last executing test programs: 3.442069237s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x30, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) shutdown(r0, 0x1) 3.357932256s ago: executing program 4 (id=5): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x40, 0x2, 0x9, 0x2, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000001300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0xb8, 0x339, 0xfffe, 0x101, "b079b5905683e1439e2e22f3de9a787cddb21a539f12137e73308f193f1179f42d0815e8540db4daef5ec758fb04dc6e97839f3084c1a1305d063168ca4e1545b84b7c3eb44994eb051487c79cac5359a4b6ac9c64143394038d7b8e45aef5c661d711214965567afaca2f3877516a08a292faf0f7a564d206dc47abf3a3a253"}) 3.354317327s ago: executing program 2 (id=9): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3.29548792s ago: executing program 4 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000000c0)='7', 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x3, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8400) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) 3.071798382s ago: executing program 2 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="000708004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) 2.763627813s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0xc0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x40000000) 2.142359996s ago: executing program 2 (id=16): syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/os_desc/use\x00', 0x114) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r4, &(0x7f0000000480)='1\n', 0x2) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x4, 0x12) 1.414219145s ago: executing program 4 (id=24): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x92e, 0x746ffec1]}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 848.441265ms ago: executing program 0 (id=39): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 835.948648ms ago: executing program 0 (id=41): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 785.704439ms ago: executing program 0 (id=42): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000080000000000000001"], 0x40) 704.803968ms ago: executing program 0 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000cc0)="300000001c00010401000000000000002d0000000100000080000001050001003078440000000a000200000000000000", 0x30) 692.825791ms ago: executing program 0 (id=44): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000180)="24b6", 0x2, r1) 508.765303ms ago: executing program 1 (id=46): mount(&(0x7f0000000240)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='jfs\x00', 0x200840, 0x0) 251.855182ms ago: executing program 0 (id=47): add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000500)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c", 0xc0, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180ba", 0xa, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000304000000000000000000000100", @ANYRES32, @ANYRESDEC], 0x58}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f800132403060206030407"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x10, 0x3, 0x0) ioperm(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.272501ms ago: executing program 1 (id=48): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4a781000) getcwd(&(0x7f0000000400)=""/4096, 0x1000) 152.879495ms ago: executing program 1 (id=49): r0 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) 152.688415ms ago: executing program 1 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000780), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={'trans=virtio,', {[], [{@uid_eq}]}}) 152.330065ms ago: executing program 1 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e000800"], 0x1c) close(r0) 81.013552ms ago: executing program 3 (id=53): syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0x365, &(0x7f0000000000)={0x0, 0xfffff7fe, 0x80000, 0x3, 0x333}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0) 74.302314ms ago: executing program 3 (id=54): io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"], 0x48}}, 0x410) 24.813935ms ago: executing program 3 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) 24.612905ms ago: executing program 3 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x5, 0x1, 0x7, 0x8, 0x2, 0x80, 0x8, 0xf, 0x31, 0x5, 0xfe, 0xa, 0xfe, 0x8e, 0x5}}) 24.356605ms ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x94, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 24.203145ms ago: executing program 3 (id=58): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x20000804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x100000001, 0x8000000000000000, 0x1, 0x1, 0xfb, 0x3, 0x1], 0x41000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x2, 0x2, 0x9, 0x1, 0xb, 0x0, 0x51, 0x0, 0x40004, 0x3ff, 0xef, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000002}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=59): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 21.513998][ T30] audit: type=1400 audit(1790338318.666:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.515091][ T277] cgroup: Unknown subsys name 'net' [ 21.536719][ T30] audit: type=1400 audit(1790338318.666:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.564085][ T30] audit: type=1400 audit(1790338318.696:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.584317][ T277] cgroup: Unknown subsys name 