last executing test programs: 26m41.706753204s ago: executing program 32 (id=531): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbb5, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) unshare(0x6a040000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x80) 24m39.346209177s ago: executing program 33 (id=837): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0), 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x180800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 17m4.961309569s ago: executing program 0 (id=1922): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000000, r0, 0x0) ftruncate(r1, 0x7) splice(r1, 0x0, r0, 0x0, 0x100002, 0x9) 17m4.799618207s ago: executing program 0 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x44845) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/176, 0xb0}], 0x1) 17m3.833339775s ago: executing program 0 (id=1928): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x20, 0x40000000, 0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, &(0x7f0000002e40)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000340)='\\(\x00', &(0x7f0000000380)="51d8c78540ab5cd72e5168da30eea9550684d7ced14abe33f291d59dffbfcfa7982ccda28643a66870efd436477feb0fe34fab9a7fa46ff67f377a2cc23306c56e2e0e81328299807e9de2652ec47cfac5105bda9090483e1139a92f75fbc5e4b6c6c6bcdd8f4e65ecb704557b84d8b7ef85621238b92b731cfdda5b19947d4afbde4781c9582f535043263678905f47d946e710fc6c948bb4", 0x99) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17m2.864862022s ago: executing program 0 (id=1931): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) 17m2.517171808s ago: executing program 0 (id=1936): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x44845) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/176, 0xb0}], 0x1) 17m1.531675496s ago: executing program 0 (id=1940): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000234373190000000000000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, r2, 0x25, 0x4, @val=@tracing={0x0, 0x4}}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 16m46.844030828s ago: executing program 34 (id=1938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bfffb601288763608646667011"], 0xffdd) 16m45.799571804s ago: executing program 35 (id=1940): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000234373190000000000000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, r2, 0x25, 0x4, @val=@tracing={0x0, 0x4}}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 9m37.993382517s ago: executing program 7 (id=3280): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9m35.946035141s ago: executing program 7 (id=3286): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 9m34.298612948s ago: executing program 7 (id=3294): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000181401"], 0x10}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c044) 9m33.87184256s ago: executing program 7 (id=3296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 9m33.413225118s ago: executing program 7 (id=3299): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='Gb', 0x61}, {&(0x7f0000000b40)="22003c93b682ef5cb6dc5c145ff000000000", 0x12}], 0x2}, 0x0) 9m32.644351997s ago: executing program 7 (id=3305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 9m16.932788618s ago: executing program 36 (id=3305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 6m47.532098268s ago: executing program 5 (id=3884): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe80000000000000000000000000f3ba0000fff52000000100000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd7000000000000a00000100000000000000000800160005000000480003006465666c61746500"/244], 0x140}}, 0x4810) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000040)={0xff, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/174, 0x8f, 0xae, 0x0, 0x81, 0x10000, @value=r2}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, r2, 0xe}, 0x14) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m46.479391997s ago: executing program 5 (id=3890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) 6m44.779614806s ago: executing program 5 (id=3894): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x5, 0x3, 0x2, 0xffffffffffffffff, 0x6, 0x5, 0x419ab7ed, 0x3, 0x5, 0x2, 0x7f6e, 0x7f, 0x0, 0x5, 0x5]}, &(0x7f00000001c0)=0x100) 6m44.648780715s ago: executing program 5 (id=3895): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x61) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x5, 0x26, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "196c3df741c82283"}}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1, 0x1000) 6m44.450467529s ago: executing program 5 (id=3897): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0xfdb6}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6m44.282061504s ago: executing program 5 (id=3898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000280)=""/64, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6m42.561315523s ago: executing program 8 (id=3899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 6m42.3263381s ago: executing program 8 (id=3901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r5, 0x0, 0x0) 6m40.953517889s ago: executing program 8 (id=3902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) 6m40.660602217s ago: executing program 8 (id=3905): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x60) write(r0, &(0x7f00000002c0)="614b320158", 0x5) 6m40.357468125s ago: executing program 8 (id=3907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x40}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8851}, 0x44080) 6m40.023220056s ago: executing program 8 (id=3908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="1103000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0xba01}, 0x8810) 6m29.211600185s ago: executing program 37 (id=3898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000280)=""/64, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6m24.83618706s ago: executing program 38 (id=3908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="1103000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0xba01}, 0x8810) 3m30.597921586s ago: executing program 9 (id=4881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e21, @rand_addr=0xac140001}}) 3m29.083164906s ago: executing program 9 (id=4883): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) 3m27.677554638s ago: executing program 9 (id=4886): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x1000) 3m27.434859384s ago: executing program 9 (id=4889): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000140010000000000000010000000000020800450000740001400040843c817f0000017f00000104d204d2", 0x30}], 0x1) 3m26.401488817s ago: executing program 9 (id=4894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000080), 0x1003) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xa4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m24.321383626s ago: executing program 9 (id=4897): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8954, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) 3m8.479883419s ago: executing program 39 (id=4897): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8954, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) 37.809578719s ago: executing program 4 (id=5599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000003a08000140000000090900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 37.619226602s ago: executing program 4 (id=5600): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) 37.521448149s ago: executing program 4 (id=5601): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000010201020000000000000000000000060900060073797a30000000000800084000000002bc0001"], 0x128}}, 0x800) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1b36b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff08edffffff00010000807f00090002000000080000004001"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) 37.498620581s ago: executing program 4 (id=5602): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x80000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a40)={0x1, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x1}}}}}]}}]}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001500)='net/rpc\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 35.451138661s ago: executing program 4 (id=5612): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ppoll(&(0x7f0000000100)=[{r0, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(0x0, 0x0) 34.189005828s ago: executing program 4 (id=5618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 19.113599837s ago: executing program 40 (id=5618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 6.515927701s ago: executing program 6 (id=5766): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) pselect6(0x2a, 0x0, &(0x7f0000000180)={0x7, 0x5, 0x40, 0x8000000000000000, 0x8, 0x3, 0xfffffffffffffff5, 0xac2c}, &(0x7f00000003c0)={0x8, 0x9, 0x8001, 0x5, 0x0, 0x2, 0x6, 0x9}, &(0x7f0000000400), 0x0) 5.961713453s ago: executing program 6 (id=5768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 4.377799123s ago: executing program 6 (id=5772): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030d0000000000000000000000030006000000000002000000000000000000000000000000030005003c00000002000000ac14140000000000000000000200090008000000e9000000000002000200010000000000000000000000000001001800ba3489b37c"], 0x68}, 0x1, 0x7}, 0x0) 4.220062626s ago: executing program 6 (id=5774): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c74f", 0x2}], 0x1, 0x0, 0x0, 0x854}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r1) 3.916640274s ago: executing program 6 (id=5777): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008000) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r0, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x4a000200) 3.08228202s ago: executing program 1 (id=5781): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x10408, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x1, 0xfffffffffffffffc, 0x802, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x4000000002, 0x15e, 0x6, 0x40004, 0xfffffffffffffffe, 0x6a6}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 3.007004115s ago: executing program 2 (id=5782): r0 = socket$kcm(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004480)=[{{&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000007000000860800000003"], 0x18}}], 0x1, 0x0) 2.881461795s ago: executing program 2 (id=5783): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 2.881120502s ago: executing program 3 (id=5784): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) close(r1) ppoll(&(0x7f00000000c0)=[{r1, 0x84}, {r0, 0x2001}], 0x2, 0x0, 0x0, 0x0) 2.807340621s ago: executing program 1 (id=5785): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 2.725899884s ago: executing program 2 (id=5786): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.869143351s ago: executing program 1 (id=5787): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x107042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000009b80)) setuid(0x0) pipe(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"638eeb1aee073c0141db3b41ba1ee029", 0x0, 0x0, {0x9, 0x8}, {0xfffffffffffffc01, 0x3}, 0x5, [0x8f6f, 0x6, 0x3, 0xa5, 0x2, 0x2, 0x1, 0xffffffff, 0x8000, 0x0, 0x401, 0x6, 0x6fdb, 0x6, 0x2, 0x4]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000003c0)={{}, r2, 0x4, @unused=[0x3f3cec7a, 0x101, 0xff, 0xee14], @name="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"}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 1.702564428s ago: executing program 3 (id=5788): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) 1.702322721s ago: executing program 2 (id=5789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aec1300000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000c0130380bc1300800c000180060001"], 0x1414}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e621ae3b5}, 0x14) 1.53148236s ago: executing program 3 (id=5790): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0x10001, 0x4) 1.319164644s ago: executing program 3 (id=5791): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) ioctl(r0, 0xffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x7f) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x20, 0x2, 0x20, 0x8}, 0x48) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1.137574384s ago: executing program 3 (id=5792): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) 1.06809988s ago: executing program 2 (id=5793): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 593.416502ms ago: executing program 1 (id=5794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 593.111118ms ago: executing program 6 (id=5795): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 509.447179ms ago: executing program 2 (id=5796): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 159.991713ms ago: executing program 3 (id=5797): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 112.383828ms ago: executing program 1 (id=5798): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000640)=[{0x0, 0x1, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x6}, 0x1, 0xfe}, {0x2, 0x0, {0x2, 0xf0}, {0x1, 0xff, 0x2}, 0xfd}, {0x3, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff}, 0xff}, {0x1, 0x3, {0x1, 0xff, 0x2}, {0x0, 0xfe, 0x1}, 0x1, 0x3}], 0x80) 0s ago: executing program 1 (id=5799): unshare(0x6a040000) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2, 0xc}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7f, 0x1, 0x3, 0xa, 0x800, 0xdc0d}, {0x3, 0x0, 0xfeb, 0x10, 0x2}, 0x5, 0xf712, 0x3, 0x6, 0x7}}]}}]}, 0x60}}, 