1, probability 0, space 0, times 0 [ 77.163765][ T4443] CPU: 1 PID: 4443 Comm: syz.4.44 Not tainted syzkaller #0 [ 77.171034][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.181157][ T4443] Call Trace: [ 77.184461][ T4443] [ 77.187426][ T4443] dump_stack_lvl+0x188/0x250 [ 77.192140][ T4443] ? show_regs_print_info+0x20/0x20 [ 77.197369][ T4443] ? load_image+0x410/0x410 [ 77.201911][ T4443] ? __might_sleep+0xf0/0xf0 [ 77.206560][ T4443] ? __lock_acquire+0x7d40/0x7d40 [ 77.211624][ T4443] ? fib_rules_register+0x3cc/0x3f0 [ 77.216852][ T4443] should_fail+0x383/0x4b0 [ 77.221400][ T4443] should_failslab+0x5/0x20 [ 77.226035][ T4443] slab_pre_alloc_hook+0x51/0xc0 [ 77.230065][ T4450] loop9: detected capacity change from 0 to 7 [ 77.230996][ T4443] kmem_cache_alloc_trace+0x47/0x290 [ 77.231031][ T4443] ? mr_table_alloc+0x61/0x240 [ 77.231055][ T4443] ? ipmr_expire_process+0xc0/0xc0 [ 77.252279][ T4443] mr_table_alloc+0x61/0x240 [ 77.256895][ T4443] ? ip6mr_cache_report+0x15a0/0x15a0 [ 77.262297][ T4443] ip6mr_net_init+0x245/0x3a0 [ 77.267009][ T4443] ops_init+0x360/0x5f0 [ 77.269481][ T4450] Dev loop9: unable to read RDB block 7 [ 77.271192][ T4443] setup_net+0x39e/0xa10 [ 77.281270][ T4443] ? copy_net_ns+0x5b0/0x5b0 [ 77.285891][ T4443] ? copy_net_ns+0x324/0x5b0 [ 77.287656][ T4450] loop9: AHDI p1 [ 77.290504][ T4443] ? down_read_killable+0x1ce/0x340 [ 77.290535][ T4443] copy_net_ns+0x33e/0x5b0 [ 77.290558][ T4443] create_new_namespaces+0x3ce/0x700 [ 77.306955][ T4450] loop9: partition table partially beyond EOD, [ 77.309107][ T4443] unshare_nsproxy_namespaces+0x116/0x160 [ 77.309143][ T4443] ksys_unshare+0x4f6/0x8e0 [ 77.309161][ T4443] ? __lock_acquire+0x7d40/0x7d40 [ 77.320553][ T4450] truncated [ 77.321138][ T4443] ? sighand_ctor+0x40/0x40 [ 77.338377][ T4443] ? lock_chain_count+0x20/0x20 [ 77.343297][ T4443] ? syscall_enter_from_user_mode+0x21/0x70 [ 77.349227][ T4443] __x64_sys_unshare+0x34/0x40 [ 77.354020][ T4443] do_syscall_64+0x4c/0xa0 [ 77.358464][ T4443] ? clear_bhb_loop+0x30/0x80 [ 77.363168][ T4443] ? clear_bhb_loop+0x30/0x80 [ 77.367876][ T4443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.373800][ T4443] RIP: 0033:0x7f489a62f2d9 [ 77.378509][ T4443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.399424][ T4443] RSP: 002b:00007f4898887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.407853][ T4443] RAX: ffffffffffffffda RBX: 00007f489a8b6fa0 RCX: 00007f489a62f2d9 [ 77.415838][ T4443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 77.423852][ T4443] RBP: 00007f489a6c6888 R08: 0000000000000000 R09: 0000000000000000 [ 77.431932][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.440123][ T4443] R13: 00007f489a8b7038 R14: 00007f489a8b6fa0 R15: 00007ffd36a14508 [ 77.448192][ T4443] [ 77.460405][ T144] device veth1_macvtap left promiscuous mode [ 77.470250][ T144] device veth0_macvtap left promiscuous mode [ 77.489081][ T144] device veth1_vlan left promiscuous mode [ 77.499664][ T144] device veth0_vlan left promiscuous mode [ 77.806026][ T4447] loop3: detected capacity change from 0 to 8 [ 78.508660][ T4460] ip_tables: iptables: counters copy to user failed while replacing table [ 78.525843][ T4460] ip_tables: iptables: counters copy to user failed while replacing table [ 78.684279][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 78.835843][ T144] team0 (unregistering): Port device team_slave_1 removed [ 79.039002][ T144] team0 (unregistering): Port device team_slave_0 removed [ 79.070866][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.092428][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.205304][ T4462] loop3: detected capacity change from 0 to 512 [ 79.253108][ T144] bond0 (unregistering): Released all slaves [ 79.318930][ T4462] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.50: iget: bad i_size value: 38620345925642 [ 79.346809][ T4462] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.50: couldn't read orphan inode 15 (err -117) [ 79.360229][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.372029][ T4468] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 79.378898][ T4468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.403513][ T4468] vhci_hcd vhci_hcd.0: Device attached [ 79.529668][ T4471] vhci_hcd: connection closed [ 79.531950][ T4432] vhci_hcd: stop threads [ 79.555498][ T4432] vhci_hcd: release socket [ 79.602457][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.631156][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.642259][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.658207][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.677568][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.714236][ T4432] vhci_hcd: disconnect device [ 79.741174][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.764877][ T4462] loop3: detected capacity change from 0 to 512 [ 79.779496][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.786817][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.797543][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.825741][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.839594][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.857298][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.864512][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.887780][ T4462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 79.903434][ T4462] System zones: 1-12 [ 79.909862][ T4462] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.50: missing EA_INODE flag [ 79.930499][ T4462] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.50: error while reading EA inode 12 err=-117 [ 79.942388][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.957567][ T4462] EXT4-fs (loop3): 1 orphan inode deleted [ 79.963480][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 80.019531][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.051504][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.110212][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.143607][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.232641][ T4482] tipc: Started in network mode [ 80.263997][ T4482] tipc: Node identity 4, cluster identity 4711 [ 80.273988][ T4482] tipc: Node number set to 4 [ 80.747211][ T4497] Invalid ELF header magic: != ELF [ 80.831024][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 80.988919][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.220163][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.245247][ T4495] 0x000000000000-0x000000010000 : "" [ 81.264567][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.307486][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.334521][ T4495] ftl_cs: FTL header not found. [ 81.442484][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.503477][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.624873][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.925685][ T4519] TCP: TCP_TX_DELAY enabled [ 81.980241][ T4525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 82.724090][ T4525] netlink: 14 bytes leftover after parsing attributes in process `syz.1.65'. [ 83.115479][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.139648][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.348509][ T4543] overlayfs: failed to resolve './file1': -2 [ 83.387188][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.719851][ T4551] capability: warning: `syz.2.71' uses deprecated v2 capabilities in a way that may be insecure [ 83.940473][ T4558] Invalid ELF header magic: != ELF [ 84.023873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.043867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.053872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.063874][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.073870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.083872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.103868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.113893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.133915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.143881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 85.213068][ T4575] device syzkaller0 entered promiscuous mode [ 85.458677][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.494451][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.607053][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.631980][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.688707][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.733232][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.757991][ T4327] device veth0_vlan entered promiscuous mode [ 85.862805][ T4327] device veth1_vlan entered promiscuous mode [ 85.904069][ T4272] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.997208][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 86.021219][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.035539][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.052827][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.089958][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.135617][ T4327] device veth0_macvtap entered promiscuous mode [ 86.154649][ T4272] usb 4-1: Using ep0 maxpacket: 32 [ 86.188434][ T4327] device veth1_macvtap entered promiscuous mode [ 86.274177][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 86.311548][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.313975][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.351738][ T4272] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 86.392712][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.413513][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.453228][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.479326][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.504237][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.530996][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.547396][ T4272] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 86.552612][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.568324][ T4272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.596552][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.609953][ T4272] usb 4-1: Product: syz [ 86.620082][ T4272] usb 4-1: Manufacturer: syz [ 86.631986][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.640433][ T4272] usb 4-1: SerialNumber: syz [ 86.653481][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.670816][ T4272] usb 4-1: config 0 descriptor?? [ 86.696714][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.736611][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.769884][ T21] cfg80211: failed to load regulatory.db [ 86.783382][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.808586][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.818991][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.835247][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 86.835265][ T26] audit: type=1800 audit(1791955620.325:17): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.82" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 86.862687][ T4609] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 86.872161][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.882943][ T4609] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 86.892727][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.913638][ T4609] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 86.933982][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.940061][ T7] usb 4-1: USB disconnect, device number 3 [ 86.953884][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.982769][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.998409][ T4609] syz.2.82 (4609) used greatest stack depth: 19888 bytes left [ 87.024565][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.031990][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.044719][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.081720][ T4327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.105946][ T4327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129534][ T4327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.154646][ T4327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375201][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.395348][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.424951][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.464055][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.480996][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.513311][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.568346][ T4639] device syzkaller0 entered promiscuous mode [ 88.043719][ T4649] Invalid ELF header magic: != ELF [ 88.592607][ T4651] loop3: detected capacity change from 0 to 8 [ 89.602601][ T4655] ip_tables: iptables: counters copy to user failed while replacing table [ 89.621762][ T4655] ip_tables: iptables: counters copy to user failed while replacing table [ 89.623848][ C1] sched: RT throttling activated [ 89.867713][ T4663] loop5: detected capacity change from 0 to 512 [ 89.989735][ T1108] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 90.001218][ T4663] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.92: iget: bad i_size value: 38620345925642 [ 90.018418][ T1108] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0001/input/input5 [ 90.034991][ T4663] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.92: couldn't read orphan inode 15 (err -117) [ 90.080151][ T4663] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.420184][ T4673] fido_id[4673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.435635][ T4663] loop5: detected capacity change from 0 to 2048 [ 90.490899][ T4685] loop4: detected capacity change from 0 to 512 [ 90.828488][ T4663] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.140410][ T4685] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 91.322393][ T4685] EXT4-fs (loop4): 1 truncate cleaned up [ 91.397305][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 91.983196][ T26] audit: type=1800 audit(1791955625.475:18): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.98" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 92.180050][ T2236] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 92.192160][ T2236] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 92.198854][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 92.200670][ T2236] CPU: 0 PID: 2236 Comm: kworker/0:2 Not tainted syzkaller #0 [ 92.200690][ T2236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.200699][ T2236] Workqueue: events work_for_cpu_fn [ 92.232338][ T2236] RIP: 0010:i915_pci_probe+0xa1/0x450 [ 92.237753][ T2236] Code: fc fc 49 8d 5e 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 6d e9 41 fd 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 e0 02 00 00 0f b7 1b 89 de 83 e6 04 31 [ 92.237957][ T4705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 92.257473][ T2236] RSP: 0018:ffffc9000660fae0 EFLAGS: 00010206 [ 92.257497][ T2236] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff8880262fd940 [ 92.257507][ T2236] RDX: 0000000000000000 RSI: ffffffff8a7edd80 RDI: ffff88801c7a8000 [ 92.257516][ T2236] RBP: ffffc9000660fbd0 R08: ffffffff91015117 R09: 1ffffffff2202a22 [ 92.257525][ T2236] R10: dffffc0000000000 R11: fffffbfff2202a23 R12: 1ffff92000cc1f64 [ 92.257535][ T2236] R13: ffff88801c7a8000 R14: ffffffff8a7edd80 R15: dffffc0000000000 [ 92.257544][ T2236] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.257557][ T2236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.257567][ T2236] CR2: 0000555566b96a38 CR3: 0000000023bb7000 CR4: 00000000003506f0 [ 92.336124][ T2236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.344096][ T2236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.352097][ T2236] Call Trace: [ 92.355374][ T2236] [ 92.358408][ T2236] ? lockdep_hardirqs_on+0x94/0x140 [ 92.363614][ T2236] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.369550][ T2236] ? i915_unregister_pci_driver+0x20/0x20 [ 92.375273][ T2236] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.381293][ T2236] ? __lock_acquire+0x7d40/0x7d40 [ 92.386322][ T2236] ? i915_unregister_pci_driver+0x20/0x20 [ 92.392050][ T2236] local_pci_probe+0xc5/0x150 [ 92.396737][ T2236] ? remove_id_store+0x5a0/0x5a0 [ 92.401846][ T2236] work_for_cpu_fn+0x50/0x80 [ 92.406433][ T2236] process_one_work+0x867/0xff0 [ 92.411287][ T2236] ? worker_detach_from_pool+0x240/0x240 [ 92.416952][ T2236] ? lockdep_hardirqs_off+0x70/0x100 [ 92.422334][ T2236] ? _raw_spin_lock_irq+0xb7/0xf0 [ 92.427360][ T2236] ? _raw_spin_lock_irqsave+0x100/0x100 [ 92.432907][ T2236] ? wq_worker_running+0x97/0x170 [ 92.438089][ T2236] worker_thread+0xe01/0x12a0 [ 92.442816][ T2236] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.448709][ T2236] kthread+0x42e/0x520 [ 92.452778][ T2236] ? rcu_lock_release+0x20/0x20 [ 92.457716][ T2236] ? kthread_blkcg+0xd0/0xd0 [ 92.462302][ T2236] ret_from_fork+0x1f/0x30 [ 92.466729][ T2236] [ 92.469776][ T2236] Modules linked in: [ 92.521281][ T2236] ---[ end trace 051db80f3de30c5f ]--- [ 92.527298][ T2236] RIP: 0010:i915_pci_probe+0xa1/0x450 [ 92.532805][ T2236] Code: fc fc 49 8d 5e 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 6d e9 41 fd 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 e0 02 00 00 0f b7 1b 89 de 83 e6 04 31 [ 92.554551][ T2236] RSP: 0018:ffffc9000660fae0 EFLAGS: 00010206 [ 92.560755][ T2236] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff8880262fd940 [ 92.570167][ T2236] RDX: 0000000000000000 RSI: ffffffff8a7edd80 RDI: ffff88801c7a8000 [ 92.580374][ T2236] RBP: ffffc9000660fbd0 R08: ffffffff91015117 R09: 1ffffffff2202a22 [ 92.589741][ T2236] R10: dffffc0000000000 R11: fffffbfff2202a23 R12: 1ffff92000cc1f64 [ 92.607082][ T2236] R13: ffff88801c7a8000 R14: ffffffff8a7edd80 R15: dffffc0000000000 [ 92.616088][ T2236] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.626560][ T2236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.633278][ T2236] CR2: 00007fccc1aae286 CR3: 000000007dd26000 CR4: 00000000003506f0 [ 92.642347][ T2236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.651668][ T2236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.660632][ T2236] Kernel panic - not syncing: Fatal exception [ 92.667001][ T2236] Kernel Offset: disabled [ 92.671337][ T2236] Rebooting in 86400 seconds..