'devices' [ 21.678553][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.684167][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.790686][ T30] audit: type=1400 audit(1790338318.946:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.813960][ T30] audit: type=1400 audit(1790338318.946:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.819843][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.838752][ T30] audit: type=1400 audit(1790338318.946:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.870461][ T30] audit: type=1400 audit(1790338319.006:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.896007][ T30] audit: type=1400 audit(1790338319.006:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.935275][ T30] audit: type=1400 audit(1790338319.086:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.960961][ T30] audit: type=1400 audit(1790338319.086:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.960982][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.821442][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.828891][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.836332][ T285] device bridge_slave_0 entered promiscuous mode [ 22.843361][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.850472][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.857854][ T285] device bridge_slave_1 entered promiscuous mode [ 22.954601][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.961766][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.969520][ T286] device bridge_slave_0 entered promiscuous mode [ 22.991064][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.998231][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.005665][ T286] device bridge_slave_1 entered promiscuous mode [ 23.056480][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.063567][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.070945][ T289] device bridge_slave_0 entered promiscuous mode [ 23.087537][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.094587][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.101987][ T289] device bridge_slave_1 entered promiscuous mode [ 23.131826][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.138955][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.146451][ T288] device bridge_slave_0 entered promiscuous mode [ 23.153403][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.160571][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.168140][ T288] device bridge_slave_1 entered promiscuous mode [ 23.177232][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.184273][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.191689][ T287] device bridge_slave_0 entered promiscuous mode [ 23.200993][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.208055][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.215465][ T287] device bridge_slave_1 entered promiscuous mode [ 23.226068][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.233124][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.240418][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.247464][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.378423][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.385485][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.392775][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.399817][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.411580][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.418654][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.425922][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.432980][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.443962][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.451036][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.458326][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.465348][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.486341][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.493658][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.501244][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.508525][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.515658][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.522820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.530296][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.537493][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.544677][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.559617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.567267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.574712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.583020][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.590148][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.597697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.605863][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.613092][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.650633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.659386][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.666415][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.673851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.682460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.690666][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.697726][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.705