last executing test programs: 1m0.373771552s ago: executing program 3 (id=812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcff", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 58.328234577s ago: executing program 3 (id=818): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 57.270710206s ago: executing program 3 (id=825): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 56.727612785s ago: executing program 3 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 56.099621292s ago: executing program 3 (id=832): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008001100070000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 54.95410462s ago: executing program 4 (id=840): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 54.587367801s ago: executing program 4 (id=843): execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000680)={[&(0x7f0000000540)='bridge_slave_1\x00', 0xffffffffffffffff]}) 54.524538892s ago: executing program 4 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='/dev/nullb1', 0xb) 54.436211561s ago: executing program 3 (id=845): syz_usb_connect(0x3, 0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502", @ANYRES16, @ANYRESDEC=0x0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000c, 0x9) 54.413434809s ago: executing program 4 (id=846): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x810000, &(0x7f0000000040)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@unhide}, {@uid}, {@uid_forget}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@fileset}, {@shortad}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 54.13828247s ago: executing program 32 (id=845): syz_usb_connect(0x3, 0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502", @ANYRES16, @ANYRESDEC=0x0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000c, 0x9) 53.511840967s ago: executing program 4 (id=851): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x1, 0x0) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000), 0x0, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r5, 0x40047452, 0x0) 52.921149541s ago: executing program 4 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) close(0x3) 52.452746596s ago: executing program 33 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) close(0x3) 40.6552431s ago: executing program 0 (id=901): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 39.558623502s ago: executing program 0 (id=905): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x200008d4) 38.709884302s ago: executing program 0 (id=908): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x40000) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 35.662926838s ago: executing program 0 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 35.222239213s ago: executing program 6 (id=924): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 35.002845586s ago: executing program 0 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 34.944222865s ago: executing program 6 (id=926): mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='t', 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r0, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 33.72010054s ago: executing program 0 (id=930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x1, 0x0) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000), 0x0, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) msgget(0x1, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r4, 0x40047452, 0x0) 33.44573001s ago: executing program 34 (id=930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x1, 0x0) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000), 0x0, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) msgget(0x1, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r4, 0x40047452, 0x0) 33.420540828s ago: executing program 6 (id=936): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 33.268175798s ago: executing program 6 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 32.662028538s ago: executing program 6 (id=940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 31.572187288s ago: executing program 6 (id=944): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008001100070000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 30.496731944s ago: executing program 35 (id=944): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008001100070000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.508398941s ago: executing program 7 (id=1069): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 8.895762783s ago: executing program 8 (id=1075): r0 = userfaultfd(0x80801) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r1, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 7.942216268s ago: executing program 7 (id=1078): socket$inet6(0xa, 0x5, 0x8) r0 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 7.446582862s ago: executing program 8 (id=1081): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='/dev/nullb1', 0xb) 7.42162924s ago: executing program 7 (id=1082): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x88, r1, 0xacf5e67dd0b583a1, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1, 0x2, 0x2, 0x1000}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x81, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x61}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 7.251859246s ago: executing program 8 (id=1085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1018413, &(0x7f00000001c0), 0x3, 0x526, &(0x7f0000001300)="$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") 7.224278035s ago: executing program 7 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 7.158102587s ago: executing program 1 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) 6.487620069s ago: executing program 7 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}]) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.18026605s ago: executing program 1 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004486}, 0x4000000) 6.161628576s ago: executing program 1 (id=1091): r0 = userfaultfd(0x80801) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r1, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 5.799197796s ago: executing program 8 (id=1093): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x80342, 0xcc) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='^', 0xb2b1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109023000010000100309040000010300020009210000080122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="002207000000a09477", @ANYBLOB='\x00'], 0x0}, 0x0) sendfile(r1, r2, 0x0, 0xe3aa6ea) ftruncate(r2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x68}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000000)='./file0\x00') 5.595258743s ago: executing program 7 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 5.326731301s ago: executing program 36 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 5.312810846s ago: executing program 5 (id=1099): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfa, 0x1528, &(0x7f0000000140)="$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") execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 5.29881011s ago: executing program 1 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 4.653672774s ago: executing program 1 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) 4.584146216s ago: executing program 5 (id=1102): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.957223444s ago: executing program 5 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.955076085s ago: executing program 2 (id=1113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.632089741s ago: executing program 1 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}]) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.582670187s ago: executing program 37 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000002480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x2}]) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.566673743s ago: executing program 2 (id=1107): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.566106973s ago: executing program 5 (id=1108): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigsuspend(0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc138fd06, &(0x7f0000000000)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) write$binfmt_aout(r0, &(0x7f0000001240)={{0x10b, 0x6b, 0x9, 0xb3, 0x2ee, 0x4, 0x364, 0x4}, "23817497ff9fe1cc00effb22b26b7d36f8736ff58709bde7afbea4753c9ee1da17e7c4dba7bf58"}, 0x47) 2.557357236s ago: executing program 8 (id=1109): r0 = userfaultfd(0x80801) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r1, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 2.132647055s ago: executing program 5 (id=1110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 1.431072988s ago: executing program 5 (id=1111): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) execveat$binfmt(r0, 0x0, 0x0, 0x0, 0x800) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x8, 0x7}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1.42343889s ago: executing program 2 (id=1112): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.382888263s ago: executing program 8 (id=1114): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000002200)=ANY=[@ANYBLOB="12010003000000201e040030400001020301090269000301008002080b01010104"], 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x0, 0x478, &(0x7f00000014c0)="$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") 1.061999839s ago: executing program 2 (id=1115): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 992.402242ms ago: executing program 2 (id=1116): r0 = epoll_create1(0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) syz_open_dev$usbfs(0x0, 0x76, 0x101301) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x3, 0xff, 0x66c3}, 0x20) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) creat(0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) 0s ago: executing program 2 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.445466][ T4969] Call Trace: [ 100.445512][ T4969] [ 100.445521][ T4969] dump_stack_lvl+0x188/0x250 [ 100.445551][ T4969] ? show_regs_print_info+0x20/0x20 [ 100.445573][ T4969] ? load_image+0x410/0x410 [ 100.445597][ T4969] ? __might_sleep+0xf0/0xf0 [ 100.445619][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 100.445651][ T4969] should_fail+0x383/0x4b0 [ 100.445679][ T4969] should_failslab+0x5/0x20 [ 100.487382][ T4285] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 100.491840][ T4969] slab_pre_alloc_hook+0x51/0xc0 [ 100.491875][ T4969] kmem_cache_alloc_node+0x47/0x2c0 [ 100.491896][ T4969] ? __alloc_skb+0xf4/0x750 [ 100.491923][ T4969] __alloc_skb+0xf4/0x750 [ 100.491950][ T4969] ctrl_getfamily+0x3cd/0x5b0 [ 100.491974][ T4969] ? nla_put_string+0x30/0x30 [ 100.491994][ T4969] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 100.492022][ T4969] genl_rcv_msg+0xd0b/0xfa0 [ 100.492054][ T4969] ? genl_bind+0x370/0x370 [ 100.492083][ T4969] ? __dev_queue_xmit+0x1b64/0x2e50 [ 100.492104][ T4969] ? verify_lock_unused+0x140/0x140 [ 100.507101][ T4285] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.507480][ T4969] ? dev_queue_xmit+0x20/0x20 [ 100.517294][ T4285] usb 1-1: config 168 interface 0 has no altsetting 0 [ 100.517612][ T4969] ? nla_put_string+0x30/0x30 [ 100.590966][ T4969] ? ctrl_getfamily+0x5b0/0x5b0 [ 100.595855][ T4969] netlink_rcv_skb+0x1e9/0x430 [ 100.600638][ T4969] ? genl_bind+0x370/0x370 [ 100.605068][ T4969] ? netlink_ack+0xb10/0xb10 [ 100.609687][ T4969] ? down_read+0x1aa/0x2e0 [ 100.614120][ T4969] genl_rcv+0x24/0x40 [ 100.618145][ T4969] netlink_unicast+0x78f/0x940 [ 100.622938][ T4969] netlink_sendmsg+0x8ba/0xbe0 [ 100.627723][ T4969] ? netlink_getsockopt+0x570/0x570 [ 100.632942][ T4969] ? aa_sock_msg_perm+0x94/0x150 [ 100.637900][ T4969] ? apparmor_socket_sendmsg+0x88/0x230 [ 100.643459][ T4969] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.648765][ T4969] ? security_socket_sendmsg+0x7c/0xa0 [ 100.654242][ T4969] __sys_sendto+0x46d/0x620 [ 100.658764][ T4969] ? __ia32_sys_getpeername+0x80/0x80 [ 100.664175][ T4969] ? lock_chain_count+0x20/0x20 [ 100.669051][ T4969] __x64_sys_sendto+0xda/0xf0 [ 100.673752][ T4969] do_syscall_64+0x4c/0xa0 [ 100.678189][ T4969] ? clear_bhb_loop+0x30/0x80 [ 100.682890][ T4969] ? clear_bhb_loop+0x30/0x80 [ 100.687705][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.693638][ T4969] RIP: 0033:0x7f1543eb398e [ 100.698086][ T4969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.718061][ T4969] RSP: 002b:00007f1542149e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 100.726524][ T4969] RAX: ffffffffffffffda RBX: 00007f154214b6c0 RCX: 00007f1543eb398e [ 100.734514][ T4969] RDX: 0000000000000020 RSI: 00007f154214a000 RDI: 0000000000000006 [ 100.742503][ T4969] RBP: 0000000000000000 R08: 00007f1542149f04 R09: 000000000000000c [ 100.750487][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 100.758472][ T4969] R13: 00007f1542149f58 R14: 00007f154214a000 R15: 0000000000000000 [ 100.766497][ T4969] [ 100.774878][ T4962] usbdux [ 100.777874][ T4962] comedi: valid board names for ni6501 driver are: [ 100.787261][ T4962] ni6501 [ 100.790775][ T4962] comedi: valid board names for dt9812 driver are: [ 100.797432][ T4962] dt9812 [ 100.817847][ T4285] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 100.827823][ T4962] comedi: valid board names for ni_labpc_cs driver are: [ 100.835354][ T4285] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.863898][ T4285] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.885134][ T4962] ni_labpc_cs [ 100.888719][ T4285] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 100.908949][ T4962] comedi: valid board names for ni_daq_700 driver are: [ 100.916751][ T4285] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.939056][ T4962] ni_daq_700 [ 100.942559][ T4285] usb 1-1: config 168 interface 0 has no altsetting 0 [ 100.958298][ T4962] comedi: valid board names for labpc_pci driver are: [ 101.005684][ T4962] labpc_pci [ 101.017738][ T4962] comedi: valid board names for adl_pci9118 driver are: [ 101.041917][ T4962] pci9118dg [ 101.045185][ T4962] pci9118hg [ 101.055035][ T4962] pci9118hr [ 101.063350][ T4962] comedi: valid board names for 8255_pci driver are: [ 101.084745][ T4962] 8255_pci [ 101.088125][ T4962] comedi: valid board names for s526 driver are: [ 101.110969][ T4962] s526 [ 101.113822][ T4962] comedi: valid board names for multiq3 driver are: [ 101.128939][ T4962] multiq3 [ 101.132024][ T4962] comedi: valid board names for pcmuio driver are: [ 101.159028][ T4962] pcmuio48 [ 101.162202][ T4962] pcmuio96 [ 101.178967][ T4962] comedi: valid board names for pcmmio driver are: [ 101.195888][ T4962] pcmmio [ 101.198940][ T4962] comedi: valid board names for pcmda12 driver are: [ 101.205701][ T4962] pcmda12 [ 101.209472][ T4285] usb 1-1: string descriptor 0 read error: -22 [ 101.219528][ T4285] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.228776][ T4962] comedi: valid board names for pcmad driver are: [ 101.246062][ T4962] pcmad12 [ 101.249191][ T4962] pcmad16 [ 101.252235][ T4962] comedi: valid board names for ni_labpc driver are: [ 101.259291][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.268976][ T4962] lab-pc-1200 [ 101.278944][ T4962] lab-pc-1200ai [ 101.282731][ T4962] lab-pc+ [ 101.285795][ T4962] comedi: valid board names for atmio16 driver are: [ 101.308189][ T4962] atmio16 [ 101.311353][ T4962] atmio16d [ 101.320481][ T4962] comedi: valid board names for ni_at_ao driver are: [ 101.337542][ T4962] at-ao-6 [ 101.343557][ T4285] adutux 1-1:168.0: interrupt endpoints not found [ 101.348046][ T4962] at-ao-10 [ 101.358120][ T4962] comedi: valid board names for ni_at_a2150 driver are: [ 101.371445][ T4962] ni_at_a2150 [ 101.389867][ T4962] comedi: valid board names for adq12b driver are: [ 101.411810][ T4962] adq12b [ 101.414841][ T4962] comedi: valid board names for mpc624 driver are: [ 101.428955][ T4962] mpc624 [ 101.437433][ T4962] comedi: valid board names for c6xdigio driver are: [ 101.454738][ T4962] c6xdigio [ 101.458086][ T4962] comedi: valid board names for aio_iiro_16 driver are: [ 101.476544][ T4962] aio_iiro_16 [ 101.486702][ T4962] comedi: valid board names for aio_aio12_8 driver are: [ 101.497340][ T4962] aio_aio12_8 [ 101.504639][ T4962] aio_ai12_8 [ 101.508082][ T4962] aio_ao12_4 [ 101.515021][ T4962] comedi: valid board names for fl512 driver are: [ 101.525627][ T4962] fl512 [ 101.528529][ T4962] comedi: valid board names for dmm32at driver are: [ 101.551190][ T4962] dmm32at [ 101.568093][ T4962] comedi: valid board names for dt282x driver are: [ 101.591176][ T4962] dt2821 [ 101.594175][ T4962] dt2821-f [ 101.597318][ T4962] dt2821-g [ 101.609620][ T4285] usb 1-1: USB disconnect, device number 3 [ 101.637038][ T4962] dt2823 [ 101.641577][ T4962] dt2824-pgh [ 101.645005][ T4962] dt2824-pgl [ 101.648363][ T4962] dt2825 [ 101.660769][ T4962] dt2827 [ 101.663761][ T4962] dt2828 [ 101.675446][ T4962] dt2829 [ 101.684740][ T4962] dt21-ez [ 101.687827][ T4962] dt23-ez [ 101.697867][ T4962] dt24-ez [ 101.704666][ T4962] dt24-ez-pgl [ 101.708128][ T4962] comedi: valid board names for dt2817 driver are: [ 101.732402][ T4962] dt2817 [ 101.743385][ T4962] comedi: valid board names for dt2815 driver are: [ 101.761322][ T4962] dt2815 [ 101.764357][ T4962] comedi: valid board names for dt2814 driver are: [ 101.793118][ T4962] dt2814 [ 101.796206][ T4962] comedi: valid board names for dt2811 driver are: [ 101.816456][ T4962] dt2811-pgh [ 101.826574][ T4962] dt2811-pgl [ 101.836692][ T4962] comedi: valid board names for dt2801 driver are: [ 101.856931][ T4962] dt2801 [ 101.872331][ T4962] comedi: valid board names for das6402 driver are: [ 101.896146][ T4962] das6402-12 [ 101.902800][ T4962] das6402-16 [ 101.918335][ T4962] comedi: valid board names for das1800 driver are: [ 101.942956][ T4962] das-1701st [ 101.953473][ T4962] das-1701st-da [ 101.965062][ T4962] das-1702st [ 101.976654][ T4962] das-1702st-da [ 101.984528][ T4962] das-1702hr [ 101.987889][ T4962] das-1702hr-da [ 102.006594][ T4962] das-1701ao [ 102.023135][ T4962] das-1702ao [ 102.026513][ T4962] das-1801st [ 102.042458][ T4962] das-1801st-da [ 102.046164][ T4962] das-1802st [ 102.052272][ T4962] das-1802st-da [ 102.057711][ T4962] das-1802hr [ 102.063943][ T4962] das-1802hr-da [ 102.067637][ T4962] das-1801hc [ 102.082531][ T4962] das-1802hc [ 102.089223][ T4962] das-1801ao [ 102.097534][ T4962] das-1802ao [ 102.107662][ T4962] comedi: valid board names for das800 driver are: [ 102.123326][ T4962] das-800 [ 102.126799][ T4962] cio-das800 [ 102.136976][ T4962] das-801 [ 102.140828][ T4962] cio-das801 [ 102.144166][ T4962] das-802 [ 102.156188][ T4962] cio-das802 [ 102.162949][ T4962] cio-das802/16 [ 102.195122][ T4962] comedi: valid board names for isa-das08 driver are: [ 102.217649][ T4962] isa-das08 [ 102.226987][ T4962] das08-pgm [ 102.245704][ T4962] das08-pgh [ 102.269140][ T4962] das08-pgl [ 102.272418][ T4962] das08-aoh [ 102.275648][ T4962] das08-aol [ 102.292853][ T4962] das08-aom [ 102.296114][ T4962] das08/jr-ao [ 102.305555][ T4962] das08jr-16-ao [ 102.342811][ T4962] pc104-das08 [ 102.346245][ T4962] das08jr/16 [ 102.384735][ T4962] comedi: valid board names for das16m1 driver are: [ 102.443374][ T4962] das16m1 [ 102.446475][ T4962] comedi: valid board names for dac02 driver are: [ 102.473952][ T4962] dac02 [ 102.476868][ T4962] comedi: valid board names for rti802 driver are: [ 102.511194][ T5003] FAULT_INJECTION: forcing a failure. [ 102.511194][ T5003] name failslab, interval 1, probability 0, space 0, times 0 [ 102.537641][ T4962] rti802 [ 102.545141][ T4962] comedi: valid board names for rti800 driver are: [ 102.565393][ T4962] rti800 [ 102.568399][ T4962] rti815 [ 102.583186][ T5003] CPU: 1 PID: 5003 Comm: syz.0.226 Not tainted syzkaller #0 [ 102.590541][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.600658][ T5003] Call Trace: [ 102.603977][ T5003] [ 102.606938][ T5003] dump_stack_lvl+0x188/0x250 [ 102.611657][ T5003] ? show_regs_print_info+0x20/0x20 [ 102.616936][ T5003] ? load_image+0x410/0x410 [ 102.621486][ T5003] ? __might_sleep+0xf0/0xf0 [ 102.626117][ T5003] ? __lock_acquire+0x7b50/0x7b50 [ 102.631195][ T5003] should_fail+0x383/0x4b0 [ 102.635749][ T5003] should_failslab+0x5/0x20 [ 102.640284][ T5003] slab_pre_alloc_hook+0x51/0xc0 [ 102.645266][ T5003] ? __kernfs_new_node+0xe3/0x6b0 [ 102.650326][ T5003] kmem_cache_alloc+0x3d/0x280 [ 102.655132][ T5003] __kernfs_new_node+0xe3/0x6b0 [ 102.660019][ T5003] ? widen_string+0x3b/0x320 [ 102.664663][ T5003] ? kernfs_new_node+0x250/0x250 [ 102.669655][ T5003] ? snprintf+0xe5/0x140 [ 102.673944][ T5003] kernfs_new_node+0x148/0x250 [ 102.678758][ T5003] __kernfs_create_file+0x47/0x2e0 [ 102.683905][ T5003] cgroup_addrm_files+0xac3/0x1020 [ 102.689066][ T5003] ? rcu_lock_release+0x20/0x20 [ 102.693939][ T5003] ? vfs_mkdir+0x386/0x570 [ 102.698388][ T5003] ? __x64_sys_mkdirat+0x85/0x90 [ 102.703356][ T5003] ? do_syscall_64+0x4c/0xa0 [ 102.707974][ T5003] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.714085][ T5003] ? mark_lock+0x94/0x320 [ 102.718480][ T5003] ? __local_bh_enable_ip+0x136/0x1c0 [ 102.723897][ T5003] ? lockdep_hardirqs_on+0x94/0x140 [ 102.729141][ T5003] css_populate_dir+0x155/0x350 [ 102.734077][ T5003] cgroup_apply_control_enable+0x641/0xb00 [ 102.739940][ T5003] cgroup_mkdir+0xcbd/0xeb0 [ 102.744490][ T5003] ? css_task_iter_end+0x280/0x280 [ 102.749640][ T5003] ? do_raw_spin_unlock+0x11d/0x230 [ 102.754878][ T5003] ? kernfs_iop_permission+0x22d/0x310 [ 102.760385][ T5003] ? css_task_iter_end+0x280/0x280 [ 102.765543][ T5003] kernfs_iop_mkdir+0x23d/0x3d0 [ 102.770590][ T5003] vfs_mkdir+0x386/0x570 [ 102.774889][ T5003] do_mkdirat+0x1dd/0x5c0 [ 102.779264][ T5003] ? vfs_mkdir+0x570/0x570 [ 102.783729][ T5003] __x64_sys_mkdirat+0x85/0x90 [ 102.788535][ T5003] do_syscall_64+0x4c/0xa0 [ 102.792986][ T5003] ? clear_bhb_loop+0x30/0x80 [ 102.797704][ T5003] ? clear_bhb_loop+0x30/0x80 [ 102.802422][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.808358][ T5003] RIP: 0033:0x7fc9c07b9159 [ 102.812809][ T5003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.832626][ T5003] RSP: 002b:00007fc9bea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.841091][ T5003] RAX: ffffffffffffffda RBX: 00007fc9c0a40fa0 RCX: 00007fc9c07b9159 [ 102.849206][ T5003] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.857224][ T5003] RBP: 00007fc9c085006b R08: 0000000000000000 R09: 0000000000000000 [ 102.865234][ T5003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.873260][ T5003] R13: 00007fc9c0a41038 R14: 00007fc9c0a40fa0 R15: 00007ffe04f3d8f8 [ 102.881382][ T5003] [ 102.908736][ T4962] comedi: valid board names for pcm3724 driver are: [ 102.917874][ T4962] pcm3724 [ 102.927972][ T4962] comedi: valid board names for pcl818 driver are: [ 102.935316][ T4962] pcl818l [ 102.942291][ T4962] pcl818h [ 102.945359][ T4962] pcl818hd [ 102.954733][ T4962] pcl818hg [ 102.957897][ T4962] pcl818 [ 102.984312][ T4962] pcl718 [ 102.987321][ T4962] pcm3718 [ 103.006814][ T4962] comedi: valid board names for pcl816 driver are: [ 103.036253][ T4962] pcl816 [ 103.041462][ T5003] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 103.049517][ T4962] pcl814b [ 103.087421][ T4962] comedi: valid board names for pcl812 driver are: [ 103.103477][ T4962] pcl812 [ 103.108264][ T4962] pcl812pg [ 103.112162][ T4962] acl8112pg [ 103.115493][ T4962] acl8112dg [ 103.118791][ T4962] acl8112hg [ 103.124162][ T4962] a821pgl [ 103.127342][ T4962] a821pglnda [ 103.130840][ T4962] a821pgh [ 103.133900][ T4962] a822pgl [ 103.136960][ T4962] a822pgh [ 103.140303][ T4962] a823pgl [ 103.143490][ T4962] a823pgh [ 103.146605][ T4962] pcl813 [ 103.149978][ T4962] pcl813b [ 103.153110][ T4962] acl8113 [ 103.156323][ T4962] iso813 [ 103.160079][ T4962] acl8216 [ 103.163378][ T4962] a826pg [ 103.206343][ T4962] comedi: valid board names for pcl730 driver are: [ 103.249120][ T4962] pcl730 [ 103.252204][ T4962] iso730 [ 103.255242][ T4962] acl7130 [ 103.258448][ T4962] pcm3730 [ 103.268643][ T4962] pcl725 [ 103.285630][ T4962] p8r8dio [ 103.288792][ T4962] acl7225b [ 103.296219][ T4962] p16r16dio [ 103.312338][ T4962] pcl733 [ 103.317821][ T4962] pcl734 [ 103.323148][ T4962] opmm-1616-xt [ 103.326752][ T4962] pearl-mm-p [ 103.330550][ T4962] ir104-pbf [ 103.334003][ T4962] comedi: valid board names for pcl726 driver are: [ 103.340994][ T4962] pcl726 [ 103.344206][ T4962] pcl727 [ 103.347245][ T4962] pcl728 [ 103.352467][ T4962] acl6126 [ 103.355831][ T4962] acl6128 [ 103.359667][ T4962] comedi: valid board names for pcl724 driver are: [ 103.366516][ T4962] pcl724 [ 103.370566][ T4962] pcl722 [ 103.377708][ T4962] pcl731 [ 103.394942][ T4962] acl7122 [ 103.403689][ T4962] acl7124 [ 103.411760][ T4962] pet48dio [ 103.418428][ T4962] pcmio48 [ 103.431665][ T4962] onyx-mm-dio [ 103.435097][ T4962] comedi: valid board names for pcl711 driver are: [ 103.467760][ T4962] pcl711 [ 103.508673][ T4962] pcl711b [ 103.520704][ T4962] acl8112hg [ 103.523955][ T4962] acl8112dg [ 103.527173][ T4962] comedi: valid board names for amplc_pc263 driver are: [ 103.572161][ T4962] pc263 [ 103.575080][ T4962] comedi: valid board names for amplc_pc236 driver are: [ 103.581502][ T5017] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.597659][ T5017] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 103.629005][ T4962] pc36at [ 103.632002][ T4962] comedi: valid board names for amplc_dio200 driver are: [ 103.666507][ T4962] pc212e [ 103.676774][ T4962] pc214e [ 103.679834][ T4962] pc215e [ 103.682797][ T4962] pc218e [ 103.685761][ T4962] pc272e [ 103.688716][ T4962] comedi: valid board names for comedi_parport driver are: [ 103.729218][ T4962] comedi_parport [ 103.732911][ T4962] comedi: valid board names for comedi_test driver are: [ 103.757639][ T4962] comedi_test [ 103.762222][ T4962] comedi: valid board names for comedi_bond driver are: [ 103.770215][ T4514] wlan1: Trigger new scan to find an IBSS to join [ 103.797204][ T4962] comedi_bond [ 103.808161][ T5023] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.816530][ T5023] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.730273][ T1274] wlan1: Creating new IBSS network, BSSID 92:53:12:32:27:95 [ 104.940571][ T5058] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 104.989049][ T5058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.124785][ T5058] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.176956][ T5064] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.189050][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 105.217751][ T5067] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.226060][ T5067] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.235713][ T5064] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.441874][ T5075] netlink: 'syz.4.252': attribute type 10 has an invalid length. [ 105.648566][ T5075] team0 (unregistering): Port device team_slave_0 removed [ 105.733922][ T5075] team0 (unregistering): Port device team_slave_1 removed [ 105.769221][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 105.870485][ T5080] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.892662][ T5080] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.297987][ T5096] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.328493][ T5096] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.649755][ T1108] Bluetooth: hci1: command 0x0405 tx timeout [ 107.589144][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 107.989154][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.006179][ T21] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 108.149435][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 108.170299][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.178343][ T21] usb 3-1: SerialNumber: syz [ 108.657788][ T4231] usb 3-1: USB disconnect, device number 3 [ 109.181362][ T5193] program syz.3.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.342069][ T5204] netlink: 'syz.3.292': attribute type 3 has an invalid length. [ 109.624665][ T5217] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.648420][ T5217] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.607821][ T26] audit: type=1400 audit(1790771373.656:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5342 comm="syz.3.332" [ 113.729883][ T5409] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 113.753194][ T5409] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.152852][ T5441] tipc: Started in network mode [ 114.183539][ T5441] tipc: Node identity 2201df16081c, cluster identity 4711 [ 114.218118][ T5441] tipc: Enabled bearer , priority 0 [ 114.311127][ T5439] tipc: Disabling bearer [ 114.955268][ T5467] device syz_tun entered promiscuous mode [ 115.279301][ T5481] tipc: Enabled bearer , priority 0 [ 115.359221][ T5480] tipc: Disabling bearer [ 116.252900][ T5522] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 116.275924][ T5522] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 116.476087][ T5524] kvm [5520]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 116.524904][ T5534] tipc: Started in network mode [ 116.541184][ T5534] tipc: Node identity 86929949817a, cluster identity 4711 [ 116.576250][ T5534] tipc: Enabled bearer , priority 0 [ 116.604439][ T5524] kvm [5520]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 116.625215][ T5533] tipc: Disabling bearer [ 116.715426][ T5524] kvm [5520]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x500000000 [ 116.786388][ T5524] kvm [5520]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 116.871746][ T5524] kvm [5520]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x500000000 [ 117.665317][ T5579] tipc: Started in network mode [ 117.680651][ T5579] tipc: Node identity 7663086781dd, cluster identity 4711 [ 117.730666][ T5579] tipc: Enabled bearer , priority 0 [ 117.893470][ T5584] tipc: Disabling bearer [ 118.199234][ T5590] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 118.217763][ T5590] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 118.687050][ T5616] tipc: Started in network mode [ 118.709082][ T5616] tipc: Node identity ae42cb886c3e, cluster identity 4711 [ 118.763814][ T5616] tipc: Enabled bearer , priority 0 [ 118.788391][ T5614] tipc: Disabling bearer [ 119.051828][ T5626] kvm [5621]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xffff00000000 [ 119.099212][ T5626] kvm [5621]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 119.154699][ T5626] kvm [5621]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 119.197873][ T5626] kvm [5621]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 119.260608][ T5626] kvm [5621]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 119.896508][ T5661] tipc: Enabled bearer , priority 0 [ 119.942715][ T5660] tipc: Disabling bearer [ 120.694861][ T5712] tipc: Enabled bearer , priority 0 [ 120.733860][ T5709] tipc: Disabling bearer [ 122.238126][ T5785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 122.281688][ T5785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 123.649336][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 