0x448c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x26014, 0x2021}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004002) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 1693.488853][T25429] dump_stack_lvl+0xe8/0x150 [ 1693.488896][T25429] should_fail_ex+0x46b/0x600 [ 1693.488935][T25429] should_failslab+0xa8/0x100 [ 1693.488975][T25429] __kmalloc_noprof+0xfb/0x790 [ 1693.489020][T25429] ? vb2_core_reqbufs+0x9a3/0x1470 [ 1693.489046][T25429] ? vb2_core_reqbufs+0x9a3/0x1470 [ 1693.489073][T25429] ? vb2_core_reqbufs+0x8c4/0x1470 [ 1693.489104][T25429] vb2_core_reqbufs+0x9a3/0x1470 [ 1693.489148][T25429] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1693.489181][T25429] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1693.489215][T25429] ? __vb2_init_fileio+0x1e2/0x1040 [ 1693.489252][T25429] __vb2_init_fileio+0x310/0x1040 [ 1693.489285][T25429] ? rt_spin_unlock+0x159/0x200 [ 1693.489323][T25429] vb2_core_poll+0x44b/0x7b0 [ 1693.489352][T25429] ? vb2_fop_poll+0xce/0x310 [ 1693.489385][T25429] vb2_fop_poll+0x19c/0x310 [ 1693.489419][T25429] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1693.489449][T25429] v4l2_poll+0x14a/0x2c0 [ 1693.489476][T25429] ? __pfx_v4l2_poll+0x10/0x10 [ 1693.489504][T25429] do_sys_poll+0x92e/0xf50 [ 1693.489526][T25429] ? finish_task_switch+0x40e/0xc60 [ 1693.489560][T25429] ? do_sys_poll+0x451/0xf50 [ 1693.489589][T25429] ? __pfx_do_sys_poll+0x10/0x10 [ 1693.489619][T25429] ? update_se+0x90/0xf30 [ 1693.489648][T25429] ? __pfx___pollwait+0x10/0x10 [ 1693.489688][T25429] ? __pfx_pollwake+0x10/0x10 [ 1693.489766][T25429] ? futex_private_hash_put+0x132/0x160 [ 1693.489803][T25429] ? futex_wake+0x51e/0x600 [ 1693.489828][T25429] ? link_create+0x1be/0x850 [ 1693.489907][T25429] ? set_user_sigmask+0xcd/0x1c0 [ 1693.489941][T25429] ? __pfx_set_user_sigmask+0x10/0x10 [ 1693.489987][T25429] __se_sys_ppoll+0x209/0x2b0 [ 1693.490036][T25429] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1693.490083][T25429] ? __x64_sys_ppoll+0x20/0xc0 [ 1693.490121][T25429] do_syscall_64+0x166/0x520 [ 1693.490153][T25429] ? trace_irq_disable+0x3b/0x140 [ 1693.490182][T25429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.490207][T25429] ? clear_bhb_loop+0x70/0xc0 [ 1693.490236][T25429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.490260][T25429] RIP: 0033:0x7fd36941e159 [ 1693.490282][T25429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.490303][T25429] RSP: 002b:00007fd367676028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1693.490329][T25429] RAX: ffffffffffffffda RBX: 00007fd3696a5fa0 RCX: 00007fd36941e159 [ 1693.490347][T25429] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1693.490363][T25429] RBP: 00007fd3694b503b R08: 0000000000000000 R09: 0000000000000000 [ 1693.490379][T25429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1693.490393][T25429] R13: 00007fd3696a6038 R14: 00007fd3696a5fa0 R15: 00007ffe3d0b7448 [ 1693.490432][T25429] [ 1696.223497][ T5599] Bluetooth: hci0: command tx timeout [ 1698.010925][T25459] FAULT_INJECTION: forcing a failure. [ 1698.010925][T25459] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1698.010968][T25459] CPU: 1 UID: 0 PID: 25459 Comm: syz.3.5016 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1698.011002][T25459] Tainted: [L]=SOFTLOCKUP [ 1698.011012][T25459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.011026][T25459] Call Trace: [ 1698.011036][T25459] [ 1698.011047][T25459] dump_stack_lvl+0xe8/0x150 [ 1698.011087][T25459] should_fail_ex+0x46b/0x600 [ 1698.011131][T25459] get_futex_key+0x1b4/0x1580 [ 1698.011164][T25459] ? arch_stack_walk+0xfb/0x150 [ 1698.011205][T25459] ? __pfx_get_futex_key+0x10/0x10 [ 1698.011255][T25459] ? stack_trace_save+0xa9/0x100 [ 1698.011285][T25459] ? __pfx_stack_trace_save+0x10/0x10 [ 1698.011326][T25459] futex_wake+0x119/0x600 [ 1698.011353][T25459] ? kasan_save_track+0x4f/0x80 [ 1698.011384][T25459] ? kasan_save_track+0x3e/0x80 [ 1698.011416][T25459] ? kmem_cache_free+0x187/0x6d0 [ 1698.011448][T25459] ? __se_sys_rename+0x185/0x2c0 [ 1698.011473][T25459] ? __pfx_futex_wake+0x10/0x10 [ 1698.011519][T25459] do_futex+0x458/0x4e0 [ 1698.011549][T25459] ? __pfx_do_futex+0x10/0x10 [ 1698.011582][T25459] __se_sys_futex+0x3a8/0x450 [ 1698.011613][T25459] ? __pfx___se_sys_futex+0x10/0x10 [ 1698.011638][T25459] ? __se_sys_rename+0x185/0x2c0 [ 1698.011659][T25459] ? kmem_cache_free+0x187/0x6d0 [ 1698.011699][T25459] ? __x64_sys_futex+0x21/0xf0 [ 1698.011727][T25459] do_syscall_64+0x166/0x520 [ 1698.011771][T25459] ? trace_irq_disable+0x3b/0x140 [ 1698.011801][T25459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.011825][T25459] ? clear_bhb_loop+0x70/0xc0 [ 1698.011854][T25459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.011878][T25459] RIP: 0033:0x7f880e28e159 [ 1698.011899][T25459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.011919][T25459] RSP: 002b:00007f880c4e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1698.011944][T25459] RAX: ffffffffffffffda RBX: 00007f880e515fa8 RCX: 00007f880e28e159 [ 1698.011962][T25459] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f880e515fac [ 1698.011978][T25459] RBP: 00007f880e515fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1698.011996][T25459] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1698.012012][T25459] R13: 00007f880e516038 R14: 00007ffc021aca40 R15: 00007ffc021acb28 [ 1698.012049][T25459] [ 1698.283958][ T5599] Bluetooth: hci0: command tx timeout [ 1699.682451][T25483] FAULT_INJECTION: forcing a failure. [ 1699.682451][T25483] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.682495][T25483] CPU: 1 UID: 0 PID: 25483 Comm: syz.3.5019 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1699.682529][T25483] Tainted: [L]=SOFTLOCKUP [ 1699.682539][T25483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1699.682554][T25483] Call Trace: [ 1699.682564][T25483] [ 1699.682576][T25483] dump_stack_lvl+0xe8/0x150 [ 1699.682617][T25483] should_fail_ex+0x46b/0x600 [ 1699.682654][T25483] should_failslab+0xa8/0x100 [ 1699.682692][T25483] __kmalloc_cache_noprof+0xa1/0x680 [ 1699.682726][T25483] ? __vb2_init_fileio+0x1e2/0x1040 [ 1699.682755][T25483] ? __vb2_init_fileio+0x1e2/0x1040 [ 1699.682799][T25483] __vb2_init_fileio+0x1e2/0x1040 [ 1699.682832][T25483] ? rt_spin_unlock+0x159/0x200 [ 1699.682866][T25483] ? rt_spin_unlock+0x165/0x200 [ 1699.682896][T25483] vb2_core_poll+0x44b/0x7b0 [ 1699.682925][T25483] ? vb2_fop_poll+0xce/0x310 [ 1699.682970][T25483] vb2_fop_poll+0x19c/0x310 [ 1699.683005][T25483] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1699.683035][T25483] v4l2_poll+0x14a/0x2c0 [ 1699.683062][T25483] ? __pfx_v4l2_poll+0x10/0x10 [ 1699.683089][T25483] do_sys_poll+0x92e/0xf50 [ 1699.683133][T25483] ? do_sys_poll+0x451/0xf50 [ 1699.683161][T25483] ? __pfx_do_sys_poll+0x10/0x10 [ 1699.683190][T25483] ? lock_acquire+0x115/0x350 [ 1699.683217][T25483] ? __pfx___pollwait+0x10/0x10 [ 1699.683254][T25483] ? __pfx_pollwake+0x10/0x10 [ 1699.683336][T25483] ? futex_wait+0x2a2/0x390 [ 1699.683366][T25483] ? __pfx_futex_wait+0x10/0x10 [ 1699.683424][T25483] ? set_user_sigmask+0xcd/0x1c0 [ 1699.683455][T25483] ? __pfx_set_user_sigmask+0x10/0x10 [ 1699.683497][T25483] __se_sys_ppoll+0x209/0x2b0 [ 1699.683536][T25483] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1699.683580][T25483] ? __x64_sys_ppoll+0x20/0xc0 [ 1699.683616][T25483] do_syscall_64+0x166/0x520 [ 1699.683646][T25483] ? trace_irq_disable+0x3b/0x140 [ 1699.683680][T25483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.683704][T25483] ? clear_bhb_loop+0x70/0xc0 [ 1699.683732][T25483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.683755][T25483] RIP: 0033:0x7f880e28e159 [ 1699.683776][T25483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.683795][T25483] RSP: 002b:00007f880c4e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1699.683819][T25483] RAX: ffffffffffffffda RBX: 00007f880e515fa0 RCX: 00007f880e28e159 [ 1699.683843][T25483] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1699.683858][T25483] RBP: 00007f880e32503b R08: 0000000000000000 R09: 0000000000000000 [ 1699.683873][T25483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.683887][T25483] R13: 00007f880e516038 R14: 00007f880e515fa0 R15: 00007ffc021acb28 [ 1699.683921][T25483] [ 1701.451319][T25516] FAULT_INJECTION: forcing a failure. [ 1701.451319][T25516] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.451364][T25516] CPU: 1 UID: 0 PID: 25516 Comm: syz.3.5025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1701.451397][T25516] Tainted: [L]=SOFTLOCKUP [ 1701.451407][T25516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1701.451422][T25516] Call Trace: [ 1701.451433][T25516] [ 1701.451444][T25516] dump_stack_lvl+0xe8/0x150 [ 1701.451485][T25516] should_fail_ex+0x46b/0x600 [ 1701.451522][T25516] should_failslab+0xa8/0x100 [ 1701.451559][T25516] ? vm_area_dup+0x28/0x750 [ 1701.451592][T25516] kmem_cache_alloc_noprof+0x9e/0x690 [ 1701.451625][T25516] ? vm_area_dup+0x28/0x750 [ 1701.451666][T25516] vm_area_dup+0x28/0x750 [ 1701.451698][T25516] ? __split_vma+0x1b7/0xa00 [ 1701.451734][T25516] __split_vma+0x1d7/0xa00 [ 1701.451769][T25516] ? finish_task_switch+0x40e/0xc60 [ 1701.451798][T25516] ? lockdep_hardirqs_on+0x7b/0x110 [ 1701.451835][T25516] ? __pfx___split_vma+0x10/0x10 [ 1701.451869][T25516] ? __lock_acquire+0x747/0x2de0 [ 1701.451911][T25516] vma_modify+0x8b7/0x2060 [ 1701.451964][T25516] vma_modify_flags+0x2a4/0x3c0 [ 1701.452004][T25516] ? __pfx_vma_modify_flags+0x10/0x10 [ 1701.452055][T25516] ? __futex_wait+0x35a/0x410 [ 1701.452099][T25516] mlock_fixup+0x40f/0x940 [ 1701.452135][T25516] ? __pfx_mlock_fixup+0x10/0x10 [ 1701.452163][T25516] ? mas_find+0x6d9/0xcb0 [ 1701.452201][T25516] apply_vma_lock_flags+0x350/0x4a0 [ 1701.452234][T25516] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1701.452281][T25516] ? do_mlock+0x169/0x730 [ 1701.452309][T25516] do_mlock+0x54d/0x730 [ 1701.452332][T25516] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1701.452366][T25516] ? __pfx_do_mlock+0x10/0x10 [ 1701.452399][T25516] ? rcu_is_watching+0x16/0xb0 [ 1701.452442][T25516] __x64_sys_mlock+0x77/0xa0 [ 1701.452481][T25516] do_syscall_64+0x166/0x520 [ 1701.452512][T25516] ? trace_irq_disable+0x3b/0x140 [ 1701.452541][T25516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.452566][T25516] ? clear_bhb_loop+0x70/0xc0 [ 1701.452595][T25516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.452619][T25516] RIP: 0033:0x7f880e28e159 [ 1701.452641][T25516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.452663][T25516] RSP: 002b:00007f880c4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1701.452690][T25516] RAX: ffffffffffffffda RBX: 00007f880e515fa0 RCX: 00007f880e28e159 [ 1701.452708][T25516] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1701.452724][T25516] RBP: 00007f880e32503b R08: 0000000000000000 R09: 0000000000000000 [ 1701.452740][T25516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.452755][T25516] R13: 00007f880e516038 R14: 00007f880e515fa0 R15: 00007ffc021acb28 [ 1701.452801][T25516] [ 1703.334205][T25535] FAULT_INJECTION: forcing a failure. [ 1703.334205][T25535] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.334249][T25535] CPU: 1 UID: 0 PID: 25535 Comm: syz.4.5030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1703.334282][T25535] Tainted: [L]=SOFTLOCKUP [ 1703.334292][T25535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1703.334308][T25535] Call Trace: [ 1703.334317][T25535] [ 1703.334328][T25535] dump_stack_lvl+0xe8/0x150 [ 1703.334370][T25535] should_fail_ex+0x46b/0x600 [ 1703.334406][T25535] should_failslab+0xa8/0x100 [ 1703.334446][T25535] __kmalloc_cache_noprof+0xa1/0x680 [ 1703.334479][T25535] ? __vb2_init_fileio+0x1e2/0x1040 [ 1703.334508][T25535] ? __vb2_init_fileio+0x1e2/0x1040 [ 1703.334545][T25535] __vb2_init_fileio+0x1e2/0x1040 [ 1703.334579][T25535] ? rt_spin_unlock+0x159/0x200 [ 1703.334610][T25535] ? rt_spin_unlock+0x165/0x200 [ 1703.334640][T25535] vb2_core_poll+0x44b/0x7b0 [ 1703.334675][T25535] ? vb2_fop_poll+0xce/0x310 [ 1703.334708][T25535] vb2_fop_poll+0x19c/0x310 [ 1703.334761][T25535] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1703.334792][T25535] v4l2_poll+0x14a/0x2c0 [ 1703.334821][T25535] ? __pfx_v4l2_poll+0x10/0x10 [ 1703.334850][T25535] do_sys_poll+0x92e/0xf50 [ 1703.334883][T25535] ? do_sys_poll+0x451/0xf50 [ 1703.334912][T25535] ? __pfx_do_sys_poll+0x10/0x10 [ 1703.334945][T25535] ? lock_acquire+0x115/0x350 [ 1703.334973][T25535] ? __pfx___pollwait+0x10/0x10 [ 1703.335016][T25535] ? __pfx_pollwake+0x10/0x10 [ 1703.335099][T25535] ? futex_wait+0x2a2/0x390 [ 1703.335132][T25535] ? __pfx_futex_wait+0x10/0x10 [ 1703.335191][T25535] ? set_user_sigmask+0xcd/0x1c0 [ 1703.335225][T25535] ? __pfx_set_user_sigmask+0x10/0x10 [ 1703.335272][T25535] __se_sys_ppoll+0x209/0x2b0 [ 1703.335317][T25535] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1703.335365][T25535] ? __x64_sys_ppoll+0x20/0xc0 [ 1703.335406][T25535] do_syscall_64+0x166/0x520 [ 1703.335438][T25535] ? trace_irq_disable+0x3b/0x140 [ 1703.335469][T25535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.335493][T25535] ? clear_bhb_loop+0x70/0xc0 [ 1703.335523][T25535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.335560][T25535] RIP: 0033:0x7f716f0ae159 [ 1703.335582][T25535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.335604][T25535] RSP: 002b:00007f716d306028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1703.335630][T25535] RAX: ffffffffffffffda RBX: 00007f716f335fa0 RCX: 00007f716f0ae159 [ 1703.335651][T25535] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1703.335673][T25535] RBP: 