084][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.713259][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.723811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.748977][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.757125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.764613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.773139][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780236][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.787949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.796219][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.803293][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.810714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.818783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.838077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.846396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.854650][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.861693][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.888882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.897454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.905750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.914366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.922875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.931414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.939674][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.946715][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.954065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.962018][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.969921][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.977465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.984909][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.993327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.001640][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.008668][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.015993][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.024465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.032663][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.039688][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.047147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.055139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.063410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.070913][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.078400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.097737][ T285] device veth0_vlan entered promiscuous mode [ 24.104286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.112331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.120477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.128796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.137510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.145739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.154107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.162233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.180163][ T287] device veth0_vlan entered promiscuous mode [ 24.187838][ T286] device veth0_vlan entered promiscuous mode [ 24.196192][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.204677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.213201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.221302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.229378][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.237402][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.245313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.252884][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.260376][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.267822][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.279313][ T289] device veth0_vlan entered promiscuous mode [ 24.285964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.294062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.305819][ T287] device veth1_macvtap entered promiscuous mode [ 24.314805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.322443][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.330101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.338500][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.348329][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.357012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.369985][ T285] device veth1_macvtap entered promiscuous mode [ 24.377045][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.385342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.393630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.401384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.409871][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.418316][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.426472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.439531][ T288] device veth0_vlan entered promiscuous mode [ 24.453119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.461243][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.468762][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.476109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.484520][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.492875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.501204][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.510418][ T286] device veth1_macvtap entered promiscuous mode [ 24.520495][ T289] device veth1_macvtap entered promiscuous mode [ 24.531069][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.539361][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.547233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.558039][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.566324][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.578660][ T288] device veth1_macvtap entered promiscuous mode [ 24.594067][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.595911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.610911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.619417][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.628007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.648626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.657000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.668081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.668971][ T60] hid-generic 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 24.680062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.695386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.709637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.723176][ T311] fido_id[311]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 24.755446][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.773891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.782873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.792592][ T320] binder: 319:320 ioctl 4018620d 0 returned -22 [ 24.792842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.859371][ T327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.864361][ T329] binder: 319:329 ioctl c0306201 0 returned -14 [ 24.915165][ T327] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 24.925153][ T327] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 24.928771][ T333] FAULT_INJECTION: forcing a failure. [ 24.928771][ T333] name failslab, interval 1, probability 0, space 0, times 1 [ 24.955346][ T333] CPU: 1 PID: 333 Comm: syz.4.10 Not tainted syzkaller #0 [ 24.962487][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 24.972565][ T333] Call Trace: [ 24.975862][ T333] [ 24.978816][ T333] __dump_stack+0x21/0x30 [ 24.983176][ T333] dump_stack_lvl+0x110/0x170 [ 24.987880][ T333] ? show_regs_print_info+0x20/0x20 [ 24.993108][ T333] dump_stack+0x15/0x20 [ 24.997289][ T333] should_fail+0x3ab/0x500 [ 25.001732][ T333] __should_failslab+0xa4/0xe0 [ 25.006522][ T333] should_failslab+0x9/0x20 [ 25.011275][ T333] slab_pre_alloc_hook+0x39/0xd0 [ 25.016242][ T333] __kmalloc+0x6d/0x2c0 [ 25.020425][ T333] ? kvm_io_bus_register_dev+0x134/0x530 [ 25.026189][ T333] kvm_io_bus_register_dev+0x134/0x530 [ 25.031769][ T333] kvm_create_pit+0x5c4/0x920 [ 25.036478][ T333] kvm_arch_vm_ioctl+0xe8e/0x1360 [ 25.041536][ T333] ? kvm_arch_pm_notifier+0x2f0/0x2f0 [ 25.046934][ T333] ? ttwu_do_wakeup+0x100/0x470 [ 25.051812][ T333] ? preempt_schedule_thunk+0x16/0x18 [ 25.057211][ T333] ? try_to_wake_up+0x632/0x1150 [ 25.062179][ T333] ? __kasan_check_write+0x14/0x20 [ 25.067322][ T333] ? wake_up_q+0x106/0x1b0 [ 25.071761][ T333] ? futex_wake+0x64b/0x8f0 [ 25.076292][ T333] ? arch_stack_walk+0xee/0x140 [ 25.081173][ T333] ? futex_wait+0x8f0/0x8f0 [ 25.085711][ T333] ? __stack_depot_save+0x34/0x480 [ 25.090850][ T333] ? path_openat+0x284f/0x2f80 [ 25.095635][ T333] ? __asan_set_shadow_00+0xe/0x10 [ 25.100858][ T333] ? do_futex+0xdd3/0x2800 [ 25.105294][ T333] ? kasan_set_track+0x4a/0x70 [ 25.110133][ T333] ? kmem_cache_free+0x100/0x320 [ 25.115130][ T333] ? __asan_set_shadow_00+0xe/0x10 [ 25.120270][ T333] ? do_vfs_ioctl+0x1c15/0x1d80 [ 25.125156][ T333] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 25.130814][ T333] ? futex_exit_release+0x1e0/0x1e0 [ 25.136036][ T333] ? kstrtouint_from_user+0x1c4/0x220 [ 25.141440][ T333] kvm_vm_ioctl+0x78a/0xb00 [ 25.145980][ T333] ? kvm_device_release+0x210/0x210 [ 25.151209][ T333] ? ioctl_has_perm+0x1b8/0x4f0 [ 25.156083][ T333] ? memcpy+0x56/0x70 [ 25.160088][ T333] ? ioctl_has_perm+0x414/0x4f0 [ 25.164961][ T333] ? security_file_permission+0x79/0xa0 [ 25.170540][ T333] ? has_cap_mac_admin+0x370/0x370 [ 25.175676][ T333] ? vfs_write+0xc72/0xfd0 [ 25.180112][ T333] ? selinux_file_ioctl+0x3ad/0x4c0 [ 25.185332][ T333] ? selinux_file_alloc_security+0x120/0x120 [ 25.191334][ T333] ? mutex_unlock+0x8f/0x230 [ 25.195946][ T333] ? __fget_files+0x2e1/0x340 [ 25.200649][ T333] ? security_file_ioctl+0x84/0xa0 [ 25.205787][ T333] ? kvm_device_release+0x210/0x210 [ 25.211018][ T333] __se_sys_ioctl+0x121/0x1a0 [ 25.215717][ T333] __x64_sys_ioctl+0x7b/0x90 [ 25.220332][ T333] x64_sys_call+0x2f/0x9a0 [ 25.224770][ T333] do_syscall_64+0x4c/0xa0 [ 25.229209][ T333] ? clear_bhb_loop+0x50/0xa0 [ 25.233908][ T333] ? clear_bhb_loop+0x50/0xa0 [ 25.238606][ T333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.244519][ T333] RIP: 0033:0x7f4a2ee99159 [ 25.248954][ T333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.268675][ T333] RSP: 002b:00007f4a2d8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.277115][ T333] RAX: ffffffffffffffda RBX: 00007f4a2f120fa0 RCX: 00007f4a2ee99159 [ 25.285124][ T333] RDX: 0000200000000180 RSI: 000000004040ae77 RDI: 0000000000000004 [ 25.293126][ T333] RBP: 