123.674137][ T5870] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.688597][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 123.776701][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 123.834166][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 123.883188][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 123.924261][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 123.973545][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 124.034316][ T5868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.916408][ T5921] md: invalid raid superblock magic on ram1 [ 124.930422][ T5921] md: ram1 does not have a valid v0.0 superblock, not importing! [ 125.003295][ T5921] md: md_import_device returned -22 [ 125.575018][ T5947] device syzkaller0 entered promiscuous mode [ 125.871007][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 125.926416][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 125.957573][ T5974] FAULT_INJECTION: forcing a failure. [ 125.957573][ T5974] name fail_futex, interval 1, probability 0, space 0, times 1 [ 125.981435][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 126.001012][ T5974] CPU: 1 PID: 5974 Comm: syz.0.543 Not tainted syzkaller #0 [ 126.008381][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.018491][ T5974] Call Trace: [ 126.021814][ T5974] [ 126.024793][ T5974] dump_stack_lvl+0x188/0x250 [ 126.029530][ T5974] ? show_regs_print_info+0x20/0x20 [ 126.034769][ T5974] ? load_image+0x410/0x410 [ 126.039322][ T5974] ? cgroup_rstat_updated+0xce/0x350 [ 126.044663][ T5974] should_fail+0x383/0x4b0 [ 126.049147][ T5974] get_futex_key+0x1a1/0x12d0 [ 126.053864][ T5974] ? release_firmware_map_entry+0x190/0x190 [ 126.054658][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 126.059797][ T5974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.059831][ T5974] ? futex_wait_restart+0x250/0x250 [ 126.059857][ T5974] ? lock_chain_count+0x20/0x20 [ 126.059879][ T5974] ? preempt_schedule+0xbc/0xd0 [ 126.059910][ T5974] futex_wait_setup+0x4b/0x520 [ 126.059933][ T5974] ? schedule_preempt_disabled+0x20/0x20 [ 126.059957][ T5974] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 126.059985][ T5974] futex_wait+0x22f/0x680 [ 126.109107][ T5974] ? do_futex+0x12b0/0x12b0 [ 126.113675][ T5974] ? verify_lock_unused+0x140/0x140 [ 126.118929][ T5974] ? verify_lock_unused+0x140/0x140 [ 126.124166][ T5974] do_futex+0xdc2/0x12b0 [ 126.128458][ T5974] ? do_pwritev+0x259/0x3a0 [ 126.133001][ T5974] ? locks_remove_posix+0x340/0x600 [ 126.138248][ T5974] ? files_lookup_fd_locked+0x190/0x190 [ 126.143853][ T5974] ? futex_exit_release+0x1c0/0x1c0 [ 126.149102][ T5974] ? __context_tracking_exit+0x4c/0x80 [ 126.154632][ T5974] __se_sys_futex+0x389/0x420 [ 126.159350][ T5974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.165377][ T5974] ? __x64_sys_futex+0xf0/0xf0 [ 126.170773][ T5974] ? __x64_sys_futex+0x1d/0xf0 [ 126.175590][ T5974] do_syscall_64+0x4c/0xa0 [ 126.180071][ T5974] ? clear_bhb_loop+0x30/0x80 [ 126.184796][ T5974] ? clear_bhb_loop+0x30/0x80 [ 126.189672][ T5974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.194010][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 126.195613][ T5974] RIP: 0033:0x7fc9c07b9159 [ 126.195637][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.195656][ T5974] RSP: 002b:00007fc9be9f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.235631][ T5974] RAX: ffffffffffffffda RBX: 00007fc9c0a41098 RCX: 00007fc9c07b9159 [ 126.243651][ T5974] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc9c0a41098 [ 126.251781][ T5974] RBP: 00007fc9c0a41090 R08: 0000000000000000 R09: 0000000000000000 [ 126.259792][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.267806][ T5974] R13: 00007fc9c0a41128 R14: 00007ffe04f3d810 R15: 00007ffe04f3d8f8 [ 126.275832][ T5974] [ 126.281416][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 126.316632][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 126.732752][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 126.752515][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 126.794903][ T6008] FAULT_INJECTION: forcing a failure. [ 126.794903][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 126.837417][ T6008] CPU: 0 PID: 6008 Comm: syz.3.554 Not tainted syzkaller #0 [ 126.844769][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.854860][ T6008] Call Trace: [ 126.858183][ T6008] [ 126.861195][ T6008] dump_stack_lvl+0x188/0x250 [ 126.865928][ T6008] ? show_regs_print_info+0x20/0x20 [ 126.871188][ T6008] ? load_image+0x410/0x410 [ 126.875746][ T6008] ? __might_sleep+0xf0/0xf0 [ 126.880387][ T6008] ? __lock_acquire+0x7b50/0x7b50 [ 126.885470][ T6008] should_fail+0x383/0x4b0 [ 126.889939][ T6008] should_failslab+0x5/0x20 [ 126.894479][ T6008] slab_pre_alloc_hook+0x51/0xc0 [ 126.899465][ T6008] kmem_cache_alloc_trace+0x47/0x290 [ 126.904787][ T6008] ? nfnetlink_rcv+0xea2/0x2450 [ 126.909681][ T6008] nfnetlink_rcv+0xea2/0x2450 [ 126.914448][ T6008] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 126.920100][ T6008] ? skb_clone+0x1f1/0x350 [ 126.924564][ T6008] ? rcu_lock_release+0x5/0x20 [ 126.929390][ T6008] ? __lock_acquire+0x7b50/0x7b50 [ 126.934473][ T6008] netlink_unicast+0x78f/0x940 [ 126.939294][ T6008] netlink_sendmsg+0x8ba/0xbe0 [ 126.944107][ T6008] ? netlink_getsockopt+0x570/0x570 [ 126.949342][ T6008] ? aa_sock_msg_perm+0x94/0x150 [ 126.954325][ T6008] ? apparmor_socket_sendmsg+0x88/0x230 [ 126.959917][ T6008] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 126.965246][ T6008] ? security_socket_sendmsg+0x7c/0xa0 [ 126.970749][ T6008] ? netlink_getsockopt+0x570/0x570 [ 126.976074][ T6008] ____sys_sendmsg+0x5be/0x8f0 [ 126.980882][ T6008] ? __sys_sendmsg_sock+0x30/0x30 [ 126.986062][ T6008] ? import_iovec+0x6f/0xa0 [ 126.990598][ T6008] ___sys_sendmsg+0x236/0x2e0 [ 126.995338][ T6008] ? __sys_sendmsg+0x290/0x290 [ 127.000186][ T6008] __se_sys_sendmsg+0x1b7/0x2a0 [ 127.005086][ T6008] ? __x64_sys_sendmsg+0x80/0x80 [ 127.010067][ T6008] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.016120][ T6008] ? lockdep_hardirqs_on+0x94/0x140 [ 127.021353][ T6008] do_syscall_64+0x4c/0xa0 [ 127.025807][ T6008] ? clear_bhb_loop+0x30/0x80 [ 127.030525][ T6008] ? clear_bhb_loop+0x30/0x80 [ 127.035249][ T6008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.041189][ T6008] RIP: 0033:0x7f1543ef3159 [ 127.045645][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.065438][ T6008] RSP: 002b:00007f154214b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.073907][ T6008] RAX: ffffffffffffffda RBX: 00007f154417afa0 RCX: 00007f1543ef3159 [ 127.081936][ T6008] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 127.089958][ T6008] RBP: 00007f1543f8a06b R08: 0000000000000000 R09: 0000000000000000 [ 127.097988][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.105998][ T6008] R13: 00007f154417b038 R14: 00007f154417afa0 R15: 00007ffcdff5a368 [ 127.109825][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.114025][ T6008] [ 127.124135][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.146815][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 127.191082][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 127.215271][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 127.237194][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 127.254819][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 127.264062][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 127.627070][ T6032] FAULT_INJECTION: forcing a failure. [ 127.627070][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 127.671113][ T6032] CPU: 1 PID: 6032 Comm: syz.2.564 Not tainted syzkaller #0 [ 127.678462][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.688548][ T6032] Call Trace: [ 127.691852][ T6032] [ 127.694809][ T6032] dump_stack_lvl+0x188/0x250 [ 127.699512][ T6032] ? show_regs_print_info+0x20/0x20 [ 127.704733][ T6032] ? load_image+0x410/0x410 [ 127.709255][ T6032] ? __might_sleep+0xf0/0xf0 [ 127.713864][ T6032] ? __lock_acquire+0x7b50/0x7b50 [ 127.718928][ T6032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.724936][ T6032] should_fail+0x383/0x4b0 [ 127.729401][ T6032] should_failslab+0x5/0x20 [ 127.733921][ T6032] slab_pre_alloc_hook+0x51/0xc0 [ 127.738880][ T6032] kmem_cache_alloc_node+0x47/0x2c0 [ 127.744094][ T6032] ? __alloc_skb+0xf4/0x750 [ 127.748622][ T6032] __alloc_skb+0xf4/0x750 [ 127.752972][ T6032] inet_netconf_notify_devconf+0x16f/0x230 [ 127.758804][ T6032] inetdev_event+0x6f6/0x1350 [ 127.763504][ T6032] ? devinet_exit_net+0x220/0x220 [ 127.768551][ T6032] raw_notifier_call_chain+0xcb/0x160 [ 127.773945][ T6032] unregister_netdevice_many+0x109b/0x1a40 [ 127.779780][ T6032] ? alloc_netdev_mqs+0xc40/0xc40 [ 127.784823][ T6032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.790823][ T6032] ? lock_chain_count+0x20/0x20 [ 127.795695][ T6032] ? __rwlock_init+0x140/0x140 [ 127.800475][ T6032] ? queue_delayed_work_on+0x110/0x1f0 [ 127.805951][ T6032] ? lockdep_hardirqs_on+0x94/0x140 [ 127.811267][ T6032] unregister_netdevice_queue+0x2e1/0x320 [ 127.817007][ T6032] ? delayed_work_timer_fn+0x80/0x80 [ 127.822319][ T6032] ? list_netdevice+0x460/0x460 [ 127.827231][ T6032] ? linkwatch_fire_event+0x2b7/0x370 [ 127.832629][ T6032] __tun_detach+0xdb7/0x1580 [ 127.837258][ T6032] tun_chr_close+0x109/0x1b0 [ 127.842004][ T6032] ? tun_chr_open+0x4d0/0x4d0 [ 127.846729][ T6032] __fput+0x212/0x8c0 [ 127.850750][ T6032] task_work_run+0x125/0x1a0 [ 127.855389][ T6032] exit_to_user_mode_loop+0x10f/0x130 [ 127.860797][ T6032] exit_to_user_mode_prepare+0xee/0x180 [ 127.866375][ T6032] syscall_exit_to_user_mode+0x16/0x40 [ 127.871862][ T6032] do_syscall_64+0x58/0xa0 [ 127.876313][ T6032] ? clear_bhb_loop+0x30/0x80 [ 127.881020][ T6032] ? clear_bhb_loop+0x30/0x80 [ 127.885724][ T6032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.891658][ T6032] RIP: 0033:0x7f5b3fa00159 [ 127.896107][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.915747][ T6032] RSP: 002b:00007f5b3dc58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 127.924329][ T6032] RAX: 0000000000000000 RBX: 00007f5b3fc87fa0 RCX: 00007f5b3fa00159 [ 127.932347][ T6032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 127.940338][ T6032] RBP: 00007f5b3fa9706b R08: 0000000000000000 R09: 0000000000000000 [ 127.948324][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.956309][ T6032] R13: 00007f5b3fc88038 R14: 00007f5b3fc87fa0 R15: 00007ffc23cc0998 [ 127.964320][ T6032] [ 128.238507][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.289300][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 128.338512][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 128.379217][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 128.427698][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 128.472836][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 128.503136][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 129.424075][ T6100] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 129.454835][ T6100] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 129.578051][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 129.620263][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 129.627735][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 129.682162][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 129.712399][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 129.742586][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 129.779239][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 131.945472][ T6204] overlayfs: missing 'lowerdir' [ 132.733302][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741010][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.170865][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 133.218095][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 133.279302][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 133.286686][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 133.333654][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 133.367514][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 133.385139][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 133.406243][ T6269] tipc: Enabled bearer , priority 0 [ 133.419747][ T6269] syzkaller0: MTU too low for tipc bearer [ 133.426608][ T6269] tipc: Disabling bearer [ 133.517892][ T6273] tap0: tun_chr_ioctl cmd 1074025677 [ 133.530582][ T6273] tap0: linktype set to 780 [ 133.777756][ T6288] overlayfs: missing 'lowerdir' [ 134.638384][ T6314] tipc: Enabled bearer , priority 0 [ 134.681764][ T6314] syzkaller0: MTU too low for tipc bearer [ 134.703336][ T6314] tipc: Disabling bearer [ 134.937049][ T6321] overlayfs: missing 'lowerdir' [ 134.982193][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.038069][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 135.090455][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 135.103939][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 135.119278][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 135.153072][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 135.189880][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 135.865939][ T6351] tipc: Enabled bearer , priority 0 [ 135.932793][ T6351] syzkaller0: MTU too low for tipc bearer [ 135.938586][ T6351] tipc: Disabling bearer [ 135.982665][ T6360] overlayfs: missing 'lowerdir' [ 136.674715][ T6392] overlayfs: missing 'lowerdir' [ 136.802665][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.843258][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 136.858334][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 136.877549][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 136.888325][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 136.904531][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 136.915197][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 136.962613][ T6403] tipc: Enabled bearer , priority 0 [ 136.994968][ T6403] syzkaller0: MTU too low for tipc bearer [ 137.008701][ T6403] tipc: Disabling bearer [ 137.209440][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 137.403257][ T6419] FAULT_INJECTION: forcing a failure. [ 137.403257][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 137.445868][ T6419] CPU: 1 PID: 6419 Comm: syz.3.705 Not tainted syzkaller #0 [ 137.453230][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.463319][ T6419] Call Trace: [ 137.466629][ T6419] [ 137.469593][ T6419] dump_stack_lvl+0x188/0x250 [ 137.474311][ T6419] ? show_regs_print_info+0x20/0x20 [ 137.479547][ T6419] ? load_image+0x410/0x410 [ 137.484086][ T6419] ? __might_sleep+0xf0/0xf0 [ 137.488807][ T6419] ? __lock_acquire+0x7b50/0x7b50 [ 137.493894][ T6419] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.500019][ T6419] should_fail+0x383/0x4b0 [ 137.504488][ T6419] should_failslab+0x5/0x20 [ 137.509021][ T6419] slab_pre_alloc_hook+0x51/0xc0 [ 137.513991][ T6419] kmem_cache_alloc_node+0x47/0x2c0 [ 137.519217][ T6419] ? __alloc_skb+0xf4/0x750 [ 137.523797][ T6419] __alloc_skb+0xf4/0x750 [ 137.528157][ T6419] inet_netconf_notify_devconf+0x16f/0x230 [ 137.534003][ T6419] inetdev_event+0x6f6/0x1350 [ 137.538713][ T6419] ? devinet_exit_net+0x220/0x220 [ 137.543782][ T6419] raw_notifier_call_chain+0xcb/0x160 [ 137.549190][ T6419] unregister_netdevice_many+0x109b/0x1a40 [ 137.555045][ T6419] ? alloc_netdev_mqs+0xc40/0xc40 [ 137.560089][ T6419] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.566096][ T6419] ? lock_chain_count+0x20/0x20 [ 137.570985][ T6419] ? __rwlock_init+0x140/0x140 [ 137.575775][ T6419] ? queue_delayed_work_on+0x110/0x1f0 [ 137.581327][ T6419] ? lockdep_hardirqs_on+0x94/0x140 [ 137.586566][ T6419] unregister_netdevice_queue+0x2e1/0x320 [ 137.592310][ T6419] ? delayed_work_timer_fn+0x80/0x80 [ 137.597618][ T6419] ? list_netdevice+0x460/0x460 [ 137.602494][ T6419] ? linkwatch_fire_event+0x2b7/0x370 [ 137.607903][ T6419] __tun_detach+0xdb7/0x1580 [ 137.612529][ T6419] tun_chr_close+0x109/0x1b0 [ 137.617145][ T6419] ? tun_chr_open+0x4d0/0x4d0 [ 137.621842][ T6419] __fput+0x212/0x8c0 [ 137.625853][ T6419] task_work_run+0x125/0x1a0 [ 137.630472][ T6419] exit_to_user_mode_loop+0x10f/0x130 [ 137.635871][ T6419] exit_to_user_mode_prepare+0xee/0x180 [ 137.641528][ T6419] syscall_exit_to_user_mode+0x16/0x40 [ 137.647014][ T6419] do_syscall_64+0x58/0xa0 [ 137.651451][ T6419] ? clear_bhb_loop+0x30/0x80 [ 137.656156][ T6419] ? clear_bhb_loop+0x30/0x80 [ 137.660862][ T6419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.666784][ T6419] RIP: 0033:0x7f1543ef3159 [ 137.671227][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.690865][ T6419] RSP: 002b:00007f154214b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 137.699497][ T6419] RAX: 0000000000000000 RBX: 00007f154417afa0 RCX: 00007f1543ef3159 [ 137.707495][ T6419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 137.715501][ T6419] RBP: 00007f1543f8a06b R08: 0000000000000000 R09: 0000000000000000 [ 137.723493][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.731489][ T6419] R13: 00007f154417b038 R14: 00007f154417afa0 R15: 00007ffcdff5a368 [ 137.739505][ T6419] [ 137.972101][ T6429] overlayfs: missing 'workdir' [ 138.029337][ T6431] FAULT_INJECTION: forcing a failure. [ 138.029337][ T6431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.086075][ T6431] CPU: 0 PID: 6431 Comm: syz.0.709 Not tainted syzkaller #0 [ 138.093432][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.103526][ T6431] Call Trace: [ 138.106927][ T6431] [ 138.109890][ T6431] dump_stack_lvl+0x188/0x250 [ 138.114606][ T6431] ? show_regs_print_info+0x20/0x20 [ 138.119849][ T6431] ? load_image+0x410/0x410 [ 138.124386][ T6431] ? __lock_acquire+0x7b50/0x7b50 [ 138.129470][ T6431] ? __vmalloc_node_range+0x2dd/0x8b0 [ 138.134884][ T6431] ? vzalloc+0x75/0x80 [ 138.138997][ T6431] should_fail+0x383/0x4b0 [ 138.143455][ T6431] prepare_alloc_pages+0x1e3/0x5b0 [ 138.148617][ T6431] __alloc_pages+0x11b/0x480 [ 138.153253][ T6431] ? zone_statistics+0x170/0x170 [ 138.158241][ T6431] ? alloc_pages+0x452/0x560 [ 138.162867][ T6431] __vmalloc_node_range+0x4b1/0x8b0 [ 138.168109][ T6431] ? n_tty_open+0x19/0x150 [ 138.172554][ T6431] vzalloc+0x75/0x80 [ 138.176477][ T6431] ? n_tty_open+0x19/0x150 [ 138.181269][ T6431] n_tty_open+0x19/0x150 [ 138.185548][ T6431] tty_ldisc_setup+0x1a3/0x250 [ 138.190340][ T6431] tty_init_dev+0x239/0x470 [ 138.194876][ T6431] ptmx_open+0xe1/0x2c0 [ 138.199059][ T6431] ? pty_start+0x140/0x140 [ 138.203524][ T6431] chrdev_open+0x585/0x5f0 [ 138.207990][ T6431] ? cd_forget+0x160/0x160 [ 138.212458][ T6431] ? fsnotify_perm+0x3a7/0x560 [ 138.217265][ T6431] ? cd_forget+0x160/0x160 [ 138.221726][ T6431] do_dentry_open+0x7f7/0xf90 [ 138.226440][ T6431] ? vfs_open+0x2b/0x80 [ 138.230634][ T6431] path_openat+0x2718/0x2fb0 [ 138.235289][ T6431] ? __kasan_slab_alloc+0xa9/0xc0 [ 138.240364][ T6431] ? do_filp_open+0x400/0x400 [ 138.245103][ T6431] do_filp_open+0x1df/0x400 [ 138.249652][ T6431] ? vfs_tmpfile+0x300/0x300 [ 138.254314][ T6431] ? _raw_spin_unlock+0x24/0x40 [ 138.259191][ T6431] ? alloc_fd+0x59e/0x650 [ 138.263563][ T6431] do_sys_openat2+0x14b/0x500 [ 138.268280][ T6431] ? __lock_acquire+0x7b50/0x7b50 [ 138.273367][ T6431] ? do_sys_open+0xe0/0xe0 [ 138.277854][ T6431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.284081][ T6431] ? lock_chain_count+0x20/0x20 [ 138.289001][ T6431] __x64_sys_openat+0x135/0x160 [ 138.293985][ T6431] do_syscall_64+0x4c/0xa0 [ 138.298441][ T6431] ? clear_bhb_loop+0x30/0x80 [ 138.303159][ T6431] ? clear_bhb_loop+0x30/0x80 [ 138.307887][ T6431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.313822][ T6431] RIP: 0033:0x7fc9c07b9159 [ 138.318431][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.338082][ T6431] RSP: 002b:00007fc9bea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.346555][ T6431] RAX: ffffffffffffffda RBX: 00007fc9c0a40fa0 RCX: 00007fc9c07b9159 [ 138.354745][ T6431] RDX: 000000000000001e RSI: 0000200000000040 RDI: ffffffffffffff9c [ 138.362761][ T6431] RBP: 00007fc9c085006b R08: 0000000000000000 R09: 0000000000000000 [ 138.370779][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.378804][ T6431] R13: 00007fc9c0a41038 R14: 00007fc9c0a40fa0 R15: 00007ffe04f3d8f8 [ 138.386832][ T6431] [ 138.389948][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.430024][ T6431] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 138.848073][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 138.888494][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 138.929187][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 138.936582][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 138.979204][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 139.006413][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 139.047929][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 139.136650][ T6466] overlayfs: missing 'workdir' [ 139.311543][ T6472] FAULT_INJECTION: forcing a failure. [ 139.311543][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 139.361661][ T6472] CPU: 1 PID: 6472 Comm: syz.2.723 Not tainted syzkaller #0 [ 139.369027][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.379117][ T6472] Call Trace: [ 139.382430][ T6472] [ 139.385383][ T6472] dump_stack_lvl+0x188/0x250 [ 139.390093][ T6472] ? show_regs_print_info+0x20/0x20 [ 139.395351][ T6472] ? load_image+0x410/0x410 [ 139.399889][ T6472] ? __might_sleep+0xf0/0xf0 [ 139.404511][ T6472] ? __lock_acquire+0x7b50/0x7b50 [ 139.409574][ T6472] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.415602][ T6472] should_fail+0x383/0x4b0 [ 139.420068][ T6472] should_failslab+0x5/0x20 [ 139.424603][ T6472] slab_pre_alloc_hook+0x51/0xc0 [ 139.429573][ T6472] kmem_cache_alloc_node+0x47/0x2c0 [ 139.434814][ T6472] ? __alloc_skb+0xf4/0x750 [ 139.439366][ T6472] __alloc_skb+0xf4/0x750 [ 139.443756][ T6472] inet_netconf_notify_devconf+0x16f/0x230 [ 139.449622][ T6472] inetdev_event+0x6f6/0x1350 [ 139.454343][ T6472] ? devinet_exit_net+0x220/0x220 [ 139.459426][ T6472] raw_notifier_call_chain+0xcb/0x160 [ 139.464849][ T6472] unregister_netdevice_many+0x109b/0x1a40 [ 139.470874][ T6472] ? alloc_netdev_mqs+0xc40/0xc40 [ 139.475938][ T6472] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.481955][ T6472] ? lock_chain_count+0x20/0x20 [ 139.486891][ T6472] ? queue_delayed_work_on+0x110/0x1f0 [ 139.492387][ T6472] ? lockdep_hardirqs_on+0x94/0x140 [ 139.497629][ T6472] unregister_netdevice_queue+0x2e1/0x320 [ 139.503386][ T6472] ? delayed_work_timer_fn+0x80/0x80 [ 139.508714][ T6472] ? list_netdevice+0x460/0x460 [ 139.513623][ T6472] ? linkwatch_fire_event+0x2b7/0x370 [ 139.519075][ T6472] __tun_detach+0xdb7/0x1580 [ 139.523727][ T6472] tun_chr_close+0x109/0x1b0 [ 139.528400][ T6472] ? tun_chr_open+0x4d0/0x4d0 [ 139.533113][ T6472] __fput+0x212/0x8c0 [ 139.537137][ T6472] task_work_run+0x125/0x1a0 [ 139.541773][ T6472] exit_to_user_mode_loop+0x10f/0x130 [ 139.547195][ T6472] exit_to_user_mode_prepare+0xee/0x180 [ 139.552781][ T6472] syscall_exit_to_user_mode+0x16/0x40 [ 139.558277][ T6472] do_syscall_64+0x58/0xa0 [ 139.562759][ T6472] ? clear_bhb_loop+0x30/0x80 [ 139.567498][ T6472] ? clear_bhb_loop+0x30/0x80 [ 139.572230][ T6472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.578185][ T6472] RIP: 0033:0x7f5b3fa00159 [ 139.582652][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.602291][ T6472] RSP: 002b:00007f5b3dc58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 139.610759][ T6472] RAX: 0000000000000000 RBX: 00007f5b3fc87fa0 RCX: 00007f5b3fa00159 [ 139.618772][ T6472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 139.626797][ T6472] RBP: 00007f5b3fa9706b R08: 0000000000000000 R09: 0000000000000000 [ 139.634813][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.642826][ T6472] R13: 00007f5b3fc88038 R14: 00007f5b3fc87fa0 R15: 00007ffc23cc0998 [ 139.650866][ T6472] [ 140.473880][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 140.498681][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 140.513215][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 140.528315][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 140.540273][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 140.547983][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 140.564895][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 141.094943][ T6531] FAULT_INJECTION: forcing a failure. [ 141.094943][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 141.200473][ T6531] CPU: 1 PID: 6531 Comm: syz.4.740 Not tainted syzkaller #0 [ 141.207841][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.217956][ T6531] Call Trace: [ 141.221302][ T6531] [ 141.224271][ T6531] dump_stack_lvl+0x188/0x250 [ 141.229000][ T6531] ? show_regs_print_info+0x20/0x20 [ 141.234248][ T6531] ? load_image+0x410/0x410 [ 141.238817][ T6531] ? __might_sleep+0xf0/0xf0 [ 141.243472][ T6531] ? __lock_acquire+0x7b50/0x7b50 [ 141.248552][ T6531] should_fail+0x383/0x4b0 [ 141.253024][ T6531] should_failslab+0x5/0x20 [ 141.257566][ T6531] slab_pre_alloc_hook+0x51/0xc0 [ 141.262526][ T6531] __kmalloc_node_track_caller+0x68/0x3a0 [ 141.268306][ T6531] ? inet_netconf_notify_devconf+0x16f/0x230 [ 141.274316][ T6531] ? __alloc_skb+0xf4/0x750 [ 141.278852][ T6531] ? inet_netconf_notify_devconf+0x16f/0x230 [ 141.284877][ T6531] __alloc_skb+0x22c/0x750 [ 141.289339][ T6531] inet_netconf_notify_devconf+0x16f/0x230 [ 141.295166][ T6531] inetdev_event+0x6f6/0x1350 [ 141.299869][ T6531] ? devinet_exit_net+0x220/0x220 [ 141.304924][ T6531] raw_notifier_call_chain+0xcb/0x160 [ 141.310324][ T6531] unregister_netdevice_many+0x109b/0x1a40 [ 141.316162][ T6531] ? alloc_netdev_mqs+0xc40/0xc40 [ 141.321240][ T6531] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.327269][ T6531] ? lock_chain_count+0x20/0x20 [ 141.332247][ T6531] ? __rwlock_init+0x140/0x140 [ 141.337049][ T6531] ? queue_delayed_work_on+0x110/0x1f0 [ 141.342542][ T6531] ? lockdep_hardirqs_on+0x94/0x140 [ 141.347774][ T6531] unregister_netdevice_queue+0x2e1/0x320 [ 141.353515][ T6531] ? delayed_work_timer_fn+0x80/0x80 [ 141.358817][ T6531] ? list_netdevice+0x460/0x460 [ 141.363711][ T6531] ? linkwatch_fire_event+0x2b7/0x370 [ 141.369110][ T6531] __tun_detach+0xdb7/0x1580 [ 141.373733][ T6531] tun_chr_close+0x109/0x1b0 [ 141.378349][ T6531] ? tun_chr_open+0x4d0/0x4d0 [ 141.383039][ T6531] __fput+0x212/0x8c0 [ 141.387044][ T6531] task_work_run+0x125/0x1a0 [ 141.391654][ T6531] exit_to_user_mode_loop+0x10f/0x130 [ 141.397048][ T6531] exit_to_user_mode_prepare+0xee/0x180 [ 141.402607][ T6531] syscall_exit_to_user_mode+0x16/0x40 [ 141.408085][ T6531] do_syscall_64+0x58/0xa0 [ 141.412525][ T6531] ? clear_bhb_loop+0x30/0x80 [ 141.417217][ T6531] ? clear_bhb_loop+0x30/0x80 [ 141.421916][ T6531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.427830][ T6531] RIP: 0033:0x7f0f84f4b159 [ 141.432262][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.451885][ T6531] RSP: 002b:00007f0f831a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 141.460339][ T6531] RAX: 0000000000000000 RBX: 00007f0f851d2fa0 RCX: 00007f0f84f4b159 [ 141.468343][ T6531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 141.476338][ T6531] RBP: 00007f0f84fe206b R08: 0000000000000000 R09: 0000000000000000 [ 141.484412][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.492405][ T6531] R13: 00007f0f851d3038 R14: 00007f0f851d2fa0 R15: 00007ffc4e126b18 [ 141.500404][ T6531] [ 142.002381][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.032949][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 142.043042][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 142.051636][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 142.060824][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 142.077229][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 142.096591][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 144.054509][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.112768][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 144.163976][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 144.205859][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 144.226491][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 144.282072][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 144.386148][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 146.235966][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.283697][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 146.324639][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 146.345002][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 146.379816][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 146.446953][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 146.514185][ T6655] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 146.536261][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 146.558105][ T6655] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.991753][ T6694] FAULT_INJECTION: forcing a failure. [ 147.991753][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 148.029487][ T6694] CPU: 0 PID: 6694 Comm: syz.4.783 Not tainted syzkaller #0 [ 148.036867][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.047162][ T6694] Call Trace: [ 148.050551][ T6694] [ 148.053531][ T6694] dump_stack_lvl+0x188/0x250 [ 148.058294][ T6694] ? show_regs_print_info+0x20/0x20 [ 148.063636][ T6694] ? load_image+0x410/0x410 [ 148.068206][ T6694] ? __might_sleep+0xf0/0xf0 [ 148.072858][ T6694] ? __lock_acquire+0x7b50/0x7b50 [ 148.077947][ T6694] should_fail+0x383/0x4b0 [ 148.082422][ T6694] should_failslab+0x5/0x20 [ 148.086973][ T6694] slab_pre_alloc_hook+0x51/0xc0 [ 148.091957][ T6694] kmem_cache_alloc_node+0x47/0x2c0 [ 148.097213][ T6694] ? __alloc_skb+0xf4/0x750 [ 148.101871][ T6694] __alloc_skb+0xf4/0x750 [ 148.106260][ T6694] ctrl_getfamily+0x3cd/0x5b0 [ 148.110994][ T6694] ? nla_put_string+0x30/0x30 [ 148.115734][ T6694] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 148.122160][ T6694] genl_rcv_msg+0xd0b/0xfa0 [ 148.126742][ T6694] ? genl_bind+0x370/0x370 [ 148.131224][ T6694] ? __dev_queue_xmit+0x1b64/0x2e50 [ 148.136482][ T6694] ? verify_lock_unused+0x140/0x140 [ 148.141760][ T6694] ? dev_queue_xmit+0x20/0x20 [ 148.146488][ T6694] ? nla_put_string+0x30/0x30 [ 148.151214][ T6694] ? ctrl_getfamily+0x5b0/0x5b0 [ 148.156147][ T6694] netlink_rcv_skb+0x1e9/0x430 [ 148.160976][ T6694] ? genl_bind+0x370/0x370 [ 148.165456][ T6694] ? netlink_ack+0xb10/0xb10 [ 148.170113][ T6694] ? down_read+0x1aa/0x2e0 [ 148.174588][ T6694] genl_rcv+0x24/0x40 [ 148.178622][ T6694] netlink_unicast+0x78f/0x940 [ 148.183455][ T6694] netlink_sendmsg+0x8ba/0xbe0 [ 148.188272][ T6694] ? netlink_getsockopt+0x570/0x570 [ 148.193507][ T6694] ? aa_sock_msg_perm+0x94/0x150 [ 148.198508][ T6694] ? apparmor_socket_sendmsg+0x88/0x230 [ 148.204106][ T6694] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 148.209449][ T6694] ? security_socket_sendmsg+0x7c/0xa0 [ 148.214981][ T6694] __sys_sendto+0x46d/0x620 [ 148.219546][ T6694] ? __ia32_sys_getpeername+0x80/0x80 [ 148.225010][ T6694] ? lock_chain_count+0x20/0x20 [ 148.229919][ T6694] __x64_sys_sendto+0xda/0xf0 [ 148.234660][ T6694] do_syscall_64+0x4c/0xa0 [ 148.239264][ T6694] ? clear_bhb_loop+0x30/0x80 [ 148.243986][ T6694] ? clear_bhb_loop+0x30/0x80 [ 148.248709][ T6694] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.254638][ T6694] RIP: 0033:0x7f0f84f0b98e [ 148.259100][ T6694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.278753][ T6694] RSP: 002b:00007f0f831a1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 148.287286][ T6694] RAX: ffffffffffffffda RBX: 00007f0f831a36c0 RCX: 00007f0f84f0b98e [ 148.295304][ T6694] RDX: 0000000000000020 RSI: 00007f0f831a2000 RDI: 0000000000000006 [ 148.303540][ T6694] RBP: 0000000000000000 R08: 00007f0f831a1f04 R09: 000000000000000c [ 148.311609][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 148.319624][ T6694] R13: 00007f0f831a1f58 R14: 00007f0f831a2000 R15: 0000000000000000 [ 148.327654][ T6694] [ 148.359885][ T6684] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 148.391963][ T6684] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 148.547660][ T6710] CIFS: Attempting to mount \\127.0.0.1\share [ 148.554278][ T6710] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.604104][ T6711] CIFS: VFS: Bad protocol string signature header 424d13fe [ 148.621595][ T6711] CIFS: VFS: Bad SMB detected. The Mid=2251801961191424 [ 148.647900][ T6711] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 148.711000][ T6711] CIFS: VFS: Bad protocol string signature header 0 [ 148.725802][ T6711] CIFS: VFS: Bad SMB detected. The Mid=0 [ 148.739870][ T6710] CIFS: VFS: cifs_mount failed w/return code = -5 [ 149.096012][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.124380][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 149.150027][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 149.178475][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 149.209540][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 149.246769][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 149.369530][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 150.245286][ T6742] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.279107][ T6742] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.447706][ T6758] loop1: detected capacity change from 0 to 512 [ 151.532677][ T6758] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.801705][ T6763] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 151.809971][ T6763] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 151.836067][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 151.848488][ T6770] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 151.875415][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 151.896785][ T6770] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 151.904654][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 151.964732][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 152.007143][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 152.015195][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 152.029908][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 152.092703][ T6786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 152.123189][ T6786] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.654614][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.741000][ T6803] loop0: detected capacity change from 0 to 1024 [ 152.865657][ T6803] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.879126][ T6803] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.941049][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.958009][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.004914][ T6803] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.814: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.052247][ T6803] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 153.079153][ T4231] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 153.108010][ T6803] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.108010][ T6803] [ 153.128973][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.149187][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.170601][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 153.171072][ T6810] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.814: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.201431][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 153.221897][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 153.236308][ T6811] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.814: Freeing blocks not in datazone - block = 3, count = 1 [ 153.262845][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 153.292373][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 153.309894][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 153.328903][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 153.338734][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 153.368930][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 153.378727][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 1024 [ 153.423645][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.444160][ T4231] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 154.347558][ T6818] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 154.429076][ T4231] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 154.438178][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.455839][ T4231] usb 2-1: Product: syz [ 154.468729][ T4231] usb 2-1: Manufacturer: syz [ 154.484672][ T4231] usb 2-1: SerialNumber: syz [ 154.549526][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.562797][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.593292][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.602874][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.618050][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.639812][ T6818] team0 (unregistering): Port device team_slave_0 removed [ 154.656654][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.700231][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.719197][ T6818] team0 (unregistering): Port device team_slave_1 removed [ 154.741377][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.778667][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.793570][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.831978][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.851389][ T6826] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.877543][ T6826] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.897106][ T6800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.940314][ T4231] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 154.955462][ T6829] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.967053][ T6829] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.981149][ T4231] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 155.027555][ T4231] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 155.061707][ T4231] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 155.107026][ T4231] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 155.608807][ T6854] loop0: detected capacity change from 0 to 128 [ 155.633580][ T6845] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 155.677305][ T6845] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 155.722933][ T6854] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 155.785371][ T4231] usb 2-1: USB disconnect, device number 2 [ 155.860830][ T4231] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 155.934429][ T4231] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 155.990014][ T4231] keyspan 2-1:1.0: device disconnected [ 157.845582][ T6900] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 157.976837][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 158.027378][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 158.335462][ T6910] loop4: detected capacity change from 0 to 2048 [ 158.400911][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.467617][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.519093][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.561511][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.620706][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.680146][ T6910] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 158.687860][ T6910] UDF-fs: Scanning with blocksize 512 failed [ 158.726145][ T407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.739174][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.786241][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.855418][ T407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.874468][ T6910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.013774][ T407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.149316][ T407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.848524][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 160.165468][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.199277][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.222545][ T6918] device bridge_slave_0 entered promiscuous mode [ 160.243306][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.251356][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.262423][ T6918] device bridge_slave_1 entered promiscuous mode [ 161.013324][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.129172][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 161.157745][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.303986][ T6918] team0: Port device team_slave_0 added [ 161.335612][ T6918] team0: Port device team_slave_1 added [ 161.601968][ T6962] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 161.629390][ T6962] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 161.793351][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.809626][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.835646][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.844703][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.909630][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.916782][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.943517][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.113198][ T6918] device hsr_slave_0 entered promiscuous mode [ 162.125826][ T6918] device hsr_slave_1 entered promiscuous mode [ 162.153477][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.176799][ T6918] Cannot create hsr debugfs directory [ 162.516820][ T6987] tipc: Enabling of bearer rejected, failed to enable media [ 162.794529][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 163.054949][ T26] audit: type=1400 audit(1790771425.106:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7015 comm="syz.0.868" [ 163.071402][ T407] device hsr_slave_0 left promiscuous mode [ 163.092812][ T407] device hsr_slave_1 left promiscuous mode [ 163.140020][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.147706][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.173143][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.194652][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.203421][ T407] device bridge_slave_1 left promiscuous mode [ 163.210023][ T4196] Bluetooth: hci4: command 0x041b tx timeout [ 163.214783][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.235510][ T407] device bridge_slave_0 left promiscuous mode [ 163.248097][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.291811][ T407] device veth1_macvtap left promiscuous mode [ 163.299066][ T407] device veth0_macvtap left promiscuous mode [ 163.305217][ T407] device veth1_vlan left promiscuous mode [ 163.311611][ T407] device veth0_vlan left promiscuous mode [ 163.529155][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 163.970773][ T407] team0 (unregistering): Port device team_slave_1 removed [ 164.041933][ T407] team0 (unregistering): Port device team_slave_0 removed [ 164.087808][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.288077][ T407] bond0 (unregistering): Released all slaves [ 164.594350][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.608985][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.626446][ T6958] device bridge_slave_0 entered promiscuous mode [ 164.651691][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.669628][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.706157][ T6958] device bridge_slave_1 entered promiscuous mode [ 164.720073][ T7053] tipc: Enabling of bearer rejected, failed to enable media [ 164.791604][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.822946][ T6918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.853266][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.920832][ T6918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.960634][ T6918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.000990][ T6958] team0: Port device team_slave_0 added [ 165.040781][ T6958] team0: Port device team_slave_1 added [ 165.088932][ T6918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.124080][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.188680][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.258945][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.299018][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 165.309409][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.321959][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.398455][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.570874][ T6958] device hsr_slave_0 entered promiscuous mode [ 165.602408][ T6958] device hsr_slave_1 entered promiscuous mode [ 165.618963][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 165.639937][ T6958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.647637][ T6958] Cannot create hsr debugfs directory [ 166.069263][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.178992][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.186325][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.199728][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.252513][ T6958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.298716][ T6958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.351683][ T6958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.368514][ T6958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.413667][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.430210][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.471098][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.478428][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.520332][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.576671][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.609857][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.629509][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.636643][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.702985][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.712643][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.753640][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.791086][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.836325][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.849391][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.868877][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.934894][ T6918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.946571][ T6918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.994322][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.009136][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.044267][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.077929][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.106893][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.217016][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.578333][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.644295][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.821673][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.032755][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 168.039326][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 168.071914][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.100517][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.155764][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.163042][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.200817][ T7093] FAULT_INJECTION: forcing a failure. [ 168.200817][ T7093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.252238][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.286515][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.295155][ T7093] CPU: 0 PID: 7093 Comm: syz.1.881 Not tainted syzkaller #0 [ 168.302492][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.312590][ T7093] Call Trace: [ 168.315909][ T7093] [ 168.318874][ T7093] dump_stack_lvl+0x188/0x250 [ 168.323605][ T7093] ? show_regs_print_info+0x20/0x20 [ 168.328845][ T7093] ? load_image+0x410/0x410 [ 168.333400][ T7093] ? __lock_acquire+0x7b50/0x7b50 [ 168.338501][ T7093] ? 