00007f716f14503b R08: 0000000000000000 R09: 0000000000000000 [ 1703.335690][T25535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.335705][T25535] R13: 00007f716f336038 R14: 00007f716f335fa0 R15: 00007ffe1a0d0228 [ 1703.335742][T25535] [ 1703.431235][T15698] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1703.582140][T15698] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1703.584012][T15698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.591340][T15698] usb 4-1: config 0 descriptor?? [ 1703.681523][T15698] cp210x 4-1:0.0: cp210x converter detected [ 1704.033506][T15698] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1704.057852][T15698] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1704.251878][T15698] usb 4-1: USB disconnect, device number 84 [ 1704.292524][T15698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1704.481380][T25553] FAULT_INJECTION: forcing a failure. [ 1704.481380][T25553] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1704.481425][T25553] CPU: 0 UID: 0 PID: 25553 Comm: syz.6.5026 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1704.481460][T25553] Tainted: [L]=SOFTLOCKUP [ 1704.481470][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1704.481485][T25553] Call Trace: [ 1704.481495][T25553] [ 1704.481506][T25553] dump_stack_lvl+0xe8/0x150 [ 1704.481548][T25553] should_fail_ex+0x46b/0x600 [ 1704.481586][T25553] get_futex_key+0x1b4/0x1580 [ 1704.481620][T25553] ? arch_stack_walk+0xfb/0x150 [ 1704.481662][T25553] ? __pfx_get_futex_key+0x10/0x10 [ 1704.481703][T25553] ? stack_trace_save+0xa9/0x100 [ 1704.481734][T25553] ? __pfx_stack_trace_save+0x10/0x10 [ 1704.481775][T25553] futex_wake+0x119/0x600 [ 1704.481803][T25553] ? kasan_save_track+0x4f/0x80 [ 1704.481835][T25553] ? kasan_save_track+0x3e/0x80 [ 1704.481868][T25553] ? kmem_cache_free+0x187/0x6d0 [ 1704.481901][T25553] ? __se_sys_rename+0x185/0x2c0 [ 1704.481925][T25553] ? __pfx_futex_wake+0x10/0x10 [ 1704.481971][T25553] do_futex+0x458/0x4e0 [ 1704.482000][T25553] ? __pfx_do_futex+0x10/0x10 [ 1704.482033][T25553] __se_sys_futex+0x3a8/0x450 [ 1704.482065][T25553] ? __pfx___se_sys_futex+0x10/0x10 [ 1704.482088][T25553] ? __se_sys_rename+0x185/0x2c0 [ 1704.482110][T25553] ? kmem_cache_free+0x187/0x6d0 [ 1704.482150][T25553] ? __x64_sys_futex+0x21/0xf0 [ 1704.482177][T25553] do_syscall_64+0x166/0x520 [ 1704.482211][T25553] ? trace_irq_disable+0x3b/0x140 [ 1704.482241][T25553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.482266][T25553] ? clear_bhb_loop+0x70/0xc0 [ 1704.482294][T25553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.482318][T25553] RIP: 0033:0x7f94de94e159 [ 1704.482339][T25553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.482361][T25553] RSP: 002b:00007f94dcba60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1704.482389][T25553] RAX: ffffffffffffffda RBX: 00007f94debd5fa8 RCX: 00007f94de94e159 [ 1704.482409][T25553] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f94debd5fac [ 1704.482427][T25553] RBP: 00007f94debd5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1704.482446][T25553] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1704.482463][T25553] R13: 00007f94debd6038 R14: 00007ffc5272ac60 R15: 00007ffc5272ad48 [ 1704.482499][T25553] [ 1704.726765][T15698] cp210x 4-1:0.0: device disconnected [ 1705.298609][T25569] FAULT_INJECTION: forcing a failure. [ 1705.298609][T25569] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.298652][T25569] CPU: 0 UID: 0 PID: 25569 Comm: syz.3.5037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1705.298685][T25569] Tainted: [L]=SOFTLOCKUP [ 1705.298695][T25569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1705.298711][T25569] Call Trace: [ 1705.298721][T25569] [ 1705.298733][T25569] dump_stack_lvl+0xe8/0x150 [ 1705.298774][T25569] should_fail_ex+0x46b/0x600 [ 1705.298810][T25569] should_failslab+0xa8/0x100 [ 1705.298852][T25569] ? vm_area_dup+0x28/0x750 [ 1705.298886][T25569] kmem_cache_alloc_noprof+0x9e/0x690 [ 1705.298919][T25569] ? vm_area_dup+0x28/0x750 [ 1705.298961][T25569] vm_area_dup+0x28/0x750 [ 1705.298993][T25569] ? __split_vma+0x1b7/0xa00 [ 1705.299022][T25569] __split_vma+0x1d7/0xa00 [ 1705.299050][T25569] ? finish_task_switch+0x40e/0xc60 [ 1705.299079][T25569] ? lockdep_hardirqs_on+0x7b/0x110 [ 1705.299116][T25569] ? __pfx___split_vma+0x10/0x10 [ 1705.299150][T25569] ? __lock_acquire+0x747/0x2de0 [ 1705.299192][T25569] vma_modify+0x8b7/0x2060 [ 1705.299245][T25569] vma_modify_flags+0x2a4/0x3c0 [ 1705.299285][T25569] ? __pfx_vma_modify_flags+0x10/0x10 [ 1705.299337][T25569] ? __futex_wait+0x35a/0x410 [ 1705.299381][T25569] mlock_fixup+0x40f/0x940 [ 1705.299418][T25569] ? __pfx_mlock_fixup+0x10/0x10 [ 1705.299446][T25569] ? mas_find+0x6d9/0xcb0 [ 1705.299486][T25569] apply_vma_lock_flags+0x350/0x4a0 [ 1705.299518][T25569] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1705.299578][T25569] ? do_mlock+0x169/0x730 [ 1705.299608][T25569] do_mlock+0x54d/0x730 [ 1705.299632][T25569] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1705.299668][T25569] ? __pfx_do_mlock+0x10/0x10 [ 1705.299702][T25569] ? rcu_is_watching+0x16/0xb0 [ 1705.299747][T25569] __x64_sys_mlock+0x77/0xa0 [ 1705.299788][T25569] do_syscall_64+0x166/0x520 [ 1705.299820][T25569] ? trace_irq_disable+0x3b/0x140 [ 1705.299851][T25569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.299876][T25569] ? clear_bhb_loop+0x70/0xc0 [ 1705.299906][T25569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.299930][T25569] RIP: 0033:0x7f880e28e159 [ 1705.299953][T25569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1705.299974][T25569] RSP: 002b:00007f880c4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1705.300001][T25569] RAX: ffffffffffffffda RBX: 00007f880e515fa0 RCX: 00007f880e28e159 [ 1705.300019][T25569] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1705.300036][T25569] RBP: 00007f880e32503b R08: 0000000000000000 R09: 0000000000000000 [ 1705.300052][T25569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1705.300068][T25569] R13: 00007f880e516038 R14: 00007f880e515fa0 R15: 00007ffc021acb28 [ 1705.300107][T25569] [ 1705.347898][T25572] netlink: 'syz.1.5036': attribute type 1 has an invalid length. [ 1705.347923][T25572] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1705.835402][T15676] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1707.053779][T15676] usb 7-1: not running at top speed; connect to a high speed hub [ 1707.053821][T15676] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1707.055579][T15676] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.055605][T15676] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1707.056064][T15676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.191251][T15676] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 1707.767615][T15676] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 1707.768149][T15676] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1707.768234][T15676] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 1708.714976][T15676] usb 7-1: USB disconnect, device number 13 [ 1710.787729][T25623] netlink: 'syz.1.5048': attribute type 1 has an invalid length. [ 1710.787752][T25623] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.5048'. [ 1711.095541][T25636] FAULT_INJECTION: forcing a failure. [ 1711.095541][T25636] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.095585][T25636] CPU: 0 UID: 0 PID: 25636 Comm: syz.1.5051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1711.095620][T25636] Tainted: [L]=SOFTLOCKUP [ 1711.095640][T25636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1711.095656][T25636] Call Trace: [ 1711.095666][T25636] [ 1711.095677][T25636] dump_stack_lvl+0xe8/0x150 [ 1711.095720][T25636] should_fail_ex+0x46b/0x600 [ 1711.095759][T25636] should_failslab+0xa8/0x100 [ 1711.095797][T25636] ? vm_area_dup+0x28/0x750 [ 1711.095831][T25636] kmem_cache_alloc_noprof+0x9e/0x690 [ 1711.095865][T25636] ? vm_area_dup+0x28/0x750 [ 1711.095906][T25636] vm_area_dup+0x28/0x750 [ 1711.095939][T25636] ? __split_vma+0x1b7/0xa00 [ 1711.095968][T25636] __split_vma+0x1d7/0xa00 [ 1711.095996][T25636] ? finish_task_switch+0x40e/0xc60 [ 1711.096026][T25636] ? lockdep_hardirqs_on+0x7b/0x110 [ 1711.096062][T25636] ? __pfx___split_vma+0x10/0x10 [ 1711.096098][T25636] ? __lock_acquire+0x747/0x2de0 [ 1711.096140][T25636] vma_modify+0x8b7/0x2060 [ 1711.096195][T25636] vma_modify_flags+0x2a4/0x3c0 [ 1711.096236][T25636] ? __pfx_vma_modify_flags+0x10/0x10 [ 1711.096289][T25636] ? __futex_wait+0x35a/0x410 [ 1711.096333][T25636] mlock_fixup+0x40f/0x940 [ 1711.096368][T25636] ? __pfx_mlock_fixup+0x10/0x10 [ 1711.096397][T25636] ? mas_find+0x6d9/0xcb0 [ 1711.096435][T25636] apply_vma_lock_flags+0x350/0x4a0 [ 1711.096469][T25636] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1711.096518][T25636] ? do_mlock+0x169/0x730 [ 1711.096546][T25636] do_mlock+0x54d/0x730 [ 1711.096570][T25636] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1711.096605][T25636] ? __pfx_do_mlock+0x10/0x10 [ 1711.096648][T25636] ? rcu_is_watching+0x16/0xb0 [ 1711.096695][T25636] __x64_sys_mlock+0x77/0xa0 [ 1711.096736][T25636] do_syscall_64+0x166/0x520 [ 1711.096769][T25636] ? trace_irq_disable+0x3b/0x140 [ 1711.096800][T25636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.096829][T25636] ? clear_bhb_loop+0x70/0xc0 [ 1711.096859][T25636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.096884][T25636] RIP: 0033:0x7fd36941e159 [ 1711.096907][T25636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.096929][T25636] RSP: 002b:00007fd367676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1711.096957][T25636] RAX: ffffffffffffffda RBX: 00007fd3696a5fa0 RCX: 00007fd36941e159 [ 1711.096976][T25636] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1711.096993][T25636] RBP: 00007fd3694b503b R08: 0000000000000000 R09: 0000000000000000 [ 1711.097010][T25636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.097026][T25636] R13: 00007fd3696a6038 R14: 00007fd3696a5fa0 R15: 00007ffe3d0b7448 [ 1711.097065][T25636] [ 1711.127672][T15676] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1711.162035][T25632] syzkaller0: left promiscuous mode [ 1711.162062][T25632] syzkaller0: left allmulticast mode [ 1711.361647][T15676] usb 7-1: Using ep0 maxpacket: 16 [ 1711.367365][T15676] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1711.371538][T15676] usb 7-1: config 0 has no interfaces? [ 1711.630413][T15676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.630498][T15676] usb 7-1: Product: syz [ 1711.630542][T15676] usb 7-1: Manufacturer: syz [ 1711.630622][T15676] usb 7-1: SerialNumber: syz [ 1711.930663][T15676] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1711.930694][T15676] r8152-cfgselector 7-1: config 0 descriptor?? [ 1712.754526][T15698] r8152-cfgselector 7-1: USB disconnect, device number 14 [ 1713.828337][T25687] netlink: 'syz.1.5060': attribute type 1 has an invalid length. [ 1713.828472][T25687] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1714.032000][T25358] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1714.069684][T25358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1714.071288][T25358] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1714.204944][T25696] FAULT_INJECTION: forcing a failure. [ 1714.204944][T25696] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.204987][T25696] CPU: 1 UID: 0 PID: 25696 Comm: syz.3.5063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1714.205020][T25696] Tainted: [L]=SOFTLOCKUP [ 1714.205029][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1714.205044][T25696] Call Trace: [ 1714.205054][T25696] [ 1714.205065][T25696] dump_stack_lvl+0xe8/0x150 [ 1714.205107][T25696] should_fail_ex+0x46b/0x600 [ 1714.205143][T25696] should_failslab+0xa8/0x100 [ 1714.205181][T25696] ? vm_area_dup+0x28/0x750 [ 1714.205219][T25696] kmem_cache_alloc_noprof+0x9e/0x690 [ 1714.205252][T25696] ? vm_area_dup+0x28/0x750 [ 1714.205292][T25696] vm_area_dup+0x28/0x750 [ 1714.205322][T25696] ? __split_vma+0x1b7/0xa00 [ 1714.205351][T25696] __split_vma+0x1d7/0xa00 [ 1714.205378][T25696] ? finish_task_switch+0x40e/0xc60 [ 1714.205405][T25696] ? lockdep_hardirqs_on+0x7b/0x110 [ 1714.205441][T25696] ? __pfx___split_vma+0x10/0x10 [ 1714.205475][T25696] ? __lock_acquire+0x747/0x2de0 [ 1714.205516][T25696] vma_modify+0x8b7/0x2060 [ 1714.205569][T25696] vma_modify_flags+0x2a4/0x3c0 [ 1714.205608][T25696] ? __pfx_vma_modify_flags+0x10/0x10 [ 1714.205659][T25696] ? __futex_wait+0x35a/0x410 [ 1714.205701][T25696] mlock_fixup+0x40f/0x940 [ 1714.205736][T25696] ? __pfx_mlock_fixup+0x10/0x10 [ 1714.205763][T25696] ? mas_find+0x6d9/0xcb0 [ 1714.205799][T25696] apply_vma_lock_flags+0x350/0x4a0 [ 1714.205832][T25696] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1714.205879][T25696] ? do_mlock+0x169/0x730 [ 1714.205916][T25696] do_mlock+0x54d/0x730 [ 1714.205940][T25696] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1714.205974][T25696] ? __pfx_do_mlock+0x10/0x10 [ 1714.206001][T25696] ? ksys_write+0x248/0x270 [ 1714.206029][T25696] ? __pfx___se_sys_futex+0x10/0x10 [ 1714.206052][T25696] ? __pfx_ksys_write+0x10/0x10 [ 1714.206087][T25696] __x64_sys_mlock+0x77/0xa0 [ 1714.206124][T25696] do_syscall_64+0x166/0x520 [ 1714.206155][T25696] ? trace_irq_disable+0x3b/0x140 [ 1714.206185][T25696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.206210][T25696] ? clear_bhb_loop+0x70/0xc0 [ 1714.206239][T25696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.206263][T25696] RIP: 0033:0x7f880e28e159 [ 1714.206285][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.206305][T25696] RSP: 