last executing test programs: 14.098198611s ago: executing program 2 (id=12): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x32, 0x31, 0x34, 0x35, 0x61, 0x0, 0x57, 0x66, 0x66, 0x30, 0x30, 0x64, 0x36, 0x62, 0x31]}, &(0x7f0000000240)={0x0, "e38814723ab798ccb9bee0eeec135f61124ca30f9a252addb94c317d54c8829051fe40036d1ae2e45a393a1c96b82e06bb81022ab8843b3704b174780081d3cd", 0x14}, 0x48, 0xfffffffffffffffa) keyctl$setperm(0x5, r1, 0x29260208) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='6', 0x1) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) 13.478838851s ago: executing program 2 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0x2, 0x1c1003) getsockopt$inet_opts(r1, 0x84, 0x0, 0xfffffffffffffffe, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000000000) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setgid(0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0xb, 0x10, {0x10, 0x31, "3ce8796e578d63f43171ae47c03e"}}, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x38, {[@global=@item_4={0x3, 0x1, 0x2, "c188568f"}, @global=@item_4={0x3, 0x1, 0x9, "673a2deb"}, @local=@item_4={0x3, 0x2, 0x1, "2af34c34"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0xa}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0x9, "e3"}, @local=@item_4={0x3, 0x2, 0x1, "26ab42f0"}, @local=@item_4={0x3, 0x2, 0x0, "326dc324"}, @global=@item_4={0x3, 0x1, 0xa, "7e8c722f"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x5, "f6f895f9"}, @global=@item_4={0x3, 0x1, 0x9, "4bac2740"}, @local=@item_4={0x3, 0x2, 0x2, "2bd9733b"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x849}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x15, 0xe7, "73c0f1e050572346877220a6563b6959df9ece94a7294df48e5e81d3ba9bf5c13dcb98bfaa22f20dac54ca6cc9d878edba74b5f90ec06a23603e57b7ef6fe2f019593ad5ccd61e40b283d62c21d1c22b647a452076f057d7969d6f40a7f0ca4f8dba511896f800061a460a99c287322c3fa8a0e274038335ac0a499a92af11c0ee6d23e28fa01cce8577295eff06fd55d6a2fe06d9cbe5a73c2e74ae07fb6c8dd1886c62f29ab958a1ab38e26a434912410e8c74279e9f0dd0f195203007ac5ef42179f0461130f831cd97d87b716bc228d8d2045cc676bac164366d3b394bd0ba070e4cc6eaff"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x1, 0x87, "b0942b1c71a2cd90cf97029046e47fec2649ee73a92173dc6c767d1c2f4c125f3759748356821ad13fdfcfb1baa5e6f99e9ba0939b9bb7509b7efa5b2ff502af2df30eed4d4468fb0d6671fb63e32559ed51e4c62aae04dc5a357c49905f4efa57e5b3b4e0c89934f72db1597e0443b92d50afaa2799a77aaece4306dec7fdcf4d5502968839cb"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) unshare(0x42000000) 13.122566624s ago: executing program 0 (id=16): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203e1fd09000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 12.742166483s ago: executing program 0 (id=17): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x0, 0x23, 0xd7, {0xd7, 0xb, "7e920766cf57f5b5bcb3f606c857d5ffea953fe00cbd177cc2efe5e863d2e11cb9bd28939733d9d59302c75c4a6ece1d7cf5109edec07a1607bac3a895684100a88133390bba660689e355a580f2414ed41e3c3588f1f7f06ebac52e9467e61fb09d0c6c3b47e4f84b247c3a6012dec5d4b1da3405ee7d736cc3e86cfc6053d86e4bd77042a2b7bfc6d4f2d132cc2f235436a7b9b5d509da44d6094d4ee6ebc67bb7d19c3f18863f005d11d5277df252c89a72d8b8281475ee8c35e0957244cec2fac254ce94cdca2edf3224b397260137c171ca06"}}, &(0x7f0000000340)={0x0, 0x3, 0x52, @string={0x52, 0x3, "248a0d60044b82acde465e54d52f56dbbf13e5e9920764886d488926dc950d36b5a4a091c5122dd5b139fc519a7d10a03cd280f9afeec778f56bca6f14277f3e09f0c8bea65ecf4cb5bd55f898d62ae6"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x0, 0x14, 0x2f, "f0179356452c5db69cb7f56798b27859cbc1b725b3d0c65cba547413837b936e8985f46b678439b1d1068e65e3505d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x18, {0x16, "1deccfc604e4c8a54cae7a78a3b5451077932d6ad885"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="401005000000c986d34fb6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.072969695s ago: executing program 1 (id=22): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0xcc040}, 0x26048040) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, 0x0, 0x7f03) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.811488278s ago: executing program 0 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 9.994242685s ago: executing program 1 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x1a) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCXONC(r1, 0x540a, 0x2) 9.946615949s ago: executing program 2 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 9.786072032s ago: executing program 3 (id=26): syz_io_uring_setup(0x2517e, &(0x7f0000000740)={0x0, 0x9aa, 0x1000, 0x2, 0x1cb}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) 8.485891821s ago: executing program 1 (id=27): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 7.9344148s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r5, &(0x7f0000000000), 0x2002) 7.750541724s ago: executing program 1 (id=29): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x12, "04e70787b64d173dbd81e6469a2100eca6aa"}}) 7.698817142s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x7f4e633aaa161251) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) execve(&(0x7f0000001380)='./sys\x00', 0x0, 0x0) 5.962700708s ago: executing program 3 (id=31): rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) read(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 5.3114775s ago: executing program 2 (id=32): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4.930682961s ago: executing program 1 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x20, 0x1a, 0x2, "a618"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000a00)={0x0, 0xe, 0xf, "0f6fac5ca3b36386cdcf1b91481450"}, 0x0, 0x0}) 