last executing test programs: 3.667786626s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xd, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) 2.187253211s ago: executing program 3 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000011c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) 1.936548089s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000240)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r3, 0x40140921, &(0x7f00000002c0)="0000000001") ioctl(r3, 0x400c0930, 0x0) write(r0, &(0x7f0000000e40)='3', 0x4e) 1.936450281s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) 1.934803774s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 1.864667671s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) 1.564309056s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/sys/net/core/rps_default_mask\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.483746763s ago: executing program 2 (id=25): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1401aa0800060003"], 0x30}}, 0x4000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000480)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 1.136433712s ago: executing program 2 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.044855477s ago: executing program 2 (id=27): r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0x6, 0x1, 0x0, r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000740)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 648.175867ms ago: executing program 1 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000011c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) 608.181917ms ago: executing program 3 (id=30): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000011c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) 574.778306ms ago: executing program 1 (id=31): symlink(&(0x7f00000008c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001940)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='+p', 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000019c0)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a40)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 373.933102ms ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) 371.656858ms ago: executing program 1 (id=33): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='t', 0x1) 263.785799ms ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/sys/net/core/rps_default_mask\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 263.542136ms ago: executing program 0 (id=35): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000240)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r3, 0x40140921, &(0x7f00000002c0)="0000000001") ioctl(r3, 0x400c0930, 0x0) write(r0, &(0x7f0000000e40)='3', 0x4e) 195.2753ms ago: executing program 1 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 193.604061ms ago: executing program 3 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 92.212311ms ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) 0s ago: executing program 2 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f00000011c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 66.004674][ T5598] cgroup: Unknown subsys name 'net' [ 66.099486][ T5598] cgroup: Unknown subsys name 'cpuset' [ 66.109071][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.481270][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.757208][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.758954][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.760507][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.760911][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.761154][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.762777][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.763761][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.764658][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.779525][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.780170][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.780633][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.781211][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.781500][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.781672][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.782805][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.783435][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.790501][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.790605][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.794375][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.795504][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.540484][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.541791][ T5610] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.556817][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.561326][ T5611] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.568999][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.570235][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.848317][ T5608] infiniband rxe0: set active [ 70.849043][ T5608] infiniband rxe0: added rxe_eth0 [ 70.870573][ T5608] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.870608][ T5608] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.870646][ T5608] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.873414][ T2267] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.942673][ T5608] RDS/IB: rxe0: added [ 70.943001][ T5608] smc: adding ib device rxe0 with port count 1 [ 70.943084][ T5608] smc: ib device rxe0 port 1 has no pnetid [ 70.953285][ T2267] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.980109][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.296337][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.410798][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410866][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.528240][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.528873][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.529175][ T5609] bridge_slave_0: entered allmulticast mode [ 71.530185][ T5609] bridge_slave_0: entered promiscuous mode [ 71.548701][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.548798][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.549207][ T5610] bridge_slave_0: entered allmulticast mode [ 71.550830][ T5610] bridge_slave_0: entered promiscuous mode [ 71.554282][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.622454][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.622594][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.622705][ T5609] bridge_slave_1: entered allmulticast mode [ 71.625550][ T5609] bridge_slave_1: entered promiscuous mode [ 71.656027][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.656085][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.656498][ T5610] bridge_slave_1: entered allmulticast mode [ 71.661555][ T5610] bridge_slave_1: entered promiscuous mode [ 71.701618][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.701721][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.701833][ T5611] bridge_slave_0: entered allmulticast mode [ 71.704831][ T5611] bridge_slave_0: entered promiscuous mode [ 71.744548][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.744754][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.744852][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.744971][ T5611] bridge_slave_1: entered allmulticast mode [ 71.777030][ T5611] bridge_slave_1: entered promiscuous mode [ 71.800852][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.803610][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.815553][ T5618] Bluetooth: hci3: command tx timeout [ 71.831591][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.861898][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.863775][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.886342][ T5618] Bluetooth: hci1: command tx timeout [ 71.886715][ T5618] Bluetooth: hci2: command tx timeout [ 71.886723][ T54] Bluetooth: hci0: command tx timeout [ 71.891018][ T5610] team0: Port device team_slave_0 added [ 71.922136][ T5609] team0: Port device team_slave_0 added [ 71.922434][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.925304][ T5610] team0: Port device team_slave_1 added [ 71.950743][ T5611] team0: Port device team_slave_0 added [ 71.952901][ T5609] team0: Port device team_slave_1 added [ 71.955344][ T5611] team0: Port device team_slave_1 added [ 72.015938][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.015962][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.015984][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.096832][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.096848][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.096870][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.098011][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.098022][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.098043][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.101339][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.101352][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.101373][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.102802][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.102813][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.102834][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.157524][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.157541][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.157563][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.387350][ T5609] hsr_slave_0: entered promiscuous mode [ 72.388068][ T5609] hsr_slave_1: entered promiscuous mode [ 72.410633][ T5610] hsr_slave_0: entered promiscuous mode [ 72.411205][ T5610] hsr_slave_1: entered promiscuous mode [ 72.411613][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.411689][ T5610] Cannot create hsr debugfs directory [ 72.479962][ T5611] hsr_slave_0: entered promiscuous mode [ 72.480566][ T5611] hsr_slave_1: entered promiscuous mode [ 72.480952][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 72.480969][ T5611] Cannot create hsr debugfs directory [ 72.879870][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.884251][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.885076][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.890191][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.922374][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.925457][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.927482][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.950134][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.983788][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.983967][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.984369][ T5608] bridge_slave_0: entered allmulticast mode [ 72.985753][ T5608] bridge_slave_0: entered promiscuous mode [ 73.021992][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.022088][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.022297][ T5608] bridge_slave_1: entered allmulticast mode [ 73.023208][ T5608] bridge_slave_1: entered promiscuous mode [ 73.073534][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.078669][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.115975][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.127849][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.130377][ T5608] team0: Port device team_slave_0 added [ 73.133263][ T5608] team0: Port device team_slave_1 added [ 73.161579][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.164564][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.195583][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.205552][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.206116][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.217297][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.222966][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.222980][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.223001][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.225272][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.225310][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.226047][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.336998][ T5608] hsr_slave_0: entered promiscuous mode [ 73.337742][ T5608] hsr_slave_1: entered promiscuous mode [ 73.338177][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 73.338189][ T5608] Cannot create hsr debugfs directory [ 73.400724][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.403111][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.430960][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.434412][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.459632][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.462011][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.498088][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.500234][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.572549][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.640991][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.644266][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.649987][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.650868][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.658708][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.669333][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.680494][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.690799][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.690936][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.698554][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.712334][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.743265][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.745917][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.745974][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.803164][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.816197][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.816298][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.836304][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.836407][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.853275][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.887217][ T54] Bluetooth: hci3: command tx timeout [ 73.918198][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.952137][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.952239][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.967166][ T5612] Bluetooth: hci2: command tx timeout [ 73.967247][ T54] Bluetooth: hci0: command tx timeout [ 73.972740][ T54] Bluetooth: hci1: command tx timeout [ 74.008374][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.008476][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.161924][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.211475][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.240557][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.240655][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.271583][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.271681][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.837551][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.959460][ T5609] veth0_vlan: entered promiscuous mode [ 74.983849][ T5609] veth1_vlan: entered promiscuous mode [ 75.064643][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.069691][ T5609] veth0_macvtap: entered promiscuous mode [ 75.080292][ T5609] veth1_macvtap: entered promiscuous mode [ 75.121589][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.183031][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.197252][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.241950][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.290637][ T5611] veth0_vlan: entered promiscuous mode [ 75.331313][ T5610] veth0_vlan: entered promiscuous mode [ 75.347561][ T5611] veth1_vlan: entered promiscuous mode [ 75.370912][ T5610] veth1_vlan: entered promiscuous mode [ 75.401094][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.401119][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.426889][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468254][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.468273][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.483720][ T5608] veth0_vlan: entered promiscuous mode [ 75.515456][ T5608] veth1_vlan: entered promiscuous mode [ 75.531756][ T5611] veth0_macvtap: entered promiscuous mode [ 75.535516][ T5610] veth0_macvtap: entered promiscuous mode [ 75.562485][ T5611] veth1_macvtap: entered promiscuous mode [ 75.565234][ T5610] veth1_macvtap: entered promiscuous mode [ 75.602422][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.623440][ T5608] veth0_macvtap: entered promiscuous mode [ 75.629244][ T5608] veth1_macvtap: entered promiscuous mode [ 