002b:00007f880c4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1714.206330][T25696] RAX: ffffffffffffffda RBX: 00007f880e515fa0 RCX: 00007f880e28e159 [ 1714.206349][T25696] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1714.206365][T25696] RBP: 00007f880e32503b R08: 0000000000000000 R09: 0000000000000000 [ 1714.206381][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1714.206397][T25696] R13: 00007f880e516038 R14: 00007f880e515fa0 R15: 00007ffc021acb28 [ 1714.206435][T25696] [ 1714.676406][T25358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1715.511966][T25358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1715.560440][T25358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1715.562646][T25358] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1715.678741][T25358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1715.952213][T25718] FAULT_INJECTION: forcing a failure. [ 1715.952213][T25718] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.952257][T25718] CPU: 0 UID: 0 PID: 25718 Comm: syz.1.5067 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1715.952300][T25718] Tainted: [L]=SOFTLOCKUP [ 1715.952310][T25718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1715.952325][T25718] Call Trace: [ 1715.952335][T25718] [ 1715.952345][T25718] dump_stack_lvl+0xe8/0x150 [ 1715.952386][T25718] should_fail_ex+0x46b/0x600 [ 1715.952421][T25718] should_failslab+0xa8/0x100 [ 1715.952454][T25718] ? vm_area_dup+0x28/0x750 [ 1715.952484][T25718] kmem_cache_alloc_noprof+0x9e/0x690 [ 1715.952512][T25718] ? trace_hrtimer_start+0x82/0x200 [ 1715.952549][T25718] ? vm_area_dup+0x28/0x750 [ 1715.952584][T25718] vm_area_dup+0x28/0x750 [ 1715.952611][T25718] ? __split_vma+0x1b7/0xa00 [ 1715.952636][T25718] __split_vma+0x1d7/0xa00 [ 1715.952660][T25718] ? finish_task_switch+0x40e/0xc60 [ 1715.952684][T25718] ? lockdep_hardirqs_on+0x7b/0x110 [ 1715.952714][T25718] ? __pfx___split_vma+0x10/0x10 [ 1715.952743][T25718] ? __lock_acquire+0x747/0x2de0 [ 1715.952779][T25718] vma_modify+0x8b7/0x2060 [ 1715.952825][T25718] vma_modify_flags+0x2a4/0x3c0 [ 1715.952878][T25718] ? __pfx_vma_modify_flags+0x10/0x10 [ 1715.952935][T25718] ? __lock_acquire+0x747/0x2de0 [ 1715.952967][T25718] ? mprotect_fixup+0xf9/0xad0 [ 1715.953008][T25718] mprotect_fixup+0x51a/0xad0 [ 1715.953051][T25718] ? __pfx_mprotect_fixup+0x10/0x10 [ 1715.953089][T25718] ? mas_next_slot+0xc94/0xd70 [ 1715.953149][T25718] do_mprotect_pkey+0x8e7/0xd10 [ 1715.953202][T25718] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1715.953278][T25718] ? rcu_is_watching+0x16/0xb0 [ 1715.953326][T25718] __x64_sys_mprotect+0x80/0x90 [ 1715.953364][T25718] do_syscall_64+0x166/0x520 [ 1715.953397][T25718] ? trace_irq_disable+0x3b/0x140 [ 1715.953428][T25718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.953453][T25718] ? clear_bhb_loop+0x70/0xc0 [ 1715.953483][T25718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.953507][T25718] RIP: 0033:0x7fd36941e159 [ 1715.953531][T25718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.953553][T25718] RSP: 002b:00007fd367676028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1715.953581][T25718] RAX: ffffffffffffffda RBX: 00007fd3696a5fa0 RCX: 00007fd36941e159 [ 1715.953599][T25718] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 1715.953616][T25718] RBP: 00007fd3694b503b R08: 0000000000000000 R09: 0000000000000000 [ 1715.953632][T25718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1715.953647][T25718] R13: 00007fd3696a6038 R14: 00007fd3696a5fa0 R15: 00007ffe3d0b7448 [ 1715.953686][T25718] [ 1716.447390][T25358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.653024][T25358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.702015][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.702250][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.739372][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.739548][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.554211][T15697] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 1028 sec [ 1720.085259][T25358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.357578][T25358] veth0_vlan: entered promiscuous mode [ 1720.387570][T25358] veth1_vlan: entered promiscuous mode [ 1720.591123][T25358] veth0_macvtap: entered promiscuous mode [ 1720.657689][T25358] veth1_macvtap: entered promiscuous mode [ 1720.784321][T25358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.848092][T25358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.382351][ T1431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.382866][ T1431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.383271][ T1431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.383748][ T1431] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.293863][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.293889][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.541367][T25851] lo: entered promiscuous mode [ 1724.541394][T25851] lo: entered allmulticast mode [ 1724.573981][T25851] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5097'. [ 1724.574006][T25851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1724.674506][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.674530][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.723072][T25876] netlink: 'syz.1.5096': attribute type 1 has an invalid length. [ 1727.445386][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1727.445411][T25885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1727.683067][T25882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1728.196585][T25885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.226204][T25885] bond1: (slave bond0): making interface the new active one [ 1728.240183][T25885] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1731.399219][T25941] netlink: 'syz.4.5114': attribute type 1 has an invalid length. [ 1732.296582][T25964] netlink: 'syz.1.5122': attribute type 1 has an invalid length. [ 1732.298333][T25964] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1732.382755][ T9] logitech-hidpp-device 0005:046D:B012.001D: item fetching failed at offset 22/23 [ 1732.383547][ T9] logitech-hidpp-device 0005:046D:B012.001D: hidpp_probe:parse failed [ 1732.383634][ T9] logitech-hidpp-device 0005:046D:B012.001D: probe with driver logitech-hidpp-device failed with error -22 [ 1732.386756][T25959] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1732.678973][T25969] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5123'. [ 1732.679457][T25969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5123'. [ 1732.911096][T25978] netlink: 'syz.2.5126': attribute type 1 has an invalid length. [ 1734.049722][T26010] netlink: 'syz.3.5133': attribute type 1 has an invalid length. [ 1734.049749][T26010] netlink: 64399 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1735.269725][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.547402][T26019] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5135'. [ 1735.547431][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 1735.935869][T15676] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1736.107764][T15676] usb 4-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.00 [ 1736.110708][T15676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1736.110746][T15676] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1736.110791][T15676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.263527][T15676] usb 4-1: config 0 descriptor?? [ 1736.270686][T26023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1736.719723][T26047] FAULT_INJECTION: forcing a failure. [ 1736.719723][T26047] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.719764][T26047] CPU: 1 UID: 0 PID: 26047 Comm: syz.4.5145 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1736.719798][T26047] Tainted: [L]=SOFTLOCKUP [ 1736.719808][T26047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1736.719822][T26047] Call Trace: [ 1736.719832][T26047] [ 1736.719842][T26047] dump_stack_lvl+0xe8/0x150 [ 1736.719882][T26047] should_fail_ex+0x46b/0x600 [ 1736.719919][T26047] should_failslab+0xa8/0x100 [ 1736.719956][T26047] ? vm_area_dup+0x28/0x750 [ 1736.719990][T26047] kmem_cache_alloc_noprof+0x9e/0x690 [ 1736.720020][T26047] ? lockdep_hardirqs_on+0x7b/0x110 [ 1736.720053][T26047] ? vm_area_dup+0x28/0x750 [ 1736.720093][T26047] vm_area_dup+0x28/0x750 [ 1736.720124][T26047] ? __split_vma+0x1b7/0xa00 [ 1736.720151][T26047] __split_vma+0x1d7/0xa00 [ 1736.720185][T26047] ? __pfx___split_vma+0x10/0x10 [ 1736.720219][T26047] ? __lock_acquire+0x747/0x2de0 [ 1736.720271][T26047] vma_modify+0x8b7/0x2060 [ 1736.720325][T26047] vma_modify_flags+0x2a4/0x3c0 [ 1736.720364][T26047] ? __pfx_vma_modify_flags+0x10/0x10 [ 1736.720415][T26047] ? __futex_wait+0x35a/0x410 [ 1736.720457][T26047] mlock_fixup+0x40f/0x940 [ 1736.720492][T26047] ? __pfx_mlock_fixup+0x10/0x10 [ 1736.720520][T26047] ? mas_find+0x6d9/0xcb0 [ 1736.720557][T26047] apply_vma_lock_flags+0x350/0x4a0 [ 1736.720589][T26047] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1736.720635][T26047] ? do_mlock+0x169/0x730 [ 1736.720663][T26047] do_mlock+0x54d/0x730 [ 1736.720687][T26047] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1736.720721][T26047] ? __pfx_do_mlock+0x10/0x10 [ 1736.720749][T26047] ? ksys_write+0x248/0x270 [ 1736.720778][T26047] ? __pfx___se_sys_futex+0x10/0x10 [ 1736.720801][T26047] ? __pfx_ksys_write+0x10/0x10 [ 1736.720837][T26047] __x64_sys_mlock+0x77/0xa0 [ 1736.720875][T26047] do_syscall_64+0x166/0x520 [ 1736.720907][T26047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.720932][T26047] ? clear_bhb_loop+0x70/0xc0 [ 1736.720960][T26047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.720983][T26047] RIP: 0033:0x7f716f0ae159 [ 1736.721005][T26047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.721025][T26047] RSP: 002b:00007f716d306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1736.721051][T26047] RAX: ffffffffffffffda RBX: 00007f716f335fa0 RCX: 00007f716f0ae159 [ 1736.721070][T26047] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1736.721086][T26047] RBP: 00007f716f14503b R08: 0000000000000000 R09: 0000000000000000 [ 1736.721101][T26047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.721116][T26047] R13: 00007f716f336038 R14: 00007f716f335fa0 R15: 00007ffe1a0d0228 [ 1736.721153][T26047] [ 1738.161908][T15676] hid-generic 0003:18D1:5044.001E: item fetching failed at offset 0/6 [ 1738.162684][T15676] hid-generic 0003:18D1:5044.001E: probe with driver hid-generic failed with error -22 [ 1738.569946][T15676] usb 4-1: USB disconnect, device number 85 [ 1739.893059][T15676] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1740.010997][T26074] syz.3.5152: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset= [ 1740.055498][T15676] usb 2-1: Using ep0 maxpacket: 8 [ 1740.056788][T15676] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1740.059164][T15676] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1740.116500][T15676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.116536][T15676] usb 2-1: Product: syz [ 1740.116553][T15676] usb 2-1: Manufacturer: syz [ 1740.116576][T15676] usb 2-1: SerialNumber: syz [ 1740.122158][T26074] /,mems_allowed=0-1 [ 1740.122266][T26074] CPU: 1 UID: 0 PID: 26074 Comm: syz.3.5152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1740.122300][T26074] Tainted: [L]=SOFTLOCKUP [ 1740.122309][T26074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1740.122328][T26074] Call Trace: [ 1740.122338][T26074] [ 1740.122349][T26074] dump_stack_lvl+0xe8/0x150 [ 1740.122390][T26074] warn_alloc+0x24d/0x270 [ 1740.122429][T26074] ? __pfx_warn_alloc+0x10/0x10 [ 1740.122469][T26074] ? alloc_pages_mpol+0x11b/0x280 [ 1740.122497][T26074] ? alloc_pages_noprof+0x17c/0x2f0 [ 1740.122524][T26074] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 1740.122586][T26074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1740.122623][T26074] ? lock_acquire+0x115/0x350 [ 1740.122666][T26074] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1740.122700][T26074] __vmalloc_noprof+0xd2/0x120 [ 1740.122728][T26074] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1740.122766][T26074] bpf_prog_alloc_no_stats+0x47/0x560 [ 1740.122800][T26074] ? bpf_prog_alloc+0x2a/0x1a0 [ 1740.122836][T26074] bpf_prog_alloc+0x3c/0x1a0 [ 1740.122875][T26074] __get_filter+0xf2/0x420 [ 1740.122909][T26074] sk_attach_filter+0x24/0x140 [ 1740.122941][T26074] sk_setsockopt+0x23d6/0x2c40 [ 1740.122984][T26074] ? __pfx_sk_setsockopt+0x10/0x10 [ 1740.123019][T26074] ? do_futex+0x3e7/0x4e0 [ 1740.123062][T26074] ? __fget_files+0x2a/0x420 [ 1740.123091][T26074] ? __fget_files+0x2a/0x420 [ 1740.123114][T26074] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1740.123143][T26074] do_sock_setsockopt+0x11b/0x1b0 [ 1740.123184][T26074] __x64_sys_setsockopt+0x143/0x1b0 [ 1740.123227][T26074] do_syscall_64+0x166/0x520 [ 1740.123258][T26074] ? trace_irq_disable+0x3b/0x140 [ 1740.123287][T26074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.123312][T26074] ? clear_bhb_loop+0x70/0xc0 [ 1740.123342][T26074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.123366][T26074] RIP: 0033:0x7f880e28e159 [ 1740.123388][T26074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.123410][T26074] RSP: 002b:00007f880c4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1740.123434][T26074] RAX: ffffffffffffffda RBX: 00007f880e515fa0 RCX: 00007f880e28e159 [ 1740.123453][T26074] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 1740.123468][T26074] RBP: 00007f880e32503b R08: 0000000000000010 R09: 0000000000000000 [ 