0xffffffffa0002000 [ 168.342707][ T7093] should_fail+0x383/0x4b0 [ 168.347174][ T7093] prepare_alloc_pages+0x1e3/0x5b0 [ 168.352348][ T7093] __alloc_pages+0x11b/0x480 [ 168.356979][ T7093] ? zone_statistics+0x170/0x170 [ 168.361961][ T7093] ? memset+0x1e/0x40 [ 168.365993][ T7093] ? alloc_pages+0x452/0x560 [ 168.370629][ T7093] __page_cache_alloc+0xce/0x440 [ 168.375615][ T7093] ? add_to_page_cache_lru+0x4a0/0x4a0 [ 168.381112][ T7093] ? xas_start+0x3d1/0x770 [ 168.385580][ T7093] ? xas_load+0x119/0x140 [ 168.389953][ T7093] pagecache_get_page+0x9b8/0xf20 [ 168.395013][ T7093] ? page_cache_prev_miss+0x380/0x380 [ 168.400434][ T7093] aio_setup_ring+0x3c9/0xda0 [ 168.405158][ T7093] ? free_ioctx_reqs+0x180/0x180 [ 168.410130][ T7093] ? percpu_ref_init+0x210/0x340 [ 168.415111][ T7093] ? free_ioctx_users+0x1c0/0x1c0 [ 168.420186][ T7093] ioctx_alloc+0x316/0x770 [ 168.424649][ T7093] __se_sys_io_setup+0x7b/0x190 [ 168.429540][ T7093] do_syscall_64+0x4c/0xa0 [ 168.433999][ T7093] ? clear_bhb_loop+0x30/0x80 [ 168.438715][ T7093] ? clear_bhb_loop+0x30/0x80 [ 168.443437][ T7093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.449366][ T7093] RIP: 0033:0x7fe5bcca0159 [ 168.453814][ T7093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.473583][ T7093] RSP: 002b:00007fe5baef8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 168.482041][ T7093] RAX: ffffffffffffffda RBX: 00007fe5bcf27fa0 RCX: 00007fe5bcca0159 [ 168.490066][ T7093] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff [ 168.498073][ T7093] RBP: 00007fe5bcd3706b R08: 0000000000000000 R09: 0000000000000000 [ 168.506083][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.514090][ T7093] R13: 00007fe5bcf28038 R14: 00007fe5bcf27fa0 R15: 00007ffc3f0c6348 [ 168.522108][ T7093] [ 168.525231][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.561548][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.590594][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.597856][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.635903][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.678111][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.701598][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.721581][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.210218][ T4513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.306760][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.332224][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.350307][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.369626][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.389511][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.416276][ T6958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.465607][ T6958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.498968][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.510012][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.526783][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.535740][ T26] audit: type=1400 audit(1790771431.586:4): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7139 comm="syz.2.889" [ 169.541726][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.602168][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.100095][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 171.035934][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.073461][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.151267][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.232337][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.251400][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.323821][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.333394][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.372366][ T6918] device veth0_vlan entered promiscuous mode [ 171.410697][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.429663][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.484191][ T6918] device veth1_vlan entered promiscuous mode [ 171.601440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.620945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.646750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.686019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.717765][ T6918] device veth0_macvtap entered promiscuous mode [ 171.792244][ T6918] device veth1_macvtap entered promiscuous mode [ 171.870756][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.890145][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.939520][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.979284][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.040464][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.062696][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.084397][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.147868][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.196580][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.232458][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.289078][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.306876][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.319922][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.335210][ T6958] device veth0_vlan entered promiscuous mode [ 172.372892][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.385384][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.416351][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.440270][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.473766][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.505752][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.535519][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.556917][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.577278][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.598057][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.620496][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.641341][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.666616][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.689023][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.696982][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.734762][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.759793][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.797407][ T6918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.817203][ T6918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.846301][ T6918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.862524][ T6918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.879957][ T6958] device veth1_vlan entered promiscuous mode [ 172.897433][ T407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.053192][ T6958] device veth0_macvtap entered promiscuous mode [ 173.096352][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.150961][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.493425][ T407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.774353][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.854435][ T7231] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 173.902948][ T407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.962249][ T6958] device veth1_macvtap entered promiscuous mode [ 174.036640][ T4511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.053203][ T407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.073788][ T4511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.125345][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.221784][ T4514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.227763][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.256901][ T4514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.271227][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.303663][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.328476][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.348568][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.368925][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.390916][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.403329][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.421004][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.441798][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.478901][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.513747][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.535777][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.572897][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.620912][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.661993][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.691243][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.717934][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.751875][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.781716][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.809426][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.840350][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.861460][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.879795][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.920572][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.989252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.010047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.054328][ T6958] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.080973][ T6958] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.130710][ T6958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.150008][ T6958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.527517][ T407] tipc: Left network mode [ 175.579483][ T4514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.587354][ T4514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.668919][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.047380][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.134052][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.566860][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.972376][ T7299] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 176.999166][ T7299] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.828683][ T7330] device-mapper: ioctl: device has been removed from the dev hash table. [ 179.030573][ T407] device hsr_slave_0 left promiscuous mode [ 179.043106][ T407] device hsr_slave_1 left promiscuous mode [ 179.071647][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.100657][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.110222][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.117674][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.149682][ T407] device bridge_slave_1 left promiscuous mode [ 179.155991][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.181407][ T407] device bridge_slave_0 left promiscuous mode [ 179.187753][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.269517][ T407] device veth1_macvtap left promiscuous mode [ 179.307082][ T407] device veth0_macvtap left promiscuous mode [ 179.338169][ T407] device veth1_vlan left promiscuous mode [ 179.383428][ T407] device veth0_vlan left promiscuous mode [ 179.407840][ T7353] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 179.450152][ T7353] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.450901][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.491128][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.610522][ T407] bond0 (unregistering): Released all slaves [ 180.689112][ T7378] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 182.022851][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 182.043866][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 182.281733][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.303098][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.313927][ T7375] device bridge_slave_0 entered promiscuous mode [ 182.340524][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.374050][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.412964][ T7375] device bridge_slave_1 entered promiscuous mode [ 182.548041][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.580419][ T7410] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 182.600294][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.609843][ T7410] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 182.730676][ T7375] team0: Port device team_slave_0 added [ 182.759752][ T7375] team0: Port device team_slave_1 added [ 182.943631][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.957353][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.006843][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.079212][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.086786][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.181249][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.366850][ T7375] device hsr_slave_0 entered promiscuous mode [ 183.382701][ T7375] device hsr_slave_1 entered promiscuous mode [ 183.398007][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.411996][ T7375] Cannot create hsr debugfs directory [ 184.099293][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 184.304556][ T7424] chnl_net:caif_netlink_parms(): no params data found [ 184.576273][ T7375] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.623816][ T7375] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.647555][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.660584][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.687324][ T7424] device bridge_slave_0 entered promiscuous mode [ 184.721319][ T7375] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.739384][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.751400][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.764687][ T7424] device bridge_slave_1 entered promiscuous mode [ 184.777217][ T7375] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.882133][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.892209][ T4234] Bluetooth: hci3: command 0x0409 tx timeout [ 184.919775][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.075831][ T7424] team0: Port device team_slave_0 added [ 185.143926][ T7424] team0: Port device team_slave_1 added [ 185.327064][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.379599][ T7488] device-mapper: ioctl: device has been removed from the dev hash table. [ 