00007f4a2ef3006b R08: 0000000000000000 R09: 0000000000000000 [ 25.301124][ T333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.309120][ T333] R13: 00007f4a2f121038 R14: 00007f4a2f120fa0 R15: 00007ffe091cecd8 [ 25.317112][ T333] [ 25.384195][ T8] blk_update_request: I/O error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 23 prio class 0 [ 25.408490][ T8] blk_update_request: I/O error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 54 prio class 0 [ 25.427940][ T8] blk_update_request: I/O error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 54 prio class 0 [ 25.439836][ T8] blk_update_request: I/O error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 54 prio class 0 [ 25.451806][ T8] blk_update_request: I/O error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 47 prio class 0 [ 25.471408][ T8] blk_update_request: I/O error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x0 phys_seg 29 prio class 0 [ 25.477185][ T350] FAULT_INJECTION: forcing a failure. [ 25.477185][ T350] name failslab, interval 1, probability 0, space 0, times 0 [ 25.482904][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35202) [ 25.496232][ T350] CPU: 0 PID: 350 Comm: syz.4.13 Not tainted syzkaller #0 [ 25.514105][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 25.524180][ T350] Call Trace: [ 25.527480][ T350] [ 25.530427][ T350] __dump_stack+0x21/0x30 [ 25.534777][ T350] dump_stack_lvl+0x110/0x170 [ 25.539475][ T350] ? show_regs_print_info+0x20/0x20 [ 25.544694][ T350] ? ipv4_sysctl_init_net+0x3c/0x3a0 [ 25.549185][ T8] blk_update_request: I/O error, dev sda, sector 281622 op 0x1:(WRITE) flags 0x4000 phys_seg 52 prio class 0 [ 25.550099][ T350] ? create_new_namespaces+0x3a8/0x660 [ 25.550127][ T350] ? ksys_unshare+0x4d7/0x810 [ 25.571799][ T350] ? __x64_sys_unshare+0x38/0x40 [ 25.576436][ T8] blk_update_request: I/O error, dev sda, sector 282128 op 0x1:(WRITE) flags 0x4000 phys_seg 57 prio class 0 [ 25.576762][ T350] ? x64_sys_call+0x442/0x9a0 [ 25.576786][ T350] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.576807][ T350] dump_stack+0x15/0x20 [ 25.576824][ T350] should_fail+0x3ab/0x500 [ 25.603893][ T8] blk_update_request: I/O error, dev sda, sector 282640 op 0x1:(WRITE) flags 0x4000 phys_seg 40 prio class 0 [ 25.607649][ T350] __should_failslab+0xa4/0xe0 [ 25.607678][ T350] should_failslab+0x9/0x20 [ 25.607696][ T350] slab_pre_alloc_hook+0x39/0xd0 [ 25.607716][ T350] __kmalloc+0x6d/0x2c0 [ 25.607735][ T350] ? __register_sysctl_table+0xeb/0x1240 [ 25.607752][ T350] __register_sysctl_table+0xeb/0x1240 [ 25.607770][ T350] ? ipv4_sysctl_init_net+0x3c/0x3a0 [ 25.619655][ T8] blk_update_request: I/O error, dev sda, sector 283152 op 0x1:(WRITE) flags 0x4000 phys_seg 38 prio class 0 [ 25.624069][ T350] ? ipv4_sysctl_init_net+0x3c/0x3a0 [ 25.624102][ T350] register_net_sysctl+0x21d/0x230 [ 25.630291][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35576) [ 25.633522][ T350] ipv4_sysctl_init_net+0x1c7/0x3a0 [ 25.633550][ T350] ops_init+0x2c0/0x470 [ 25.639614][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35863) [ 25.643317][ T350] setup_net+0x331/0xa30 [ 25.643345][ T350] ? copy_net_ns+0x5c0/0x5c0 [ 25.643365][ T350] copy_net_ns+0x355/0x5c0 [ 25.653141][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35999) [ 25.654084][ T350] create_new_namespaces+0x3a8/0x660 [ 25.665706][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139303) [ 25.670905][ T350] unshare_nsproxy_namespaces+0x120/0x170 [ 25.670928][ T350] ksys_unshare+0x4d7/0x810 [ 25.670950][ T350] ? sighand_ctor+0x60/0x60 [ 25.676069][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139314) [ 25.687480][ T350] ? __kasan_check_write+0x14/0x20 [ 25.687502][ T350] ? switch_fpu_return+0x15d/0x2c0 [ 25.687523][ T350] __x64_sys_unshare+0x38/0x40 [ 25.692720][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139352) [ 25.696849][ T350] x64_sys_call+0x442/0x9a0 [ 25.696869][ T350] do_syscall_64+0x4c/0xa0 [ 25.716784][ T306] Buffer I/O error on device sda1, logical block 35825 [ 25.717134][ T350] ? clear_bhb_loop+0x50/0xa0 [ 25.721566][ T306] Buffer I/O error on device sda1, logical block 35826 [ 25.732981][ T350] ? clear_bhb_loop+0x50/0xa0 [ 25.755308][ T306] Buffer I/O error on device sda1, logical block 35827 [ 25.755653][ T350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.765387][ T306] Buffer I/O error on device sda1, logical block 35828 [ 25.776184][ T350] RIP: 0033:0x7f4a2ee99159 [ 25.796936][ T306] Buffer I/O error on device sda1, logical block 35829 [ 25.802680][ T350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.812683][ T306] Buffer I/O error on device sda1, logical block 35830 [ 25.818428][ T350] RSP: 002b:00007f4a2d8f2028 EFLAGS: 00000246 [ 25.824565][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139446) [ 25.829934][ T350] ORIG_RAX: 0000000000000110 [ 25.829945][ T350] RAX: ffffffffffffffda RBX: 00007f4a2f120fa0 RCX: 00007f4a2ee99159 [ 25.829958][ T350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 25.829970][ T350] RBP: 00007f4a2ef3006b R08: 0000000000000000 R09: 0000000000000000 [ 25.829981][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.829992][ T350] R13: 00007f4a2f121038 R14: 00007f4a2f120fa0 R15: 00007ffe091cecd8 [ 25.830060][ T350] [ 25.856627][ T306] Buffer I/O error on device sda1, logical block 35831 [ 25.858912][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139481) [ 