1740.123484][T26074] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1740.123501][T26074] R13: 00007f880e516038 R14: 00007f880e515fa0 R15: 00007ffc021acb28 [ 1740.123539][T26074] [ 1740.285668][T26074] Mem-Info: [ 1740.285685][T26074] active_anon:211 inactive_anon:35815 isolated_anon:0 [ 1740.285685][T26074] active_file:26620 inactive_file:35294 isolated_file:0 [ 1740.285685][T26074] unevictable:0 dirty:197 writeback:0 [ 1740.285685][T26074] slab_reclaimable:13184 slab_unreclaimable:111814 [ 1740.285685][T26074] mapped:48314 shmem:28259 pagetables:4167 [ 1740.285685][T26074] sec_pagetables:0 bounce:0 [ 1740.285685][T26074] kernel_misc_reclaimable:0 [ 1740.285685][T26074] free:887021 free_pcp:3902 free_cma:0 [ 1740.285753][T26074] Node 0 active_anon:844kB inactive_anon:143260kB active_file:106272kB inactive_file:141176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193256kB dirty:788kB writeback:0kB shmem:113036kB kernel_stack:15364kB pagetables:16532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1740.285812][T26074] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1740.285882][T26074] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.285953][T26074] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1740.285999][T26074] Node 0 DMA32 free:647336kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:844kB inactive_anon:143260kB active_file:106272kB inactive_file:141176kB unevictable:0kB writepending:788kB zspages:0kB present:3129332kB managed:2558792kB mlocked:0kB bounce:0kB free_pcp:15588kB local_pcp:10144kB free_cma:0kB [ 1740.286071][T26074] lowmem_reserve[]: 0 0 1 1 1 [ 1740.286113][T26074] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1740.286179][T26074] lowmem_reserve[]: 0 0 0 0 0 [ 1740.286220][T26074] Node 1 Normal free:2885388kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.286288][T26074] lowmem_reserve[]: 0 0 0 0 0 [ 1740.286330][T26074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1740.286471][T26074] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 3*16kB (UE) 2*32kB (E) 4*64kB (UME) 235*128kB (UM) 345*256kB (UME) 294*512kB (UME) 239*1024kB (UM) 17*2048kB (UME) 24*4096kB (UM) = 647180kB [ 1740.286668][T26074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.286789][T26074] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 3*16kB (UM) 2*32kB (UM) 6*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 703*4096kB (M) = 2885388kB [ 1740.286971][T26074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.286991][T26074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1740.287011][T26074] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 1740.287030][T26074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1740.287051][T26074] 90194 total pagecache pages [ 1740.287060][T26074] 0 pages in swap cache [ 1740.287069][T26074] Free swap = 124996kB [ 1740.287078][T26074] Total swap = 124996kB [ 1740.287088][T26074] 2097051 pages RAM [ 1740.287097][T26074] 0 pages HighMem/MovableOnly [ 1740.642525][T26074] 425284 pages reserved [ 1740.642542][T26074] 0 pages cma reserved [ 1741.669787][T26086] FAULT_INJECTION: forcing a failure. [ 1741.669787][T26086] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.669830][T26086] CPU: 0 UID: 0 PID: 26086 Comm: syz.4.5157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1741.669863][T26086] Tainted: [L]=SOFTLOCKUP [ 1741.669873][T26086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1741.669888][T26086] Call Trace: [ 1741.669899][T26086] [ 1741.669909][T26086] dump_stack_lvl+0xe8/0x150 [ 1741.669951][T26086] should_fail_ex+0x46b/0x600 [ 1741.669992][T26086] should_failslab+0xa8/0x100 [ 1741.670029][T26086] ? vm_area_dup+0x28/0x750 [ 1741.670063][T26086] kmem_cache_alloc_noprof+0x9e/0x690 [ 1741.670094][T26086] ? vm_area_dup+0x28/0x750 [ 1741.670135][T26086] vm_area_dup+0x28/0x750 [ 1741.670166][T26086] ? __split_vma+0x1b7/0xa00 [ 1741.670194][T26086] __split_vma+0x1d7/0xa00 [ 1741.670222][T26086] ? finish_task_switch+0x40e/0xc60 [ 1741.670250][T26086] ? lockdep_hardirqs_on+0x7b/0x110 [ 1741.670285][T26086] ? __pfx___split_vma+0x10/0x10 [ 1741.670319][T26086] ? __lock_acquire+0x747/0x2de0 [ 1741.670361][T26086] vma_modify+0x8b7/0x2060 [ 1741.670414][T26086] vma_modify_flags+0x2a4/0x3c0 [ 1741.670452][T26086] ? __pfx_vma_modify_flags+0x10/0x10 [ 1741.670511][T26086] ? __futex_wait+0x35a/0x410 [ 1741.670554][T26086] mlock_fixup+0x40f/0x940 [ 1741.670589][T26086] ? __pfx_mlock_fixup+0x10/0x10 [ 1741.670616][T26086] ? mas_find+0x6d9/0xcb0 [ 1741.670654][T26086] apply_vma_lock_flags+0x350/0x4a0 [ 1741.670705][T26086] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1741.670755][T26086] ? do_mlock+0x169/0x730 [ 1741.670783][T26086] do_mlock+0x54d/0x730 [ 1741.670807][T26086] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1741.670853][T26086] ? __pfx_do_mlock+0x10/0x10 [ 1741.670888][T26086] ? rcu_is_watching+0x16/0xb0 [ 1741.670934][T26086] __x64_sys_mlock+0x77/0xa0 [ 1741.670975][T26086] do_syscall_64+0x166/0x520 [ 1741.671009][T26086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.671034][T26086] ? clear_bhb_loop+0x70/0xc0 [ 1741.671065][T26086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.671090][T26086] RIP: 0033:0x7f716f0ae159 [ 1741.671113][T26086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.671135][T26086] RSP: 002b:00007f716d2e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1741.671162][T26086] RAX: ffffffffffffffda RBX: 00007f716f336090 RCX: 00007f716f0ae159 [ 1741.671182][T26086] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1741.671198][T26086] RBP: 00007f716f14503b R08: 0000000000000000 R09: 0000000000000000 [ 1741.671214][T26086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.671229][T26086] R13: 00007f716f336128 R14: 00007f716f336090 R15: 00007ffe1a0d0228 [ 1741.671268][T26086] [ 1742.374816][T15676] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1742.375300][T15676] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1742.437656][T15676] usb 2-1: USB disconnect, device number 26 [ 1742.564603][T22731] udevd[22731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1743.553202][T15697] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1743.721988][T15697] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1743.723561][T15697] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.723603][T15697] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1743.725095][T15697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1743.725122][T15697] usb 7-1: SerialNumber: syz [ 1744.117551][T15697] usb 7-1: skipping empty audio interface (v1) [ 1744.509567][T26121] ALSA: seq fatal error: cannot create timer (-22) [ 1744.561429][T15697] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1744.570455][T15697] usb 7-1: USB disconnect, device number 15 [ 1744.748216][T22731] udevd[22731]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1745.560282][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1745.713397][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1745.715180][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1745.715210][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.715234][ T9] usb 4-1: config 220 has no interface number 2 [ 1745.715306][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1745.715338][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1745.715359][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1745.715380][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1745.720883][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.720910][ T9] usb 4-1: Product: syz [ 1745.720925][ T9] usb 4-1: Manufacturer: syz [ 1745.720943][ T9] usb 4-1: SerialNumber: syz [ 1746.060497][ T9] usb 4-1: selecting invalid altsetting 0 [ 1746.138507][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1746.138540][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 1746.141836][ T5711] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1746.207978][ T9] usb 4-1: selecting invalid altsetting 0 [ 1746.208018][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1746.233728][ T9] usb 4-1: USB disconnect, device number 86 [ 1746.291233][ T5711] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1746.292878][ T5711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.292933][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1746.292962][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1746.292989][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1746.293017][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1746.293044][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1746.293078][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1746.293105][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1746.293131][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1746.293157][ T5711] usb 5-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 1746.326912][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.326982][ T5711] usb 5-1: Product: syz [ 1746.327025][ T5711] usb 5-1: Manufacturer: syz [ 1746.327082][ T5711] usb 5-1: SerialNumber: syz [ 1746.501287][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.501492][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.502480][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.502676][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.502954][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.503179][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.503507][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.528681][T26140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1746.626235][ T5711] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1746.647423][ T5711] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 1746.685995][ T5711] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1746.686170][ T5711] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 1746.718999][ T5711] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1746.798858][ T5711] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 1746.798959][ T5711] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 1746.799107][ T5711] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1746.841856][ T5711] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1747.050697][ T5711] usb 5-1: USB disconnect, device number 36 [ 1747.484227][ T5711] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1747.501843][ T5711] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1747.504141][ T5711] keyspan 5-1:1.0: device disconnected [ 1749.868499][ T5711] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1749.994600][ T5599] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 1749.994641][ T5599] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1750.036733][T26162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1750.038188][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 1750.039075][ T5711] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1750.064705][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.064736][ T5711] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1750.097007][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.097038][ T5711] usb 3-1: Product: syz [ 1750.097055][ T5711] usb 3-1: Manufacturer: syz [ 1750.097073][ T5711] usb 3-1: SerialNumber: syz [ 1750.378128][T14135] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1750.592240][T14135] usb 4-1: Using ep0 maxpacket: 8 [ 1750.594387][T14135] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 1750.618225][T14135] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1750.647680][T14135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.647710][T14135] usb 4-1: Product: syz [ 1750.648153][T14135] usb 4-1: Manufacturer: syz [ 1750.648172][T14135] usb 4-1: SerialNumber: syz [ 1750.743106][ T5711] usb 3-1: USB disconnect, device number 82 [ 1751.060227][T26162] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1751.060261][T26162] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1751.062298][T26162] vhci_hcd vhci_hcd.0: Device attached [ 1751.364456][T26173] vhci_hcd: connection closed [ 1751.365763][ T57] vhci_hcd vhci_hcd.3: stop threads [ 1751.365792][ T57] vhci_hcd vhci_hcd.3: release socket [ 1751.375448][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 1751.433024][T14132] usb 40-1: enqueue for inactive port 0 [ 1751.492587][T14135] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1751.532346][T14135] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1751.569957][T14135] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1751.595039][T14135] usb 4-1: USB disconnect, device number 87 [ 1752.066883][T14132] usb usb40-port1: attempt power cycle [ 1752.578037][T26194] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5194'. [ 1752.578065][T26194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5194'. [ 1752.709813][T14132] usb usb40-port1: unable to enumerate USB device [ 1753.656113][T14132] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1753.917208][T14132] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 1754.671640][T14132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.671693][T14132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.779795][T26218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5203'. [ 1754.825619][ T5599] Bluetooth: hci4: unexpected cc 0x200b length: 2 > 1 [ 1754.825656][ T5599] Bluetooth: hci4: unexpected event for opcode 0x200b [ 1755.673816][T14132] usb 3-1: config 0 descriptor?? [ 1756.063458][T14132] usbhid 3-1:0.0: can't add hid device: -71 [ 1756.063594][T14132] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1756.092462][T14132] usb 3-1: USB disconnect, device number 83 [ 