185.389923][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.396906][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.511044][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.548700][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.566436][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.627391][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.651917][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.677716][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.734321][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.827172][ T407] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.957060][ T407] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.040956][ T7424] device hsr_slave_0 entered promiscuous mode [ 186.079432][ T7424] device hsr_slave_1 entered promiscuous mode [ 186.094336][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.122510][ T7424] Cannot create hsr debugfs directory [ 186.142249][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.168027][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.169727][ T7281] Bluetooth: hci0: command 0x040f tx timeout [ 186.194695][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.201877][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.276064][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.309876][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.331965][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.339147][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.376460][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.402851][ T7503] netlink: 'syz.2.961': attribute type 10 has an invalid length. [ 186.594239][ T7503] team0 (unregistering): Port device team_slave_0 removed [ 186.643389][ T7503] team0 (unregistering): Port device team_slave_1 removed [ 186.724317][ T407] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.774264][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.790062][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.855665][ T407] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.891829][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.905483][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.923299][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.947909][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.966190][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.974198][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 187.042593][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.072526][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.109791][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.139819][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.166170][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.317302][ T407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.525018][ T407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.815970][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.826067][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.865848][ T407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.894426][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.976042][ T407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.298664][ T7424] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.475025][ T7563] Bluetooth: hci0: command 0x0419 tx timeout [ 188.488501][ T7424] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.547086][ T7424] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.569423][ T407] tipc: Left network mode [ 188.577641][ T7424] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 188.663768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.705650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.798117][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.813825][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.851149][ T7375] device veth0_vlan entered promiscuous mode [ 188.858669][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.885062][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.044047][ T7375] device veth1_vlan entered promiscuous mode [ 189.051892][ T7563] Bluetooth: hci3: command 0x040f tx timeout [ 189.137333][ T7587] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 189.177395][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.222775][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.239858][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.262221][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.279897][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.309743][ T7375] device veth0_macvtap entered promiscuous mode [ 189.332024][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.351292][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.360348][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.428635][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.447457][ T7375] device veth1_macvtap entered promiscuous mode [ 189.479180][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.498614][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.526236][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.533481][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.955948][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.965011][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.974064][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.987341][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.994544][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.013396][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.038206][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.058244][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.069106][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.094260][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.114513][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.127436][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.137689][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.148554][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.167344][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.190815][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.208382][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.287549][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.307106][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.326047][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.348418][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.359882][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.371029][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.382019][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.392525][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.405554][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.425946][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.438292][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.448547][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.463526][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.478626][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.489867][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.501860][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.569593][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.588641][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.619754][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.628685][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.651055][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.664162][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.689754][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.778348][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.810126][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.832985][ T7375] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.856422][ T7375] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.879390][ T7375] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.889189][ T7375] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.921959][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.934304][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.017119][ T7629] netlink: 'syz.5.984': attribute type 10 has an invalid length. [ 191.151432][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 191.177419][ T7629] team0 (unregistering): Port device team_slave_0 removed [ 191.216886][ T7629] team0 (unregistering): Port device team_slave_1 removed [ 191.407385][ T7635] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 191.424223][ T7635] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 191.478707][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.509026][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.589719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.640379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.648021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.765192][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.775707][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.787520][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.836652][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.607004][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.619549][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.696357][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.722249][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.781759][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.804833][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.826751][ T7424] device veth0_vlan entered promiscuous mode [ 192.927843][ T407] device hsr_slave_0 left promiscuous mode [ 192.955561][ T407] device hsr_slave_1 left promiscuous mode [ 192.984693][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.998609][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.020009][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.035319][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.069783][ T407] device bridge_slave_1 left promiscuous mode [ 193.077318][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.110465][ T407] device bridge_slave_0 left promiscuous mode [ 193.135465][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.188408][ T407] device hsr_slave_0 left promiscuous mode [ 193.208127][ T407] device hsr_slave_1 left promiscuous mode [ 193.230610][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.239777][ T7698] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 193.248404][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.258230][ T7698] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 193.268161][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.281162][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.310758][ T407] device bridge_slave_1 left promiscuous mode [ 193.329397][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.351484][ T407] device bridge_slave_0 left promiscuous mode [ 193.365696][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.431757][ T407] device veth1_macvtap left promiscuous mode [ 193.441040][ T407] device veth0_macvtap left promiscuous mode [ 193.453405][ T407] device veth1_vlan left promiscuous mode [ 193.459817][ T407] device veth0_vlan left promiscuous mode [ 193.475523][ T407] device veth1_macvtap left promiscuous mode [ 193.495528][ T407] device veth0_macvtap left promiscuous mode [ 193.513112][ T407] device veth1_vlan left promiscuous mode [ 193.526184][ T407] device veth0_vlan left promiscuous mode [ 194.172442][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184930][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.414374][ T407] team0 (unregistering): Port device team_slave_1 removed [ 194.433947][ T407] team0 (unregistering): Port device team_slave_0 removed [ 194.455115][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.476955][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.615471][ T407] bond0 (unregistering): Released all slaves [ 195.066768][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.106052][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.198519][ T407] bond0 (unregistering): Released all slaves [ 195.317240][ T7703] netlink: 'syz.5.998': attribute type 10 has an invalid length. [ 195.363685][ T7424] device veth1_vlan entered promiscuous mode [ 195.461844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.494667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.512895][ T7424] device veth0_macvtap entered promiscuous mode [ 195.537243][ T7424] device veth1_macvtap entered promiscuous mode [ 195.607605][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.619711][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.629845][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.641798][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.652637][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.664024][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.675486][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.686666][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.699971][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.707870][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.751819][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.765973][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.792425][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.814021][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.841252][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.892882][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.938457][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.975368][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.994394][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.018926][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.032407][ T7759] hub 1-0:1.0: USB hub found [ 196.048917][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.060002][ T7759] hub 1-0:1.0: 1 port detected [ 196.068469][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.079697][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.115169][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.149572][ T7424] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.205300][ T7424] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.222279][ T7424] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.241609][ T7424] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.251261][ T4203] Bluetooth: hci2: command 0x0406 tx timeout [ 196.485863][ T4518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.539976][ T4518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.584464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.618181][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.640923][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.700498][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.960511][ T7781] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 196.997312][ T7781] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 197.051602][ T7796] netlink: 'syz.5.1022': attribute type 10 has an invalid length. [ 198.994582][ T7858] netlink: 'syz.1.1039': attribute type 10 has an invalid length. [ 200.350075][ T7888] loop1: detected capacity change from 0 to 512 [ 200.431185][ T7888] EXT4-fs (loop1): quotafile must be on filesystem root [ 201.211463][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.263976][ T7919] netlink: 'syz.5.1055': attribute type 10 has an invalid length. [ 201.345554][ T7911] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 201.375803][ T4203] Bluetooth: hci1: command 