25.905335][ T306] Buffer I/O error on device sda1, logical block 35832 [ 25.923333][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139497) [ 25.988801][ T306] Buffer I/O error on device sda1, logical block 35833 [ 26.012858][ T306] Buffer I/O error on device sda1, logical block 35834 [ 26.029689][ T355] FAULT_INJECTION: forcing a failure. [ 26.029689][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 26.057897][ T346] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 26.058252][ T64] Aborting journal on device sda1-8. [ 26.066399][ T346] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 26.078009][ T355] CPU: 0 PID: 355 Comm: syz.3.15 Not tainted syzkaller #0 [ 26.080216][ T346] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 26.087252][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.087266][ T355] Call Trace: [ 26.087272][ T355] [ 26.087278][ T355] __dump_stack+0x21/0x30 [ 26.087305][ T355] dump_stack_lvl+0x110/0x170 [ 26.095738][ T346] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 26.106024][ T355] ? show_regs_print_info+0x20/0x20 [ 26.106050][ T355] ? unwind_get_return_address+0x4d/0x90 [ 26.106075][ T355] dump_stack+0x15/0x20 [ 26.109415][ T346] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 26.112283][ T355] should_fail+0x3ab/0x500 [ 26.116679][ T346] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 26.121268][ T355] __should_failslab+0xa4/0xe0 [ 26.129790][ T346] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 26.134899][ T355] should_failslab+0x9/0x20 [ 26.140559][ T346] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 26.144660][ T355] slab_pre_alloc_hook+0x39/0xd0 [ 26.153101][ T346] Buffer I/O error on dev sda1, logical block 243, lost async page write [ 26.157463][ T355] kmem_cache_alloc_trace+0x48/0x270 [ 26.157484][ T355] ? nfc_genl_rcv_nl_event+0x9f/0x220 [ 26.165897][ T346] Buffer I/O error on dev sda1, logical block 261, lost async page write [ 26.170632][ T355] nfc_genl_rcv_nl_event+0x9f/0x220 [ 26.170652][ T355] blocking_notifier_call_chain+0xba/0x140 [ 26.235235][ T355] netlink_release+0xebd/0x16d0 [ 26.240186][ T355] ? netlink_sock_destruct+0x190/0x190 [ 26.245647][ T355] sock_close+0xb8/0x200 [ 26.249909][ T355] ? sock_mmap+0xa0/0xa0 [ 26.254149][ T355] __fput+0x22b/0x900 [ 26.258134][ T355] ____fput+0x15/0x20 [ 26.262112][ T355] task_work_run+0x127/0x190 [ 26.266702][ T355] exit_to_user_mode_loop+0xd0/0xe0 [ 26.271898][ T355] exit_to_user_mode_prepare+0x87/0xd0 [ 26.277354][ T355] syscall_exit_to_user_mode+0x1a/0x30 [ 26.282815][ T355] do_syscall_64+0x58/0xa0 [ 26.287229][ T355] ? clear_bhb_loop+0x50/0xa0 [ 26.291908][ T355] ? clear_bhb_loop+0x50/0xa0 [ 26.296587][ T355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.302490][ T355] RIP: 0033:0x7fba4e39d159 [ 26.306908][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.326511][ T355] RSP: 002b:00007fba4cdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 26.334927][ T355] RAX: 0000000000000000 RBX: 00007fba4e624fa0 RCX: 00007fba4e39d159 [ 26.342901][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 26.350868][ T355] RBP: 00007fba4e43406b R08: 0000000000000000 R09: 0000000000000000 [ 26.358837][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.366804][ T355] R13: 00007fba4e625038 R14: 00007fba4e624fa0 R15: 00007ffef646b8b8 [ 26.374775][ T355] [ 26.377852][ T349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.13: Detected aborted journal [ 26.378254][ T345] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.12: Detected aborted journal [ 26.399642][ T306] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm kworker/u4:3: Detected aborted journal [ 26.409938][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 26.411159][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 26.430777][ T349] EXT4-fs (sda1): I/O error while writing superblock [ 26.437168][ T306] EXT4-fs (sda1): previous I/O error to superblock detected [ 26.437613][ T277] EXT4-fs (sda1): previous I/O error to superblock detected [ 26.446712][ T349] EXT4-fs (sda1): Remounting filesystem read-only [ 26.453379][ T354] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.15: Detected aborted journal [ 26.458852][ T345] EXT4-fs (sda1): I/O error while writing superblock [ 26.469821][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 26.483162][ T354] EXT4-fs (sda1): previous I/O error to superblock detected [ 26.490701][ T306] EXT4-fs (sda1): I/O error while writing superblock [ 26.496529][ T345] EXT4-fs (sda1): Remounting filesystem read-only [ 26.497777][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 26.503965][ T345] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.12: Detected aborted journal [ 26.521633][ T349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.13: Detected aborted journal [ 26.536763][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 26.552897][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 26.553905][ T349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.13: Detected aborted journal [ 26.576667][ T318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.585392][ T361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'. [ 26.611292][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 26.611308][ T30] audit: type=1400 audit(1790338323.766:125): avc: denied { ioctl } for pid=362 