1756.584708][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1756.798009][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1756.847676][ T9] usb 2-1: device descriptor read/all, error -71 [ 1757.195432][T26248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5214'. [ 1760.575026][T26271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1760.689470][T26274] loop5: detected capacity change from 0 to 7 [ 1761.043535][T26274] loop5: [ 1761.043567][T26274] loop5: partition table partially beyond EOD, truncated [ 1762.128123][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout [ 1765.320314][T15676] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1765.481646][T15676] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1765.483229][T15676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.483264][T15676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1765.484874][T15676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1765.484903][T15676] usb 3-1: SerialNumber: syz [ 1765.781829][T15676] usb 3-1: 0:2 : does not exist [ 1765.843161][T15676] usb 3-1: USB disconnect, device number 84 [ 1765.914239][T22731] udevd[22731]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.436335][T26329] tcf_pedit_act: 7 callbacks suppressed [ 1766.436358][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436376][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436393][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436408][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436424][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436439][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436455][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436470][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436486][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436501][T26329] tc action pedit unable to extract header offset for header type (0x5) [ 1766.436531][T26329] 0: reclassify loop, rule prio 0, protocol 800 [ 1768.661111][T26352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5247'. [ 1769.275242][T15697] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1769.354946][T26362] 0: reclassify loop, rule prio 0, protocol 800 [ 1769.429612][T15697] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1769.433541][T15697] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1769.433577][T15697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1769.433605][T15697] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1769.433649][T15697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.503482][T26360] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1771.777629][ T5599] Bluetooth: hci5: Reading Intel version command failed (-110) [ 1772.169794][T26392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5263'. [ 1772.430809][T15698] usb 5-1: USB disconnect, device number 37 [ 1772.959049][T26391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.012796][T26391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.623349][T26391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1773.641371][T26391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.713654][T26427] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1774.728776][T26427] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1774.729511][T26427] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1774.729925][T26427] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1775.334950][T26440] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.5275'. [ 1775.334972][T26440] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.5275'. [ 1776.611812][ T1514] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.635547][ T1514] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.635977][ T1514] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.636364][ T1514] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.675934][T26458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5283'. [ 1778.683584][T15698] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 1089 sec [ 1779.659624][T26474] netlink: 'syz.1.5284': attribute type 1 has an invalid length. [ 1779.699770][ T38] audit: type=1326 audit(1789144688.585:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.701654][ T38] audit: type=1326 audit(1789144688.585:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.870323][ T38] audit: type=1326 audit(1789144688.755:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.870389][ T38] audit: type=1326 audit(1789144688.755:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.896153][ T38] audit: type=1326 audit(1789144688.785:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.896323][ T38] audit: type=1326 audit(1789144688.785:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.896444][ T38] audit: type=1326 audit(1789144688.785:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.926737][ T38] audit: type=1326 audit(1789144688.815:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1779.926929][ T38] audit: type=1326 audit(1789144688.815:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26478 comm="syz.3.5289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f880e28e159 code=0x7ffc0000 [ 1780.401543][T26494] FAULT_INJECTION: forcing a failure. [ 1780.401543][T26494] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.401589][T26494] CPU: 1 UID: 0 PID: 26494 Comm: syz.6.5296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1780.401622][T26494] Tainted: [L]=SOFTLOCKUP [ 1780.401632][T26494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1780.401648][T26494] Call Trace: [ 1780.401658][T26494] [ 1780.401669][T26494] dump_stack_lvl+0xe8/0x150 [ 1780.401720][T26494] should_fail_ex+0x46b/0x600 [ 1780.401758][T26494] should_failslab+0xa8/0x100 [ 1780.401798][T26494] ? vm_area_dup+0x28/0x750 [ 1780.401834][T26494] kmem_cache_alloc_noprof+0x9e/0x690 [ 1780.401867][T26494] ? vm_area_dup+0x28/0x750 [ 1780.401905][T26494] vm_area_dup+0x28/0x750 [ 1780.401936][T26494] ? __split_vma+0x1b7/0xa00 [ 1780.401965][T26494] __split_vma+0x1d7/0xa00 [ 1780.402001][T26494] ? __pfx___split_vma+0x10/0x10 [ 1780.402035][T26494] ? __lock_acquire+0x747/0x2de0 [ 1780.402080][T26494] vma_modify+0x8b7/0x2060 [ 1780.402134][T26494] vma_modify_flags+0x2a4/0x3c0 [ 1780.402175][T26494] ? __pfx_vma_modify_flags+0x10/0x10 [ 1780.402227][T26494] ? __futex_wait+0x35a/0x410 [ 1780.402271][T26494] mlock_fixup+0x40f/0x940 [ 1780.402307][T26494] ? __pfx_mlock_fixup+0x10/0x10 [ 1780.402335][T26494] ? mas_find+0x6d9/0xcb0 [ 1780.402374][T26494] apply_vma_lock_flags+0x350/0x4a0 [ 1780.402407][T26494] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1780.402456][T26494] ? do_mlock+0x169/0x730 [ 1780.402484][T26494] do_mlock+0x54d/0x730 [ 1780.402508][T26494] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1780.402544][T26494] ? __pfx_do_mlock+0x10/0x10 [ 1780.402572][T26494] ? ksys_write+0x248/0x270 [ 1780.402599][T26494] ? __pfx___se_sys_futex+0x10/0x10 [ 1780.402622][T26494] ? __pfx_ksys_write+0x10/0x10 [ 1780.402656][T26494] __x64_sys_mlock+0x77/0xa0 [ 1780.402695][T26494] do_syscall_64+0x166/0x520 [ 1780.402737][T26494] ? trace_irq_disable+0x3b/0x140 [ 1780.402768][T26494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.402793][T26494] ? clear_bhb_loop+0x70/0xc0 [ 1780.402823][T26494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.402849][T26494] RIP: 0033:0x7f94de94e159 [ 1780.402871][T26494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.402893][T26494] RSP: 002b:00007f94dcba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1780.402920][T26494] RAX: ffffffffffffffda RBX: 00007f94debd5fa0 RCX: 00007f94de94e159 [ 1780.402939][T26494] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1780.402956][T26494] RBP: 00007f94de9e503b R08: 0000000000000000 R09: 0000000000000000 [ 1780.402973][T26494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1780.402988][T26494] R13: 00007f94debd6038 R14: 00007f94debd5fa0 R15: 00007ffc5272ad48 [ 1780.403027][T26494] [ 1780.572845][T15676] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1780.863403][T15676] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1780.866376][T15676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1780.866412][T15676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1780.866441][T15676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1780.866471][T15676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1780.866514][T15676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.735166][T26491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1781.735460][T26491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1781.764457][T15676] pl2303 4-1:1.0: pl2303 converter detected [ 1781.825368][T15676] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 1783.056971][T26491] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 1783.057455][T26491] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1783.058357][T26491] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1783.058421][T26491] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 1783.139277][T15676] usb 4-1: USB disconnect, device number 88 [ 1783.171395][T15676] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1783.172436][T15676] pl2303 4-1:1.0: device disconnected [ 1783.282841][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5301'. [ 1783.732695][T26522] netlink: 'syz.6.5302': attribute type 1 has an invalid length. [ 1785.055867][T26532] tcf_pedit_act: 24 callbacks suppressed [ 1785.055891][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.055908][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.055924][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.055947][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.055963][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.055978][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.055993][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.056006][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.056021][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.056036][T26532] tc action pedit unable to extract header offset for header type (0x5) [ 1785.056065][T26532] 0: reclassify loop, rule prio 0, protocol 800 [ 1786.878692][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5315'. [ 1787.128483][T26565] FAULT_INJECTION: forcing a failure. [ 1787.128483][T26565] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.128527][T26565] CPU: 1 UID: 0 PID: 26565 Comm: syz.4.5316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1787.128563][T26565] Tainted: [L]=SOFTLOCKUP [ 1787.128574][T26565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1787.128589][T26565] Call Trace: [ 1787.128599][T26565] [ 1787.128610][T26565] dump_stack_lvl+0xe8/0x150 [ 1787.128651][T26565] should_fail_ex+0x46b/0x600 [ 1787.128690][T26565] should_failslab+0xa8/0x100 [ 1787.128729][T26565] __kmalloc_noprof+0xfb/0x790 [ 1787.128761][T26565] ? security_inode_alloc+0x39/0x310 [ 1787.128798][T26565] ? sk_prot_alloc+0xe7/0x210 [ 1787.128834][T26565] ? sk_prot_alloc+0xe7/0x210 [ 1787.128871][T26565] ? security_inode_alloc+0x39/0x310 [ 1787.128914][T26565] sk_prot_alloc+0xe7/0x210 [ 1787.128950][T26565] ? sk_alloc+0x27/0x390 [ 1787.128992][T26565] sk_alloc+0x3a/0x390 [ 1787.129034][T26565] llc_sk_alloc+0x34/0x450 [ 1787.129072][T26565] llc_ui_create+0xcf/0x130 [ 1787.129100][T26565] __sock_create+0x4b3/0x9d0 [ 1787.129143][T26565] __sys_socket+0xd6/0x1b0 [ 1787.129179][T26565] __x64_sys_socket+0x7a/0x90 [ 1787.129220][T26565] do_syscall_64+0x166/0x520 [ 1787.129254][T26565] ? trace_irq_disable+0x3b/0x140 [ 1787.129290][T26565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.129314][T26565] ? clear_bhb_loop+0x70/0xc0 [ 1787.129344][T26565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.129369][T26565] RIP: 0033:0x7f716f0ae159 [ 1787.129392][T26565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.129414][T26565] RSP: 002b:00007f716d305fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1787.129441][T26565] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f716f0ae159 [ 1787.129460][T26565] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001a [ 1787.129476][T26565] RBP: 00007f716f14503b R08: 0000000000000000 R09: 0000000000000000 [ 1787.129492][T26565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1787.129508][T26565] R13: 00007f716f336038 R14: 00007f716f335fa0 R15: 00007ffe1a0d0228 [ 1787.129546][T26565] [ 1788.767767][T26571] netlink: 'syz.3.5320': attribute type 1 has an invalid length. [ 1790.083922][T26582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5322'. [ 1790.620158][T26596] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 1790.675363][T26605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5330'. [ 1790.949877][T26615] lo: left promiscuous mode [ 1790.949909][T26615] lo: left allmulticast mode [ 1791.000481][T26616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5335'. [ 1791.328799][T26626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5338'. [ 1791.446980][T26638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1791.480260][T15697] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1791.767069][T15697] usb 5-1: Using ep0 maxpacket: 8 [ 1791.767954][T15697] usb 5-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 1791.769533][T15697] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1791.773488][T15697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.773517][T15697] usb 5-1: Product: syz [ 1791.773535][T15697] usb 5-1: Manufacturer: syz [ 1791.773552][T15697] usb 5-1: SerialNumber: syz [ 1792.257189][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5346'. [ 