4.930416509s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f0000000340), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) unshare(0x20000400) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.930346459s ago: executing program 3 (id=35): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 3.439297062s ago: executing program 2 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0\x00', 0x4}, 0x18) 1.16288117s ago: executing program 0 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) accept4$llc(r3, 0x0, 0x0, 0x0) 889.867224ms ago: executing program 3 (id=38): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="0e00000002000204", 0x8) write(r0, &(0x7f0000000240)="0e00010002000204", 0x8) 889.642989ms ago: executing program 1 (id=39): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106183, &(0x7f0000000000)) 48.886426ms ago: executing program 2 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) 0s ago: executing program 3 (id=41): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x2, "bdb0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 81.863141][ T5603] cgroup: Unknown subsys name 'net' [ 81.998703][ T5603] cgroup: Unknown subsys name 'cpuset' [ 82.002347][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.714606][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.213830][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.217655][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.221314][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.222701][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.223616][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.224078][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.229567][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.230523][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.232391][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.235932][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.239652][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.240505][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.265822][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.266260][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.266974][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.274199][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.274665][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.274681][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.277164][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.292928][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.997847][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.998012][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.998156][ T5616] bridge_slave_0: entered allmulticast mode [ 88.000457][ T5616] bridge_slave_0: entered promiscuous mode [ 88.075715][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.075834][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.075953][ T5616] bridge_slave_1: entered allmulticast mode [ 88.077603][ T5616] bridge_slave_1: entered promiscuous mode [ 88.206720][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.228857][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.229020][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.229127][ T5614] bridge_slave_0: entered allmulticast mode [ 88.230519][ T5614] bridge_slave_0: entered promiscuous mode [ 88.256922][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.289447][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.289550][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.289667][ T5614] bridge_slave_1: entered allmulticast mode [ 88.291261][ T5614] bridge_slave_1: entered promiscuous mode [ 88.372341][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.372502][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.372634][ T5613] bridge_slave_0: entered allmulticast mode [ 88.374451][ T5613] bridge_slave_0: entered promiscuous mode [ 88.396269][ T5620] Bluetooth: hci3: command tx timeout [ 88.396655][ T5620] Bluetooth: hci2: command tx timeout [ 88.397765][ T5620] Bluetooth: hci0: command tx timeout [ 88.398094][ T5620] Bluetooth: hci1: command tx timeout [ 88.443016][ T5616] team0: Port device team_slave_0 added [ 88.444278][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444726][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.445094][ T5613] bridge_slave_1: entered allmulticast mode [ 88.450073][ T5613] bridge_slave_1: entered promiscuous mode [ 88.483688][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.483797][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.484985][ T5615] bridge_slave_0: entered allmulticast mode [ 88.490557][ T5615] bridge_slave_0: entered promiscuous mode [ 88.511887][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.515092][ T5616] team0: Port device team_slave_1 added [ 88.516017][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.516281][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.517964][ T5615] bridge_slave_1: entered allmulticast mode [ 88.522671][ T5615] bridge_slave_1: entered promiscuous mode [ 88.563848][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.596527][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.640554][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.663495][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.663515][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.663535][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.712286][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.732128][ T5614] team0: Port device team_slave_0 added [ 88.732989][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.733005][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.733034][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.740842][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.804330][ T5614] team0: Port device team_slave_1 added [ 88.834780][ T5613] team0: Port device team_slave_0 added [ 88.853467][ T5615] team0: Port device team_slave_0 added [ 88.860800][ T5613] team0: Port device team_slave_1 added [ 88.895618][ T5615] team0: Port device team_slave_1 added [ 88.913520][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.913539][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.913562][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.991141][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.991160][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.991188][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.992340][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.992355][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.992384][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.019495][ T5616] hsr_slave_0: entered promiscuous mode [ 89.022792][ T5616] hsr_slave_1: entered promiscuous mode [ 89.104429][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.104457][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.104479][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.107104][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.107121][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.107146][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.109606][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.109622][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.109648][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.327549][ T5614] hsr_slave_0: entered promiscuous mode [ 89.328395][ T5614] hsr_slave_1: entered promiscuous mode [ 89.328973][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 89.329062][ T5614] Cannot create hsr debugfs directory [ 89.383790][ T5615] hsr_slave_0: entered promiscuous mode [ 89.385820][ T5615] hsr_slave_1: entered promiscuous mode [ 89.388212][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 89.388272][ T5615] Cannot create hsr debugfs directory [ 89.415982][ T5613] hsr_slave_0: entered promiscuous mode [ 89.416790][ T5613] hsr_slave_1: entered promiscuous mode [ 89.417369][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 89.417405][ T5613] Cannot create hsr debugfs directory [ 89.888830][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.909721][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.910758][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.929395][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.930436][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.942507][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.957072][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.961339][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.045658][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.049357][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.050123][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.057037][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.061710][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.091931][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.107584][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.111716][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.220945][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.234420][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.235597][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.238266][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.239559][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.243533][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.287955][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.290943][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.409338][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.423285][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.434967][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.435873][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.438615][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.441356][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.449598][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.475711][ T52] Bluetooth: hci1: command tx timeout [ 90.477101][ T52] Bluetooth: hci0: command tx timeout [ 90.478338][ T52] Bluetooth: hci2: command tx timeout [ 90.478418][ T52] Bluetooth: hci3: command tx timeout [ 90.494786][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.518020][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.569873][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.603815][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.604499][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.633988][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.634107][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.679864][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.752081][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.777525][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.806125][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.806208][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.846816][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.846912][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.890823][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.942302][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.942415][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.000809][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.000929][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.060001][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.183384][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.223469][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.223593][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.263452][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.263563][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.871735][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.053443][ T5616] veth0_vlan: entered promiscuous mode [ 92.091918][ T5616] veth1_vlan: entered promiscuous mode [ 92.150404][ T190] cfg80211: failed to load regulatory.db [ 92.230394][ T5616] veth0_macvtap: entered promiscuous mode [ 92.248792][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.276516][ T5616] veth1_macvtap: entered promiscuous mode [ 92.351667][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.361978][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.409954][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.455415][ T5614] veth0_vlan: entered promiscuous mode [ 92.485947][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.486134][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.529070][ T5614] veth1_vlan: entered promiscuous mode [ 92.541112][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.545742][ T5620] Bluetooth: hci3: command tx timeout [ 92.545776][ T5620] Bluetooth: hci2: command tx timeout [ 92.545799][ T5620] Bluetooth: hci0: command tx timeout [ 92.545822][ T5620] Bluetooth: hci1: command tx timeout [ 92.638241][ T5615] veth0_vlan: entered promiscuous mode [ 92.658465][ T5615] veth1_vlan: entered promiscuous mode [ 92.664518][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.664568][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.762079][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.762102][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.796799][ T5614] veth0_macvtap: entered promiscuous mode [ 92.836064][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.836087][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.837091][ T5614] veth1_macvtap: entered promiscuous mode [ 92.897811][ T5613] veth0_vlan: entered promiscuous mode [ 92.921910][ T5615] veth0_macvtap: entered promiscuous mode [ 92.938540][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.958054][ T5613] veth1_vlan: entered promiscuous mode [ 92.962785][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.972380][ T5615] veth1_macvtap: entered promiscuous mode [ 92.998274][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.014603][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.016703][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.016822][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.016929][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.140642][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.190054][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.210424][ T5613] veth0_macvtap: entered promiscuous mode [ 93.279122][ T5613] veth1_macvtap: entered promiscuous mode [ 93.314612][ T1024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.352376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.352400][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.417105][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.460117][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.477573][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.477590][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.505196][ T1024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.546237][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.606469][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.606495][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.635421][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724806][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 93.726963][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 93.732377][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.763121][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.763153][ T44] usb 3-1: Product: syz [ 93.763171][ T44] usb 3-1: Manufacturer: syz [ 93.763189][ T44] usb 3-1: SerialNumber: syz [ 93.839868][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.839892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.927537][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.958961][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.958984][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.964233][ T1024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.964349][ T1024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.964446][ T1024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.974782][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.083116][ T44] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 94.121359][ T4967] bcm5974 3-1:1.0: could not read from device [ 94.141551][ T4967] bcm5974 3-1:1.0: could not read from device [ 94.173188][ T4967] bcm5974 3-1:1.0: could not read from device [ 94.184521][ T44] usb 3-1: USB disconnect, device number 2 [ 94.201754][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.201778][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.312321][ T5780] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.312429][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.502500][ T5784] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 94.514617][ T5618] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.517894][ T5784] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 6 (only 8 groups) [ 94.634611][ T52] Bluetooth: hci1: command tx timeout [ 94.634634][ T5620] Bluetooth: hci0: command tx timeout [ 94.634653][ T52] Bluetooth: hci2: command tx timeout [ 94.634666][ T5620] Bluetooth: hci3: command tx timeout [ 94.667700][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 94.674594][ T5618] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 94.687295][ T5618] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 94.687336][ T5618] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.687367][ T5618] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.687405][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.693626][ T5618] usb 2-1: config 0 descriptor?? [ 94.716134][ T5624] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.896858][ T5624] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 94.898288][ T5624] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 94.898315][ T5624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 94.902721][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.902747][ T5624] usb 1-1: Product: syz [ 94.902762][ T5624] usb 1-1: Manufacturer: syz [ 94.902778][ T5624] usb 1-1: SerialNumber: syz [ 94.926310][ T5624] usb 1-1: config 0 descriptor?? [ 95.136891][ T5788] FAULT_INJECTION: forcing a failure. [ 95.136891][ T5788] name failslab, interval 1, probability 0, space 0, times 1 [ 95.136944][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 95.136971][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.136996][ T5788] Call Trace: [ 95.137009][ T5788] [ 95.137019][ T5788] dump_stack_lvl+0xe8/0x150 [ 95.137063][ T5788] should_fail_ex+0x3eb/0x540 [ 95.137138][ T5788] should_failslab+0xa8/0x100 [ 95.137167][ T5788] __kmalloc_noprof+0xf9/0x710 [ 95.137197][ T5788] ? rcu_is_watching+0x16/0xb0 [ 95.137220][ T5788] ? tomoyo_realpath_from_path+0xef/0x640 [ 95.137247][ T5788] ? tomoyo_realpath_from_path+0xef/0x640 [ 95.137284][ T5788] tomoyo_realpath_from_path+0xef/0x640 [ 95.137324][ T5788] ? tomoyo_path_number_perm+0x219/0x5f0 [ 95.137347][ T5788] tomoyo_path_number_perm+0x246/0x5f0 [ 95.137372][ T5788] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.137393][ T5788] ? __lock_acquire+0x747/0x2de0 [ 95.137443][ T5788] ? hook_file_ioctl+0x1f2/0x600 [ 95.137494][ T5788] ? __fget_files+0x2a/0x420 [ 95.137525][ T5788] ? __fget_files+0x2a/0x420 [ 95.137550][ T5788] ? __fget_files+0x3a2/0x420 [ 95.137580][ T5788] ? __fget_files+0x2a/0x420 [ 95.137611][ T5788] security_file_ioctl+0xc3/0x2a0 [ 95.137648][ T5788] __se_sys_ioctl+0x47/0x170 [ 95.137685][ T5788] do_syscall_64+0x166/0x520 [ 95.137707][ T5788] ? trace_irq_disable+0x3b/0x140 [ 95.137740][ T5788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.137762][ T5788] ? clear_bhb_loop+0x70/0xc0 [ 95.137790][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.137811][ T5788] RIP: 0033:0x7fee33d9e159 [ 95.137840][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.137860][ T5788] RSP: 002b:00007fee34baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.137889][ T5788] RAX: ffffffffffffffda RBX: 00007fee34025fa0 RCX: 00007fee33d9e159 [ 95.137905][ T5788] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 95.137919][ T5788] RBP: 00007fee33e3506b R08: 0000000000000000 R09: 0000000000000000 [ 95.137932][ T5788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.137945][ T5788] R13: 00007fee34026038 R14: 00007fee34025fa0 R15: 00007ffed52d3828 [ 95.137979][ T5788] [ 95.138015][ T5788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.171300][ T5797] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 96.348013][ T5624] mos7840 1-1:0.0: required endpoints missing [ 96.363544][ T5624] usb 1-1: USB disconnect, device number 2 [ 96.702417][ T27] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.730532][ T5618] hid-alps 0003:044E:120B.0001: failed read register (-71) [ 96.730659][ T5618] hid-alps 0003:044E:120B.0001: failed U1_NUM_SENS_X (-71) [ 96.751183][ T5618] hid-alps 0003:044E:120B.0001: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 96.782673][ T5618] usb 2-1: USB disconnect, device number 2 [ 96.852140][ T5799] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.957262][ T5803] fido_id[5803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.184233][ T5799] jffs2: notice: (5799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.503107][ T52] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 97.644016][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.794676][ T9] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 97.795773][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 97.795800][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 97.795827][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 97.795850][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 97.799430][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.799455][ T9] usb 1-1: Product: syz [ 97.799470][ T9] usb 1-1: Manufacturer: syz [ 97.799486][ T9] usb 1-1: SerialNumber: syz [ 97.848772][ T9] usb 1-1: config 0 descriptor?? [ 97.907996][ T9] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 98.207984][ T5827] jffs2: notice: (5827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.338646][ T9] scsi host1: usb-storage 1-1:0.0 [ 98.561299][ T5618] usb 1-1: USB disconnect, device number 3 [ 98.714677][ T52] Bluetooth: hci4: command 0xfc11 tx timeout [ 98.717339][ T5626] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 99.503948][ T5626] Bluetooth: hci2: command tx timeout [ 101.140870][ T5873] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 104.754543][ T5896] FAULT_INJECTION: forcing a failure. [ 104.754543][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 104.754584][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 104.754614][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.754648][ T5896] Call Trace: [ 104.754658][ T5896] [ 104.754669][ T5896] dump_stack_lvl+0xe8/0x150 [ 104.754710][ T5896] should_fail_ex+0x3eb/0x540 [ 104.754746][ T5896] should_failslab+0xa8/0x100 [ 104.754780][ T5896] ? alloc_empty_file+0x5b/0x1d0 [ 104.754809][ T5896] kmem_cache_alloc_noprof+0x9c/0x600 [ 104.754848][ T5896] ? alloc_empty_file+0x5b/0x1d0 [ 104.754901][ T5896] alloc_empty_file+0x5b/0x1d0 [ 104.754932][ T5896] path_openat+0x9d/0x1e40 [ 104.754968][ T5896] ? arch_stack_walk+0xfb/0x150 [ 104.755026][ T5896] do_file_open+0x23e/0x4a0 [ 104.755066][ T5896] ? stack_depot_save_flags+0x33/0x7f0 [ 104.755108][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 104.755180][ T5896] ? do_open_execat+0xad/0x590 [ 104.755220][ T5896] do_open_execat+0x12b/0x590 [ 104.755257][ T5896] ? __pfx_do_open_execat+0x10/0x10 [ 104.755307][ T5896] alloc_bprm+0x24/0x640 [ 104.755349][ T5896] do_execveat_common+0x167/0xbd0 [ 104.755387][ T5896] ? strncpy_from_user+0x150/0x2c0 [ 104.755419][ T5896] ? do_getname+0x151/0x250 [ 104.755451][ T5896] __x64_sys_execve+0x97/0xc0 [ 104.755491][ T5896] do_syscall_64+0x166/0x520 [ 104.755515][ T5896] ? trace_irq_disable+0x3b/0x140 [ 104.755552][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.755580][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 104.755612][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.755637][ T5896] RIP: 0033:0x7fbb4319e159 [ 104.755660][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.755681][ T5896] RSP: 002b:00007fbb43fa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 104.755710][ T5896] RAX: ffffffffffffffda RBX: 00007fbb43425fa0 RCX: 00007fbb4319e159 [ 104.755729][ T5896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001380 [ 104.755746][ T5896] RBP: 00007fbb4323506b R08: 0000000000000000 R09: 0000000000000000 [ 104.755762][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.755778][ T5896] R13: 00007fbb43426038 R14: 00007fbb43425fa0 R15: 00007ffd3e02bc48 [ 104.755818][ T5896] [ 106.733980][ T5701] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.734216][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 106.873977][ T5701] usb 2-1: device descriptor read/64, error -32 [ 107.171493][ T5701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.752719][ T5911] Zero length message leads to an empty skb [ 108.853792][ T5910] ªªªªªª: renamed from vlan0 (while UP) [ 108.995341][ T5701] usb 2-1: device descriptor read/all, error -71 [ 108.997293][ T5701] usb usb2-port1: attempt power cycle [ 109.962689][ T5922] Bluetooth: MGMT ver 1.23 [ 110.007477][ T5922] Bluetooth: MGMT ver 1.23 [ 110.081860][ T4944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 110.093820][ T4944] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 110.102358][ T4944] CPU: 0 UID: 0 PID: 4944 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 110.111769][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.121891][ T4944] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 110.127159][ T4944] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 110.147086][ T4944] RSP: 0018:ffffc9000edbf868 EFLAGS: 00010202 [ 110.153209][ T4944] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 110.161227][ T4944] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807870ca20 [ 110.169235][ T4944] RBP: 0000000000009801 R08: ffff88807870ca7f R09: 1ffff1100f0e194f [ 110.177376][ T4944] R10: dffffc0000000000 R11: ffffed100f0e1950 R12: dffffc0000000000 [ 110.185388][ T4944] R13: ffff88807870ca00 R14: ffff888076da6620 R15: 0000000000000008 [ 110.193402][ T4944] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 110.202372][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.208992][ T4944] CR2: 0000001b33824000 CR3: 000000007ba1c000 CR4: 00000000003526f0 [ 110.217002][ T4944] Call Trace: [ 110.220322][ T4944] [ 110.223289][ T4944] ? __pfx_journal_end_buffer_io_sync+0x10/0x10 [ 110.229587][ T4944] jbd2_journal_commit_transaction+0x2285/0x5c80 [ 110.235993][ T4944] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 110.242812][ T4944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 110.248706][ T4944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 110.254583][ T4944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 110.260449][ T4944] ? __timer_delete_sync+0x4a7/0x520 [ 110.265787][ T4944] kjournald2+0x3bc/0x740 [ 110.270161][ T4944] ? __pfx_kjournald2+0x10/0x10 [ 110.275084][ T4944] ? __pfx_autoremove_wake_function+0x10/0x10 [ 110.281199][ T4944] ? __kthread_parkme+0x71/0x1f0 [ 110.286181][ T4944] ? __kthread_parkme+0x199/0x1f0 [ 110.291244][ T4944] kthread+0x38b/0x480 [ 110.295348][ T4944] ? __pfx_kjournald2+0x10/0x10 [ 110.300324][ T4944] ? __pfx_kthread+0x10/0x10 [ 110.304966][ T4944] ret_from_fork+0x514/0xb70 [ 110.309598][ T4944] ? __pfx_ret_from_fork+0x10/0x10 [ 110.314744][ T4944] ? __switch_to+0xc89/0x1420 [ 110.319462][ T4944] ? __pfx_kthread+0x10/0x10 [ 110.324090][ T4944] ret_from_fork_asm+0x1a/0x30 [ 110.328917][ T4944] [ 110.331953][ T4944] Modules linked in: [ 110.336861][ T4944] ---[ end trace 0000000000000000 ]--- [ 110.381106][ T4944] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 110.381142][ T4944] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 110.381159][ T4944] RSP: 0018:ffffc9000edbf868 EFLAGS: 00010202 [ 110.381180][ T4944] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 110.381195][ T4944] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807870ca20 [ 110.381210][ T4944] RBP: 0000000000009801 R08: ffff88807870ca7f R09: 1ffff1100f0e194f [ 110.381225][ T4944] R10: dffffc0000000000 R11: ffffed100f0e1950 R12: dffffc0000000000 [ 110.381241][ T4944] R13: ffff88807870ca00 R14: ffff888076da6620 R15: 0000000000000008 [ 110.381256][ T4944] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 110.381274][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.381288][ T4944] CR2: 00005621c3876950 CR3: 0000000025bb2000 CR4: 00000000003526f0 [ 110.381312][ T4944] Kernel panic - not syncing: Fatal exception [ 110.482642][ T4944] Kernel Offset: disabled [ 110.487016][ T4944] Rebooting in 86400 seconds..