0x0406 tx timeout [ 201.382054][ T7911] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 203.329751][ T7981] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 203.382992][ T7968] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 203.383011][ T7968] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 204.995456][ T8017] loop2: detected capacity change from 0 to 512 [ 205.027529][ T8000] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 205.071505][ T8000] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 205.089871][ T8017] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 205.149673][ T8017] EXT4-fs (loop2): group descriptors corrupted! [ 205.465818][ T8032] loop8: detected capacity change from 0 to 512 [ 205.644311][ T8032] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 205.782519][ T8032] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 205.868242][ T8032] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 206.176159][ T8032] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 206.210040][ T8032] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 206.225067][ T8032] EXT4-fs (loop8): failed to initialize system zone (-117) [ 206.339724][ T8032] EXT4-fs (loop8): mount failed [ 207.117237][ T8065] loop8: detected capacity change from 0 to 1024 [ 207.130822][ T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.173995][ T8065] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.272971][ T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.336733][ T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.353825][ T8079] loop5: detected capacity change from 0 to 256 [ 207.361622][ T8065] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 207.498351][ T8079] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 207.584717][ T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.959038][ T4285] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 208.206105][ T8098] loop2: detected capacity change from 0 to 128 [ 208.297278][ T8098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 208.339257][ T4285] usb 9-1: config index 0 descriptor too short (expected 48, got 36) [ 208.347401][ T4285] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.351952][ T8098] System zones: [ 208.359343][ T4285] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.376344][ T4285] usb 9-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 208.386364][ T4285] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.396739][ T4285] usb 9-1: config 0 descriptor?? [ 208.409387][ T8098] 1-3, 19-19, 35-36 [ 208.419995][ T8098] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 208.449085][ T8098] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.495475][ T8098] EXT4-fs warning (device loop2): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 208.511458][ T4285] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 208.519729][ T8098] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted [ 208.959636][ T8112] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 208.968377][ T8112] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 209.912853][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 210.044421][ T4231] usb 9-1: USB disconnect, device number 2 [ 210.096785][ T8126] loop5: detected capacity change from 0 to 1024 [ 210.209577][ T8126] hfsplus: invalid length 32517 has been corrected to 255 [ 210.340097][ T26] audit: type=1800 audit(1790771472.386:5): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1108" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 210.407333][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.438931][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.448019][ T8103] device bridge_slave_0 entered promiscuous mode [ 210.506044][ T4196] Bluetooth: hci0: command 0x0409 tx timeout [ 210.545909][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.567145][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.594988][ T8103] device bridge_slave_1 entered promiscuous mode [ 211.254772][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.361961][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.511345][ T8103] team0: Port device team_slave_0 added [ 211.566779][ T8103] team0: Port device team_slave_1 added [ 211.665806][ T144] device hsr_slave_0 left promiscuous mode [ 211.675022][ T144] device hsr_slave_1 left promiscuous mode [ 211.679513][ T4196] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 211.690501][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.697953][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.759228][ T8162] futex_wake_op: syz.2.1116 tries to shift op by 144; fix this program [ 211.865380][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.927138][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.035318][ T144] device bridge_slave_1 left promiscuous mode [ 212.104052][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.212270][ T144] device bridge_slave_0 left promiscuous mode [ 212.276050][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.552870][ T144] device veth1_macvtap left promiscuous mode [ 212.573666][ T144] device veth0_macvtap left promiscuous mode [ 212.579478][ T4231] Bluetooth: hci1: command 0x0409 tx timeout [ 212.604481][ T144] device veth1_vlan left promiscuous mode [ 212.621932][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 212.629802][ T144] device veth0_vlan left promiscuous mode [ 212.712823][ T4196] usb 9-1: Using ep0 maxpacket: 32 [ 212.785409][ T8149] loop8: detected capacity change from 0 to 512 [ 212.862544][ T8149] EXT4-fs (loop8): Ignoring removed nobh option [ 212.887126][ T8149] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.996576][ T8149] ------------[ cut here ]------------ [ 213.013224][ T8149] EA inode 11 i_nlink=0 [ 213.013504][ T8149] WARNING: CPU: 1 PID: 8149 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 213.036989][ T8149] Modules linked in: [ 213.041384][ T8149] CPU: 1 PID: 8149 Comm: syz.8.1114 Not tainted syzkaller #0 [ 213.056310][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.066879][ T8149] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 213.095510][ T8149] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 213.134526][ T144] team0 (unregistering): Port device team_slave_1 removed [ 213.144140][ T8149] RSP: 0018:ffffc900042f7400 EFLAGS: 00010246 [ 213.158238][ T144] team0 (unregistering): Port device team_slave_0 removed [ 213.166804][ T8149] RAX: dc4eade898a41200 RBX: ffff88805fda6848 RCX: 0000000000080000 [ 213.183128][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.192429][ T8149] RDX: ffffc900038e4000 RSI: 0000000000012baa RDI: 0000000000012bab [ 213.207072][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.231290][ T8149] RBP: ffffc900042f74f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 213.251480][ T8149] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88805fda6690 [ 213.275886][ T8149] R13: dffffc0000000000 R14: ffff88805fda6650 R15: 0000000000000000 [ 213.302042][ T8149] FS: 00007f8922c536c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 213.326554][ T8149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.354346][ T8149] CR2: 00000000750000d8 CR3: 000000007c7f9000 CR4: 00000000003526f0 [ 213.364471][ T8149] Call Trace: [ 213.373084][ T8149] [ 213.376507][ T144] bond0 (unregistering): Released all slaves [ 213.383955][ T8149] ? ext4_xattr_block_csum+0x560/0x560 [ 213.393417][ T8149] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 213.406074][ T8149] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 213.412687][ T8149] ? errseq_check+0x3c/0x70 [ 213.417344][ T8149] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 213.423722][ T8149] ? __ext4_journal_ensure_credits+0x450/0x450 [ 213.430497][ T8149] ? ext4_get_inode_loc+0xf6/0x120 [ 213.435815][ T8149] ext4_xattr_delete_inode+0xada/0xca0 [ 213.441853][ T8149] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 213.448146][ T8149] ext4_evict_inode+0xc0c/0x1050 [ 213.467349][ T8149] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 213.474158][ T8149] ? do_raw_spin_unlock+0x11d/0x230 [ 213.477227][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.480436][ T8149] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 213.492885][ T8149] evict+0x4b6/0x8b0 [ 213.496912][ T8149] ? proc_nr_inodes+0x320/0x320 [ 213.509010][ T8149] ? do_raw_spin_unlock+0x11d/0x230 [ 213.515251][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.530336][ T8149] ? _raw_spin_unlock+0x24/0x40 [ 213.541240][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.563448][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.588982][ T8149] ? iput+0x6ea/0x880 [ 213.597423][ T8149] ext4_orphan_cleanup+0xc96/0x14f0 [ 213.620757][ T8149] ? _raw_write_unlock+0x24/0x40 [ 213.633693][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.645580][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.671567][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.680376][ T8149] ? ext4_orphan_del+0xc90/0xc90 [ 213.685486][ T8149] ? errseq_check_and_advance+0x62/0x120 [ 213.711897][ T8149] ext4_fill_super+0x8c65/0x93f0 [ 213.739348][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.759728][ T8149] ? format_decode+0x8b1/0x1330 [ 213.764704][ T8149] ? ext4_mount+0x40/0x40 [ 213.779908][ T8149] ? set_blocksize+0x1f1/0x360 [ 213.784767][ T8149] ? sb_set_blocksize+0xa5/0xe0 [ 213.799003][ T8149] mount_bdev+0x28a/0x3c0 [ 213.803408][ T8149] ? ext4_mount+0x40/0x40 [ 213.812273][ T8149] legacy_get_tree+0xe6/0x180 [ 213.817018][ T8149] ? ext4_errno_to_code+0x160/0x160 [ 213.823092][ T8149] vfs_get_tree+0x88/0x270 [ 213.827577][ T8149] do_new_mount+0x247/0xa40 [ 213.832827][ T8149] __se_sys_mount+0x2e3/0x3d0 [ 213.837573][ T8149] ? __x64_sys_mount+0xc0/0xc0 [ 213.868280][ T8149] ? lockdep_hardirqs_on+0x94/0x140 [ 213.888910][ T8149] ? __x64_sys_mount+0x1c/0xc0 [ 213.904890][ T8149] do_syscall_64+0x4c/0xa0 [ 213.928403][ T8149] ? clear_bhb_loop+0x30/0x80 [ 213.937284][ T8103] device hsr_slave_0 entered promiscuous mode [ 213.944699][ T8103] device hsr_slave_1 entered promiscuous mode [ 213.951779][ T8103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.959840][ T8103] Cannot create hsr debugfs directory [ 213.968675][ T8149] ? clear_bhb_loop+0x30/0x80 [ 214.009972][ T8149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.015952][ T8149] RIP: 0033:0x7f89249fc3ca [ 214.069485][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 214.079145][ T8149] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.127165][ T8149] RSP: 002b:00007f8922c52e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.148912][ T8149] RAX: ffffffffffffffda RBX: 00007f8922c52ee0 RCX: 00007f89249fc3ca [ 214.156952][ T8149] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8922c52ea0 [ 214.181341][ T8149] RBP: 0000200000000180 R08: 00007f8922c52ee0 R09: 0000000000200700 [ 214.193081][ T8149] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000000 [ 214.217764][ T8149] R13: 00007f8922c52ea0 R14: 0000000000000478 R15: 0000200000000040 [ 214.229642][ T8149] [ 214.232726][ T8149] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.240140][ T8149] CPU: 1 PID: 8149 Comm: syz.8.1114 Not tainted syzkaller #0 [ 214.247549][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.257635][ T8149] Call Trace: [ 214.260950][ T8149] [ 214.263912][ T8149] dump_stack_lvl+0x188/0x250 [ 214.268621][ T8149] ? show_regs_print_info+0x20/0x20 [ 214.273853][ T8149] ? load_image+0x410/0x410 [ 214.278402][ T8149] panic+0x2f8/0x850 [ 214.282349][ T8149] ? bpf_jit_dump+0xd0/0xd0 [ 214.286904][ T8149] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 214.292924][ T8149] __warn+0x248/0x2b0 [ 214.296952][ T8149] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 214.302970][ T8149] report_bug+0x1b9/0x2e0 [ 214.307346][ T8149] handle_bug+0x3a/0x70 [ 214.311558][ T8149] exc_invalid_op+0x16/0x40 [ 214.316103][ T8149] asm_exc_invalid_op+0x16/0x20 [ 214.320988][ T8149] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 214.327614][ T8149] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 214.347260][ T8149] RSP: 0018:ffffc900042f7400 EFLAGS: 00010246 [ 214.353370][ T8149] RAX: dc4eade898a41200 RBX: ffff88805fda6848 RCX: 0000000000080000 [ 214.361381][ T8149] RDX: ffffc900038e4000 RSI: 0000000000012baa RDI: 0000000000012bab [ 214.369398][ T8149] RBP: ffffc900042f74f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 214.377404][ T8149] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88805fda6690 [ 214.385407][ T8149] R13: dffffc0000000000 R14: ffff88805fda6650 R15: 0000000000000000 [ 214.393446][ T8149] ? ext4_xattr_block_csum+0x560/0x560 [ 214.398950][ T8149] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 214.405058][ T8149] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 214.411017][ T8149] ? errseq_check+0x3c/0x70 [ 214.415575][ T8149] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 214.421367][ T8149] ? __ext4_journal_ensure_credits+0x450/0x450 [ 214.427561][ T8149] ? ext4_get_inode_loc+0xf6/0x120 [ 214.432707][ T8149] ext4_xattr_delete_inode+0xada/0xca0 [ 214.438219][ T8149] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 214.444345][ T8149] ext4_evict_inode+0xc0c/0x1050 [ 214.449334][ T8149] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 214.455265][ T8149] ? do_raw_spin_unlock+0x11d/0x230 [ 214.460500][ T8149] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 214.466423][ T8149] evict+0x4b6/0x8b0 [ 214.470572][ T8149] ? proc_nr_inodes+0x320/0x320 [ 214.475462][ T8149] ? do_raw_spin_unlock+0x11d/0x230 [ 214.480708][ T8149] ? _raw_spin_unlock+0x24/0x40 [ 214.485607][ T8149] ? iput+0x6ea/0x880 [ 214.489646][ T8149] ext4_orphan_cleanup+0xc96/0x14f0 [ 214.494888][ T8149] ? _raw_write_unlock+0x24/0x40 [ 214.499869][ T8149] ? ext4_orphan_del+0xc90/0xc90 [ 214.504954][ T8149] ? errseq_check_and_advance+0x62/0x120 [ 214.510631][ T8149] ext4_fill_super+0x8c65/0x93f0 [ 214.515607][ T8149] ? format_decode+0x8b1/0x1330 [ 214.520528][ T8149] ? ext4_mount+0x40/0x40 [ 214.524888][ T8149] ? set_blocksize+0x1f1/0x360 [ 214.529699][ T8149] ? sb_set_blocksize+0xa5/0xe0 [ 214.534599][ T8149] mount_bdev+0x28a/0x3c0 [ 214.538966][ T8149] ? ext4_mount+0x40/0x40 [ 214.543335][ T8149] legacy_get_tree+0xe6/0x180 [ 214.548044][ T8149] ? ext4_errno_to_code+0x160/0x160 [ 214.553277][ T8149] vfs_get_tree+0x88/0x270 [ 214.557744][ T8149] do_new_mount+0x247/0xa40 [ 214.562569][ T8149] __se_sys_mount+0x2e3/0x3d0 [ 214.567287][ T8149] ? __x64_sys_mount+0xc0/0xc0 [ 214.572089][ T8149] ? lockdep_hardirqs_on+0x94/0x140 [ 214.577322][ T8149] ? __x64_sys_mount+0x1c/0xc0 [ 214.582139][ T8149] do_syscall_64+0x4c/0xa0 [ 214.586598][ T8149] ? clear_bhb_loop+0x30/0x80 [ 214.591304][ T8149] ? clear_bhb_loop+0x30/0x80 [ 214.596012][ T8149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.601943][ T8149] RIP: 0033:0x7f89249fc3ca [ 214.606392][ T8149] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.626025][ T8149] RSP: 002b:00007f8922c52e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.634579][ T8149] RAX: ffffffffffffffda RBX: 00007f8922c52ee0 RCX: 00007f89249fc3ca [ 214.642581][ T8149] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8922c52ea0 [ 214.650585][ T8149] RBP: 0000200000000180 R08: 00007f8922c52ee0 R09: 0000000000200700 [ 214.658589][ T8149] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000000 [ 214.666606][ T8149] R13: 00007f8922c52ea0 R14: 0000000000000478 R15: 0000200000000040 [ 214.674634][ T8149] [ 214.678004][ T8149] Kernel Offset: disabled [ 214.682788][ T8149] Rebooting in 86400 seconds..