1792.552351][T26622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1792.552384][T26622] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1792.553034][T26622] vhci_hcd vhci_hcd.0: Device attached [ 1792.627715][T26661] vhci_hcd: connection closed [ 1792.629784][ T194] vhci_hcd vhci_hcd.4: stop threads [ 1792.629813][ T194] vhci_hcd vhci_hcd.4: release socket [ 1792.629866][ T194] vhci_hcd vhci_hcd.4: disconnect device [ 1792.687334][T15697] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1792.712168][T15697] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1792.784222][T15697] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1792.790255][T15697] usb 5-1: USB disconnect, device number 38 [ 1792.863032][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1794.703094][T26700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5362'. [ 1794.805630][T15697] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1794.998971][T15697] usb 7-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1795.000437][T15697] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.000471][T15697] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1795.000507][T15697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.044420][T15697] usb 7-1: config 0 descriptor?? [ 1796.569697][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.584367][T15697] usbhid 7-1:0.0: can't add hid device: -71 [ 1796.586728][T15697] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1796.622200][T15697] usb 7-1: USB disconnect, device number 16 [ 1797.671029][T26741] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1797.691633][T26741] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1797.692415][T26741] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1797.699989][T26741] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1798.284399][T15697] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1798.434716][T15697] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1798.436386][T15697] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.436422][T15697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1798.436460][T15697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.492850][T15697] usb 5-1: config 0 descriptor?? [ 1798.943054][T15697] usbhid 5-1:0.0: can't add hid device: -71 [ 1798.943203][T15697] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1798.976682][T15697] usb 5-1: USB disconnect, device number 39 [ 1801.782226][T14132] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1801.862506][T15676] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1802.013422][T15676] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1802.015970][T15676] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.016071][T15676] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1802.016110][T15676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.085537][T15676] usb 2-1: config 0 descriptor?? [ 1802.552297][T15676] usbhid 2-1:0.0: can't add hid device: -71 [ 1802.552567][T15676] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1802.597630][T15676] usb 2-1: USB disconnect, device number 29 [ 1802.618745][T14132] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1802.619827][T14132] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1802.619866][T14132] usb 5-1: can't read configurations, error -71 [ 1804.622495][T14132] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1804.801918][T14132] usb 7-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1804.803658][T14132] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.803696][T14132] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1804.803732][T14132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.854489][T14132] usb 7-1: config 0 descriptor?? [ 1805.280829][T14132] usbhid 7-1:0.0: can't add hid device: -71 [ 1805.280965][T14132] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1805.317434][T14132] usb 7-1: USB disconnect, device number 17 [ 1806.144419][ T38] audit: type=1326 audit(1789144715.038:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26943 comm="syz.2.5454" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29767fe159 code=0x0 [ 1806.598147][T26956] bond1: option mode: unable to set because the bond device has slaves [ 1806.616373][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5461'. [ 1806.616399][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5461'. [ 1807.049403][T14132] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1807.232106][T14132] usb 7-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1807.235362][T14132] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.235399][T14132] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1807.235437][T14132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.282948][T14132] usb 7-1: config 0 descriptor?? [ 1807.778258][T14132] usbhid 7-1:0.0: can't add hid device: -71 [ 1807.778446][T14132] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1807.821102][T14132] usb 7-1: USB disconnect, device number 18 [ 1808.128424][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1808.128453][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1808.306171][T26989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1808.498119][T26993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.611173][T26993] bond1: (slave bond0): making interface the new active one [ 1808.612872][T26993] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1809.264608][T27013] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 1809.449850][T14132] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1809.860412][T14132] usb 2-1: Using ep0 maxpacket: 8 [ 1810.064313][T14132] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1810.065902][T14132] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1810.065931][T14132] usb 2-1: config 0 has no interface number 0 [ 1810.076547][T14132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.076579][T14132] usb 2-1: Product: syz [ 1810.076597][T14132] usb 2-1: Manufacturer: syz [ 1810.076615][T14132] usb 2-1: SerialNumber: syz [ 1810.099214][T14132] usb 2-1: config 0 descriptor?? [ 1810.349741][T27013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.353460][T27013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.393476][T14132] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 1810.568942][T27032] tcf_pedit_act: 7 callbacks suppressed [ 1810.568965][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.568982][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.568998][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569014][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569029][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569044][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569059][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569073][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569087][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569102][T27032] tc action pedit unable to extract header offset for header type (0x5) [ 1810.569130][T27032] 0: reclassify loop, rule prio 0, protocol 800 [ 1810.638425][T15676] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1810.648612][T19778] usb 2-1: USB disconnect, device number 30 [ 1810.849429][T15676] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1810.851181][T15676] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.851217][T15676] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1810.851256][T15676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.893591][T15676] usb 4-1: config 0 descriptor?? [ 1810.981603][T27042] bond1: option mode: unable to set because the bond device has slaves [ 1810.983090][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5494'. [ 1810.983107][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5494'. [ 1811.359756][T15676] usbhid 4-1:0.0: can't add hid device: -71 [ 1811.359909][T15676] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1811.397874][T15676] usb 4-1: USB disconnect, device number 89 [ 1812.351494][T27068] bond1: option mode: unable to set because the bond device has slaves [ 1812.368775][T27068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1812.368801][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1813.786577][T27079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 1813.935316][ T5599] Bluetooth: hci0: link tx timeout [ 1813.935596][ T5599] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1814.218470][T15697] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1814.448363][T15697] usb 4-1: Using ep0 maxpacket: 8 [ 1814.449328][T15697] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1814.450873][T15697] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1814.450902][T15697] usb 4-1: config 0 has no interface number 0 [ 1814.455878][T15697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.455905][T15697] usb 4-1: Product: syz [ 1814.455922][T15697] usb 4-1: Manufacturer: syz [ 1814.455939][T15697] usb 4-1: SerialNumber: syz [ 1814.519463][T15697] usb 4-1: config 0 descriptor?? [ 1814.732210][T27079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.735006][T27079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.758729][T15697] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 1814.973009][T15697] usb 4-1: USB disconnect, device number 90 [ 1815.073239][T14132] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1815.258106][T14132] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1815.269751][T14132] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.269788][T14132] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1815.269821][T14132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.272194][T27107] bond1: option mode: unable to set because the bond device has slaves [ 1815.274954][T27107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1815.274975][T27107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1815.353060][T14132] usb 3-1: config 0 descriptor?? [ 1815.751388][T27116] 9p: Bad value for 'wfdno' [ 1815.927113][T14132] usbhid 3-1:0.0: can't add hid device: -71 [ 1815.927248][T14132] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1815.969211][T14132] usb 3-1: USB disconnect, device number 85 [ 1816.075740][T27085] Bluetooth: hci0: command 0x0c1a tx timeout [ 1816.497340][ T5599] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 1816.497378][ T5599] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1816.506789][T27126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5528'. [ 1816.758410][T14132] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1816.901618][T27137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1816.901643][T27137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1816.918771][T14132] usb 4-1: Using ep0 maxpacket: 8 [ 1816.922755][T14132] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 1816.960065][T14132] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1816.968436][T14132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.968554][T14132] usb 4-1: Product: syz [ 1816.968617][T14132] usb 4-1: Manufacturer: syz [ 1816.968661][T14132] usb 4-1: SerialNumber: syz [ 1817.246811][T27136] bond1: option mode: unable to set because the bond device has slaves [ 1817.458161][T27126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1817.486164][T27126] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1817.486460][T27126] vhci_hcd vhci_hcd.0: Device attached [ 1817.578042][T27144] vhci_hcd: connection closed [ 1817.587830][ T1169] vhci_hcd vhci_hcd.3: stop threads [ 1817.587857][ T1169] vhci_hcd vhci_hcd.3: release socket [ 1817.587911][ T1169] vhci_hcd vhci_hcd.3: disconnect device [ 1817.632235][T14132] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1817.661829][T14132] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1817.671493][T14132] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1817.691109][T14132] usb 4-1: USB disconnect, device number 91 [ 1818.030101][T15676] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1818.190057][T15676] usb 3-1: Using ep0 maxpacket: 8 [ 1818.191070][T15676] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1818.192726][T15676] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1818.192754][T15676] usb 3-1: config 0 has no interface number 0 [ 1818.195770][T15676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.195796][T15676] usb 3-1: Product: syz [ 1818.195812][T15676] usb 3-1: Manufacturer: syz [ 1818.195828][T15676] usb 3-1: SerialNumber: syz [ 1818.261973][T15676] usb 3-1: config 0 descriptor?? [ 1818.532637][T27148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.535811][T27148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.555046][T15676] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1818.751398][T15698] usb 3-1: USB disconnect, device number 86 [ 1819.908484][T15676] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1819.946195][T27173] bond1: option mode: unable to set because the bond device has slaves [ 1819.947543][T27173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'. [ 1819.947582][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5545'. [ 1820.079699][T15676] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1820.081279][T15676] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.081315][T15676] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1820.081351][T15676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.105625][T27177] mmap: syz.6.5547 (27177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1820.149325][T15676] usb 5-1: config 0 descriptor?? [ 1820.438745][T14147] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1820.589247][T14147] usb 