75.645522][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.677017][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.687470][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.692936][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.702727][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.720855][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.819832][ T5765] ======================================================= [ 75.819832][ T5765] WARNING: The mand mount option has been deprecated and [ 75.819832][ T5765] and is ignored by this kernel. Remove the mand [ 75.819832][ T5765] option from the mount to silence this warning. [ 75.819832][ T5765] ======================================================= [ 75.880806][ T989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880986][ T989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.881141][ T989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940077][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940129][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940169][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940210][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940265][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940302][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940342][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940382][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940420][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940460][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940499][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.940539][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.974434][ T54] Bluetooth: hci3: command tx timeout [ 76.047115][ T54] Bluetooth: hci1: command tx timeout [ 76.047149][ T54] Bluetooth: hci0: command tx timeout [ 76.047168][ T54] Bluetooth: hci2: command tx timeout [ 76.120661][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.120680][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.243027][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.243040][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.319352][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.319366][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.470499][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.470513][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.593323][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.593338][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.720430][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.720446][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.124347][ T5773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.278593][ T5773] md/raid:md0: not enough operational devices (3/3 failed) [ 77.337634][ T5710] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.500249][ T5710] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 77.502370][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.502409][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.540143][ T5773] md/raid:md0: failed to run raid set. [ 77.540165][ T5773] md: pers->run() failed ... [ 77.555827][ T5710] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 77.557398][ T5710] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 77.557480][ T5710] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 77.564301][ T5710] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 77.564428][ T5710] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 77.574491][ T5710] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 77.590742][ T5710] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 77.591343][ T5710] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 77.599040][ T5710] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 77.766323][ T5691] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.938370][ T5691] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 77.939661][ T5691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.939725][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.980924][ T5691] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 77.981192][ T5691] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 77.981274][ T5691] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 78.010357][ T5691] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 78.010464][ T5691] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 78.032623][ T5691] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 78.034851][ T5691] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 78.034944][ T5691] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 78.046595][ T5612] Bluetooth: hci3: command tx timeout [ 78.072160][ T5691] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 78.126573][ T5612] Bluetooth: hci2: command tx timeout [ 78.126602][ T5612] Bluetooth: hci0: command tx timeout [ 78.126623][ T5612] Bluetooth: hci1: command tx timeout [ 78.188420][ T4943] usb 3-1: USB disconnect, device number 2 [ 78.206025][ T4943] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 78.230068][ T4943] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 78.230941][ T4943] keyspan 3-1:1.0: device disconnected [ 78.350846][ T5811] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.521470][ T5816] nvmet: Invalid value 't' for trtype [ 78.794053][ T5822] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.816838][ T5822] md: array md0 already has disks! [ 78.856675][ T5822] md: could not open device unknown-block(1,0). [ 78.856759][ T5822] md: error, md_import_device() returned -16 [ 78.905561][ T5822] md/raid:md0: not enough operational devices (3/3 failed) [ 78.986311][ T5711] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.038702][ T5822] md/raid:md0: failed to run raid set. [ 79.038708][ T5822] md: pers->run() failed ... [ 79.058222][ T193] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.147217][ T5711] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 79.149815][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.149863][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.169197][ T5711] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 79.169453][ T5711] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 79.169530][ T5711] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 79.174788][ T5711] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 79.174878][ T5711] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.197502][ T5711] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 79.200774][ T5711] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.200864][ T5711] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.202903][ T5711] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 79.219687][ T193] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 79.222212][ T193] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.222273][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.256899][ T193] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 79.265216][ T193] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 79.265295][ T193] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 79.287038][ T193] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 79.287144][ T193] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.299866][ T193] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB4 [ 79.307736][ T193] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.314329][ T193] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.332899][ T193] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB5 [ 79.410264][ T5691] usb 2-1: USB disconnect, device number 2 [ 79.438771][ T5691] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 79.442972][ T5691] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 79.443829][ T5691] keyspan 2-1:1.0: device disconnected [ 79.503058][ T10] usb 4-1: USB disconnect, device number 2 [ 79.541238][ T10] keyspan_2 ttyUSB4: Keyspan 2 port adapter converter now disconnected from ttyUSB4 [ 79.564974][ T10] keyspan_2 ttyUSB5: Keyspan 2 port adapter converter now disconnected from ttyUSB5 [ 79.565843][ T10] keyspan 4-1:1.0: device disconnected [ 80.232606][ T193] usb 1-1: USB disconnect, device number 2 [ 80.253253][ T193] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 80.273450][ T193] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 80.284548][ T193] keyspan 1-1:1.0: device disconnected [ 80.431273][ T5856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.456627][ T5856] md: array md0 already has disks! [ 80.488434][ T5856] md: could not open device unknown-block(1,0). [ 80.488487][ T5856] md: error, md_import_device() returned -16 [ 80.599267][ T5856] FAULT_INJECTION: forcing a failure. [ 80.599267][ T5856] name failslab, interval 1, probability 0, space 0, times 0 [ 80.599318][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 80.599342][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.599362][ T5856] Call Trace: [ 80.599374][ T5856] [ 80.599384][ T5856] dump_stack_lvl+0xe8/0x150 [ 80.599416][ T5856] should_fail_ex+0x3eb/0x540 [ 80.599452][ T5856] should_failslab+0xa8/0x100 [ 80.599478][ T5856] __kmalloc_noprof+0xf9/0x710 [ 80.599511][ T5856] ? __raw_spin_lock_init+0x45/0x100 [ 80.599536][ T5856] ? setup_conf+0xc15/0x2ad0 [ 80.599559][ T5856] ? setup_conf+0xc15/0x2ad0 [ 80.599591][ T5856] setup_conf+0xc15/0x2ad0 [ 80.599634][ T5856] ? __pfx_setup_conf+0x10/0x10 [ 80.599670][ T5856] raid5_run+0x8cc/0x2560 [ 80.599693][ T5856] ? _raw_spin_unlock+0x28/0x50 [ 80.599713][ T5856] ? get_pers+0x22b/0x2e0 [ 80.599740][ T5856] ? __pfx_get_pers+0x10/0x10 [ 80.599781][ T5856] md_run+0xc3d/0x1cd0 [ 80.599816][ T5856] ? __pfx_md_run+0x10/0x10 [ 80.599855][ T5856] do_md_run+0x35/0x720 [ 80.599880][ T5856] ? md_ioctl+0x1e23/0x2610 [ 80.599910][ T5856] md_ioctl+0x1e2b/0x2610 [ 80.599940][ T5856] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 80.599970][ T5856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 80.599997][ T5856] ? __pfx_md_ioctl+0x10/0x10 [ 80.600024][ T5856] ? do_vfs_ioctl+0x116f/0x1530 [ 80.600049][ T5856] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.600086][ T5856] ? do_futex+0x3e7/0x4e0 [ 80.600128][ T5856] ? __pfx_md_ioctl+0x10/0x10 [ 80.600156][ T5856] blkdev_ioctl+0x5e3/0x740 [ 80.600180][ T5856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.600206][ T5856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 80.600228][ T5856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.600250][ T5856] __se_sys_ioctl+0xfc/0x170 [ 80.600276][ T5856] do_syscall_64+0x166/0x520 [ 80.600300][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.600321][ T5856] ? clear_bhb_loop+0x70/0xc0 [ 80.600345][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.600365][ T5856] RIP: 0033:0x7fb75b99f559 [ 80.600393][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.600411][ T5856] RSP: 002b:00007fb75c93a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.600433][ T5856] RAX: ffffffffffffffda RBX: 00007fb75bc25fa0 RCX: 00007fb75b99f559 [ 80.600449][ T5856] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 80.600462][ T5856] RBP: 00007fb75ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.600475][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.600488][ T5856] R13: 00007fb75bc26038 R14: 00007fb75bc25fa0 R15: 00007ffe4f8266a8 [ 80.600522][ T5856] [ 80.600676][ T5856] ================================================================== [ 80.600687][ T5856] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0 [ 80.600711][ T5856] Read of size 8 at addr 0000000000000028 by task syz.0.35/5856 [ 80.600727][ T5856] [ 80.600737][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 80.600758][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.600777][ T5856] Call Trace: [ 80.600786][ T5856] [ 80.600794][ T5856] dump_stack_lvl+0xe8/0x150 [ 80.600819][ T5856] ? free_conf+0x81/0x5d0 [ 80.600841][ T5856] kasan_report+0x117/0x150 [ 80.600864][ T5856] ? free_conf+0x81/0x5d0 [ 80.600891][ T5856] kasan_check_range+0x264/0x2c0 [ 80.600914][ T5856] free_conf+0x81/0x5d0 [ 80.600939][ T5856] setup_conf+0x1720/0x2ad0 [ 80.600970][ T5856] ? __pfx_setup_conf+0x10/0x10 [ 80.600995][ T5856] raid5_run+0x8cc/0x2560 [ 80.601015][ T5856] ? _raw_spin_unlock+0x28/0x50 [ 80.601033][ T5856] ? get_pers+0x22b/0x2e0 [ 80.601057][ T5856] ? __pfx_get_pers+0x10/0x10 [ 80.601084][ T5856] md_run+0xc3d/0x1cd0 [ 80.601111][ T5856] ? __pfx_md_run+0x10/0x10 [ 80.601140][ T5856] do_md_run+0x35/0x720 [ 80.601162][ T5856] ? md_ioctl+0x1e23/0x2610 [ 80.601188][ T5856] md_ioctl+0x1e2b/0x2610 [ 80.601214][ T5856] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 80.601241][ T5856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 80.601267][ T5856] ? __pfx_md_ioctl+0x10/0x10 [ 80.601292][ T5856] ? do_vfs_ioctl+0x116f/0x1530 [ 80.601315][ T5856] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.601342][ T5856] ? do_futex+0x3e7/0x4e0 [ 80.601371][ T5856] ? __pfx_md_ioctl+0x10/0x10 [ 80.601397][ T5856] blkdev_ioctl+0x5e3/0x740 [ 80.601419][ T5856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.601441][ T5856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 80.601461][ T5856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.601481][ T5856] __se_sys_ioctl+0xfc/0x170 [ 80.601503][ T5856] do_syscall_64+0x166/0x520 [ 80.601525][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.601545][ T5856] ? clear_bhb_loop+0x70/0xc0 [ 80.601567][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.601585][ T5856] RIP: 0033:0x7fb75b99f559 [ 80.601602][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.601618][ T5856] RSP: 002b:00007fb75c93a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.601638][ T5856] RAX: ffffffffffffffda RBX: 00007fb75bc25fa0 RCX: 00007fb75b99f559 [ 80.601653][ T5856] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 80.601665][ T5856] RBP: 00007fb75ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.601679][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.601692][ T5856] R13: 00007fb75bc26038 R14: 00007fb75bc25fa0 R15: 00007ffe4f8266a8 [ 80.601718][ T5856] [ 80.601725][ T5856] ================================================================== [ 80.601803][ T5856] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.171690][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 81.180832][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.190885][ T5856] Call Trace: [ 81.194159][ T5856] [ 81.197083][ T5856] vpanic+0x26f/0x710 [ 81.201069][ T5856] panic+0xc5/0xd0 [ 81.204789][ T5856] ? __pfx_panic+0x10/0x10 [ 81.209204][ T5856] ? preempt_schedule_thunk+0x16/0x40 [ 81.214574][ T5856] ? free_conf+0x81/0x5d0 [ 81.218896][ T5856] check_panic_on_warn+0x89/0xb0 [ 81.223833][ T5856] ? free_conf+0x81/0x5d0 [ 81.228161][ T5856] end_report+0x73/0x170 [ 81.232398][ T5856] ? free_conf+0x81/0x5d0 [ 81.236759][ T5856] kasan_report+0x128/0x150 [ 81.241262][ T5856] ? free_conf+0x81/0x5d0 [ 81.245590][ T5856] kasan_check_range+0x264/0x2c0 [ 81.250524][ T5856] free_conf+0x81/0x5d0 [ 81.254696][ T5856] setup_conf+0x1720/0x2ad0 [ 81.259217][ T5856] ? __pfx_setup_conf+0x10/0x10 [ 81.264081][ T5856] raid5_run+0x8cc/0x2560 [ 81.268418][ T5856] ? _raw_spin_unlock+0x28/0x50 [ 81.273268][ T5856] ? get_pers+0x22b/0x2e0 [ 81.277596][ T5856] ? __pfx_get_pers+0x10/0x10 [ 81.282271][ T5856] md_run+0xc3d/0x1cd0 [ 81.286339][ T5856] ? __pfx_md_run+0x10/0x10 [ 81.290840][ T5856] do_md_run+0x35/0x720 [ 81.294992][ T5856] ? md_ioctl+0x1e23/0x2610 [ 81.299490][ T5856] md_ioctl+0x1e2b/0x2610 [ 81.303814][ T5856] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 81.309442][ T5856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 81.315074][ T5856] ? __pfx_md_ioctl+0x10/0x10 [ 81.319748][ T5856] ? do_vfs_ioctl+0x116f/0x1530 [ 81.324596][ T5856] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 81.329623][ T5856] ? do_futex+0x3e7/0x4e0 [ 81.333954][ T5856] ? __pfx_md_ioctl+0x10/0x10 [ 81.338629][ T5856] blkdev_ioctl+0x5e3/0x740 [ 81.343132][ T5856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 81.348159][ T5856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 81.353090][ T5856] ? __pfx_blkdev_ioctl+0x10/0x10 [ 81.358103][ T5856] __se_sys_ioctl+0xfc/0x170 [ 81.362687][ T5856] do_syscall_64+0x166/0x520 [ 81.367269][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.373328][ T5856] ? clear_bhb_loop+0x70/0xc0 [ 81.378027][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.383914][ T5856] RIP: 0033:0x7fb75b99f559 [ 81.388322][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.407918][ T5856] RSP: 002b:00007fb75c93a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.416324][ T5856] RAX: ffffffffffffffda RBX: 00007fb75bc25fa0 RCX: 00007fb75b99f559 [ 81.424286][ T5856] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 81.432247][ T5856] RBP: 00007fb75ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.440210][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.448176][ T5856] R13: 00007fb75bc26038 R14: 00007fb75bc25fa0 R15: 00007ffe4f8266a8 [ 81.456153][ T5856] [ 81.459299][ T5856] Kernel Offset: disabled [ 81.463614][ T5856] Rebooting in 86400 seconds..