comm="syz.3.18" path="socket:[16659]" dev="sockfs" ino=16659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.668613][ T346] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 26.688989][ T30] audit: type=1400 audit(1790338323.776:126): avc: denied { name_bind } for pid=366 comm="syz.3.20" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.808498][ T375] Zero length message leads to an empty skb [ 26.838223][ T377] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 26.850895][ T377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 26.866609][ T318] usb 3-1: Using ep0 maxpacket: 8 [ 26.867618][ T30] audit: type=1400 audit(1790338324.026:127): avc: denied { create } for pid=378 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.898479][ T379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 26.913672][ T30] audit: type=1400 audit(1790338324.066:128): avc: denied { create } for pid=380 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.976701][ T30] audit: type=1400 audit(1790338324.066:129): avc: denied { write } for pid=380 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.001141][ T30] audit: type=1400 audit(1790338324.066:130): avc: denied { ioctl } for pid=382 comm="syz.3.28" path="socket:[16715]" dev="sockfs" ino=16715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.027285][ T318] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 27.038641][ T318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 27.049157][ T318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 27.061617][ T30] audit: type=1400 audit(1790338324.066:131): avc: denied { write } for pid=382 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.082315][ T30] audit: type=1400 audit(1790338324.106:132): avc: denied { mount } for pid=386 comm="syz.3.30" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 27.104739][ T30] audit: type=1400 audit(1790338324.116:133): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 27.124891][ T30] audit: type=1326 audit(1790338324.216:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=392 comm="syz.1.33" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f2005159 code=0x7ffc0000 [ 27.156638][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.373335][ T412] netlink: 268 bytes leftover after parsing attributes in process `syz.0.41'. [ 27.468178][ T418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 27.526690][ T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 27.538285][ T318] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 27.543906][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.551442][ T318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 27.571543][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.573504][ T421] FAULT_INJECTION: forcing a failure. [ 27.573504][ T421] name failslab, interval 1, probability 0, space 0, times 0 [ 27.593804][ T421] CPU: 0 PID: 421 Comm: syz.0.44 Not tainted syzkaller #0 [ 27.597311][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.600940][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.600953][ T421] Call Trace: [ 27.600960][ T421] [ 27.600967][ T421] __dump_stack+0x21/0x30 [ 27.611169][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 27.620741][ T421] dump_stack_lvl+0x110/0x170 [ 27.620776][ T421] ? show_regs_print_info+0x20/0x20 [ 27.620794][ T421] dump_stack+0x15/0x20 [ 27.620812][ T421] should_fail+0x3ab/0x500 [ 27.662749][ T421] __should_failslab+0xa4/0xe0 [ 27.667513][ T421] should_failslab+0x9/0x20 [ 27.672007][ T421] slab_pre_alloc_hook+0x39/0xd0 [ 27.676965][ T421] kmem_cache_alloc_trace+0x48/0x270 [ 27.682246][ T421] ? assoc_array_insert+0x90/0x3210 [ 27.687441][ T421] assoc_array_insert+0x90/0x3210 [ 27.692458][ T421] ? __kasan_check_write+0x14/0x20 [ 27.696724][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 27.697691][ T421] ? rwsem_read_trylock+0x2af/0x640 [ 27.697721][ T421] ? __kasan_check_write+0x14/0x20 [ 27.706886][ T42] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 27.711924][ T421] ? mutex_lock+0x9b/0x1c0 [ 27.711953][ T421] ? wait_for_completion_killable_timeout+0x10/0x10 [ 27.718187][ T42] usb 5-1: Manufacturer: syz [ 27.725196][ T421] ? memcpy+0x56/0x70 [ 27.725223][ T421] __key_link_begin+0xe1/0x210 [ 27.735932][ T42] usb 5-1: config 0 descriptor?? [ 27.736217][ T421] key_create_or_update+0x4d4/0x9c0 [ 27.741336][ T101] udevd[101]: worker [308] terminated by signal 7 (Bus error) [ 27.744775][ T421] ? key_type_put+0x20/0x20 [ 27.744801][ T421] ? lookup_user_key_possessed+0x40/0x40 [ 27.749653][ T101] udevd[101]: worker [308] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 27.754478][ T421] ? __kasan_check_write+0x14/0x20 [ 27.754502][ T421] ? _copy_from_user+0x95/0xd0 [ 27.754520][ T421] __se_sys_add_key+0x34b/0x410 [ 27.801811][ T421] ? __x64_sys_add_key+0xd0/0xd0 [ 27.806771][ T421] ? __kasan_check_write+0x14/0x20 [ 27.811871][ T421] __x64_sys_add_key+0xbf/0xd0 [ 27.816631][ T421] x64_sys_call+0x713/0x9a0 [ 27.821148][ T421] do_syscall_64+0x4c/0xa0 [ 27.825552][ T421] ? clear_bhb_loop+0x50/0xa0 [ 27.830223][ T421] ? clear_bhb_loop+0x50/0xa0 [ 27.834909][ T421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.840804][ T421] RIP: 0033:0x7f60bb61f159 [ 27.845216][ T421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.864814][ T421] RSP: 002b:00007f60ba078028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 27.873367][ T421] RAX: ffffffffffffffda RBX: 00007f60bb8a6fa0 RCX: 00007f60bb61f159 [ 27.881344][ T421] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 27.889328][ T421] RBP: 00007f60bb6b606b R08: fffffffffffffffe R09: 0000000000000000 [ 27.897296][ T421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.905260][ T421] R13: 00007f60bb8a7038 R14: 00007f60bb8a6fa0 R15: 00007ffd8f8ed238 [ 27.913227][ T421] [ 27.922474][ T426] ======================================================= [ 27.922474][ T426] WARNING: The mand mount option has been deprecated and [ 27.922474][ T426] and is ignored by this kernel. Remove the mand [ 27.922474][ T426] option from the mount to silence this warning. [ 27.922474][ T426] ======================================================= [ 28.014733][ T435] 9pnet_virtio: no channels available for device syz [ 28.047375][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 28.180238][ T431] usb 3-1: USB disconnect, device number 2 [ 28.191233][ T459] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 28.203168][ T459] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 28.211572][ T459] CPU: 1 PID: 459 Comm: syz.1.57 Not tainted syzkaller #0 [ 28.218680][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.228735][ T459] RIP: 0010:step_into+0x122/0xce0 [ 28.233805][ T459] Code: 24 10 4c 8d 73 38 c6 44 24 5f 00 43 0f b6 04 2c 84 c0 0f 85 57 0a 00 00 45 8b 36 4c 8b bc 24 88 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 56 0a 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 28.253410][ T459] RSP: 0018:ffffc90001017ac0 EFLAGS: 00010247 [ 28.259474][ T459] RAX: 0000000000000000 RBX: ffffc90001017cc0 RCX: 0000000000080000 [ 28.267464][ T459] RDX: ffffc90001b4d000 RSI: 0000000000000266 RDI: 0000000000000267 [ 28.275449][ T459] RBP: ffffc90001017ba8 R08: 0000000000000000 R09: 1ffff1102523ddb4 [ 28.283434][ T459] R10: dffffc0000000000 R11: ffffed102523ddb5 R12: 1ffff92000202f9f [ 28.291398][ T459] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 [ 28.299363][ T459] FS: 00007f84f0a3d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.308351][ T459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.314942][ T459] CR2: 0000000000000000 CR3: 000000011686d000 CR4: 00000000003506a0 [ 28.322915][ T459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.330901][ T459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.338881][ T459] Call Trace: [ 28.342174][ T459] [ 28.345102][ T459] ? down_read+0xab/0x100 [ 28.349436][ T459] ? set_root+0x400/0x400 [ 28.353779][ T459] ? up_read+0x56/0x1d0 [ 28.357950][ T459] walk_component+0x263/0x460 [ 28.362653][ T459] path_lookupat+0x155/0x430 [ 28.367238][ T459] filename_lookup+0x21e/0x550 [ 28.372004][ T459] ? hashlen_string+0x120/0x120 [ 28.376856][ T459] ? __kasan_slab_free+0x11/0x20 [ 28.381804][ T459] ? slab_free_freelist_hook+0xc2/0x190 [ 28.387350][ T459] do_linkat+0xed/0x750 [ 28.391505][ T459] __x64_sys_link+0x86/0x90 [ 28.396002][ T459] x64_sys_call+0x34d/0x9a0 [ 28.400517][ T459] do_syscall_64+0x4c/0xa0 [ 28.404926][ T459] ? clear_bhb_loop+0x50/0xa0 [ 28.409627][ T459] ? clear_bhb_loop+0x50/0xa0 [ 28.414297][ T459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.420183][ T459] RIP: 0033:0x7f84f2005159 [ 28.424614][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.444756][ T459] RSP: 002b:00007f84f0a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 28.453160][ T459] RAX: ffffffffffffffda RBX: 00007f84f228d090 RCX: 00007f84f2005159 [ 28.461135][ T459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 28.469106][ T459] RBP: 00007f84f209c06b R08: 0000000000000000 R09: 0000000000000000 [ 28.477114][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.485107][ T459] R13: 00007f84f228d128 R14: 00007f84f228d090 R15: 00007ffe4c841e98 [ 28.493080][ T459] [ 28.496112][ T459] Modules linked in: Sep 25 12:12:05 [ 28.502715][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd syzkaller kern.a[ 28.503168][ T459] ---[ end trace ab8f660ba9bbc63a ]--- lert kernel: [ [ 28.517590][ T459] RIP: 0010:step_into+0x122/0xce0 28.203168][ T4[ 28.523537][ T459] Code: 24 10 4c 8d 73 38 c6 44 24 5f 00 43 0f b6 04 2c 84 c0 0f 85 57 0a 00 00 45 8b 36 4c 8b bc 24 88 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 56 0a 00 00 45 8b 3f 44 89 fe 81 e6 00 59] KASAN: null-[ 28.544698][ T459] RSP: 0018:ffffc90001017ac0 EFLAGS: 00010247 ptr-deref in ran[ 28.552074][ T459] RAX: 0000000000000000 RBX: ffffc90001017cc0 RCX: 0000000000080000 ge [0x0000000000[ 28.561509][ T459] RDX: ffffc90001b4d000 RSI: 0000000000000266 RDI: 0000000000000267 000000-0x0000000[ 28.570840][ T459] RBP: ffffc90001017ba8 R08: 0000000000000000 R09: 1ffff1102523ddb4 000000007] [ 28.580249][ T459] R10: dffffc0000000000 R11: ffffed102523ddb5 R12: 1ffff92000202f9f [ 28.589200][ T459] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 [ 28.597388][ T459] FS: 00007f84f0a3d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.606440][ T459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.613117][ T459] CR2: 000020000001f000 CR3: 000000011686d000 CR4: 00000000003506a0 [ 28.621273][ T459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.629360][ T459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.637431][ T459] Kernel panic - not syncing: Fatal exception [ 28.643568][ T459] Kernel Offset: disabled [ 28.647887][ T459] Rebooting in 86400 seconds..