7-1: New USB device found, idVendor=1e6d, idProduct=2d51, bcdDevice= 0.00 [ 1820.590078][T14147] usb 7-1: config 0 has no interfaces? [ 1820.590115][T14147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.636779][T15676] usbhid 5-1:0.0: can't add hid device: -71 [ 1820.636929][T15676] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1820.669378][T15676] usb 5-1: USB disconnect, device number 42 [ 1820.688460][T14147] usb 7-1: config 0 descriptor?? [ 1821.676596][T27203] netlink: 'syz.3.5554': attribute type 1 has an invalid length. [ 1821.857777][T27205] bond1: option mode: unable to set because the bond device has slaves [ 1822.002526][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5556'. [ 1822.002570][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5556'. [ 1823.069850][T14147] usb 7-1: USB disconnect, device number 19 [ 1824.469980][T27233] netlink: 'syz.1.5567': attribute type 1 has an invalid length. [ 1824.684679][T15698] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1824.839935][T15698] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1824.842056][T15698] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.842093][T15698] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1824.842132][T15698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.929845][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5569'. [ 1824.929872][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5569'. [ 1824.937099][T15698] usb 3-1: config 0 descriptor?? [ 1824.989759][T27237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1825.159772][T27239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1825.425737][T27239] bond4: (slave bond0): making interface the new active one [ 1826.299690][T15698] usbhid 3-1:0.0: can't add hid device: -71 [ 1826.299816][T15698] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1826.377664][T27239] bond4: (slave bond0): Enslaving as an active interface with an up link [ 1826.419434][T15698] usb 3-1: USB disconnect, device number 87 [ 1827.042556][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5573'. [ 1827.042586][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5573'. [ 1827.463997][T27250] bond5: entered allmulticast mode [ 1827.464537][T27250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1829.139285][T27272] syzkaller0: entered promiscuous mode [ 1829.139316][T27272] syzkaller0: entered allmulticast mode [ 1831.170513][T27293] netlink: 'syz.3.5585': attribute type 1 has an invalid length. [ 1831.508432][T14147] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1831.660558][T14147] usb 7-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1831.661945][T14147] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.661980][T14147] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1831.662016][T14147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.723603][T14147] usb 7-1: config 0 descriptor?? [ 1832.095584][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'. [ 1832.182130][T14147] usbhid 7-1:0.0: can't add hid device: -71 [ 1832.182258][T14147] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1832.229395][T14147] usb 7-1: USB disconnect, device number 20 [ 1832.449325][T27311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1832.559095][T27313] netlink: 64799 bytes leftover after parsing attributes in process `syz.3.5590'. [ 1833.482714][T27085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1833.539029][T27085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1833.540780][T27085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1833.579611][T27085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1833.580369][T27085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1834.914134][T27212] Set syz1 is full, maxelem 65536 reached [ 1835.831331][ T5599] Bluetooth: hci5: command tx timeout [ 1836.777072][T27335] netlink: 'syz.4.5598': attribute type 1 has an invalid length. [ 1837.908489][ T5599] Bluetooth: hci5: command tx timeout [ 1838.008223][T27341] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.5601'. [ 1838.318554][T15676] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1838.391258][T27298] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1838.422438][T27298] syzkaller0: entered promiscuous mode [ 1838.422483][T27298] syzkaller0: entered allmulticast mode [ 1838.529536][T15676] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1838.530985][T15676] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.531021][T15676] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1838.531065][T15676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.541017][T15676] usb 5-1: config 0 descriptor?? [ 1838.678774][T27315] netlink: 'syz.3.5591': attribute type 1 has an invalid length. [ 1838.950774][T18610] syz_tun (unregistering): left allmulticast mode [ 1838.950812][T18610] syz_tun (unregistering): left promiscuous mode [ 1838.951156][T18610] bridge0: port 3(syz_tun) entered disabled state [ 1839.108435][T19778] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 1150 sec [ 1839.259037][T15676] usbhid 5-1:0.0: can't add hid device: -71 [ 1839.259165][T15676] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1839.303240][T15676] usb 5-1: USB disconnect, device number 43 [ 1839.922250][T27368] netlink: 'syz.3.5608': attribute type 1 has an invalid length. [ 1839.988447][ T5599] Bluetooth: hci5: command tx timeout [ 1842.068357][ T5599] Bluetooth: hci5: command tx timeout [ 1842.162049][T27402] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5621'. [ 1842.332003][T27321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.334426][T27321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.334801][T27321] bridge_slave_0: entered allmulticast mode [ 1842.361124][T27321] bridge_slave_0: entered promiscuous mode [ 1842.365981][T27321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.367976][T27321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.368160][T27321] bridge_slave_1: entered allmulticast mode [ 1842.413551][T27321] bridge_slave_1: entered promiscuous mode [ 1842.506003][T27321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.519596][T27321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.586613][T27321] team0: Port device team_slave_0 added [ 1842.597595][T27321] team0: Port device team_slave_1 added [ 1842.716055][T27321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1842.716075][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.716105][T27321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.776301][T27321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.776322][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.812338][T27321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.908086][T27321] hsr_slave_0: entered promiscuous mode [ 1842.915436][T27321] hsr_slave_1: entered promiscuous mode [ 1842.916687][T27321] debugfs: 'hsr0' already exists in 'hsr' [ 1842.916714][T27321] Cannot create hsr debugfs directory [ 1844.600581][T27433] lo: entered promiscuous mode [ 1844.600614][T27433] lo: entered allmulticast mode [ 1844.606300][T27433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5631'. [ 1849.849740][T27321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1849.901922][T27321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1849.903606][T27321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1849.904636][T27497] netlink: 'syz.1.5657': attribute type 4 has an invalid length. [ 1849.992103][T27321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1850.023139][T27321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1850.064250][T27321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1850.075857][T27321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1850.105030][T27321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1850.282772][T27321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.337692][T27321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.358130][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.358222][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.390258][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.391019][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.915856][T27531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1851.216242][T27544] FAULT_INJECTION: forcing a failure. [ 1851.216242][T27544] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.216290][T27544] CPU: 1 UID: 0 PID: 27544 Comm: syz.2.5674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1851.216326][T27544] Tainted: [L]=SOFTLOCKUP [ 1851.216336][T27544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1851.216352][T27544] Call Trace: [ 1851.216362][T27544] [ 1851.216374][T27544] dump_stack_lvl+0xe8/0x150 [ 1851.216417][T27544] should_fail_ex+0x46b/0x600 [ 1851.216455][T27544] should_failslab+0xa8/0x100 [ 1851.216492][T27544] ? do_getname+0x2e/0x250 [ 1851.216529][T27544] kmem_cache_alloc_noprof+0x9e/0x690 [ 1851.216570][T27544] ? do_getname+0x2e/0x250 [ 1851.216607][T27544] ? lock_vma_under_rcu+0x45a/0x500 [ 1851.216645][T27544] do_getname+0x2e/0x250 [ 1851.216679][T27544] ? getname_flags+0x11/0x20 [ 1851.216721][T27544] do_sys_openat2+0xcc/0x200 [ 1851.216762][T27544] ? __pfx_do_sys_openat2+0x10/0x10 [ 1851.216802][T27544] ? exc_page_fault+0x6a/0xc0 [ 1851.216840][T27544] ? do_user_addr_fault+0xc4c/0x1340 [ 1851.216870][T27544] __x64_sys_openat+0x138/0x170 [ 1851.216914][T27544] do_syscall_64+0x166/0x520 [ 1851.216957][T27544] ? trace_irq_disable+0x3b/0x140 [ 1851.216987][T27544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.217012][T27544] ? clear_bhb_loop+0x70/0xc0 [ 1851.217041][T27544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.217065][T27544] RIP: 0033:0x7f29767be98e [ 1851.217086][T27544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1851.217107][T27544] RSP: 002b:00007f2974a55b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1851.217134][T27544] RAX: ffffffffffffffda RBX: 00007f2974a566c0 RCX: 00007f29767be98e [ 1851.217152][T27544] RDX: 0000000000000000 RSI: 00007f2974a55c00 RDI: ffffffffffffff9c [ 1851.217169][T27544] RBP: 00007f2974a55c00 R08: 0000000000000000 R09: 0000000000000000 [ 1851.217185][T27544] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1851.217201][T27544] R13: 00007f2976a86038 R14: 00007f2976a85fa0 R15: 00007ffc73dcbb78 [ 1851.217237][T27544] [ 1851.817272][T27561] lo: entered promiscuous mode [ 1851.817303][T27561] lo: entered allmulticast mode [ 1851.838435][T27561] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5680'. [ 1851.904940][T27321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.630292][T27587] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1853.963260][T27321] veth0_vlan: entered promiscuous mode [ 1854.009071][T27321] veth1_vlan: entered promiscuous mode [ 1854.126517][T27321] veth0_macvtap: entered promiscuous mode [ 1854.144650][T27321] veth1_macvtap: entered promiscuous mode [ 1854.246803][T27321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.272061][T27321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.318755][ T33] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.508776][T22817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.615061][T27603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1854.615214][T27603] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1854.776701][T22817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.791975][T22817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.071248][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 1856.351034][T27603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1856.351387][T27603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1856.805345][T27603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1856.805542][T27603] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1856.907609][T27603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1856.907777][T27603] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1856.981111][T27603] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1856.981706][T27603] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1857.294480][T27603] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1857.836244][T27085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1858.069975][T27085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1858.091445][T27085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1858.095536][T27085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1858.096429][T27085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1858.216126][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.244498][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 1858.271762][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.271783][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.877078][ T5599] Bluetooth: hci4: command 0x0401 tx timeout [ 1859.189580][T27085] Bluetooth: hci3: command 0x0406 tx timeout [ 1859.189760][T27085] Bluetooth: hci0: command 0x0c1a tx timeout [ 1859.189794][T27085] Bluetooth: hci5: command 0x0c1a tx timeout [ 1859.368604][T14132] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1859.370284][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.370307][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.522475][T14132] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 1859.524323][T14132] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.524360][T14132] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1859.524398][T14132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.601530][T14132] usb 3-1: config 0 descriptor?? [ 1859.625360][T27669] netlink: 'syz.3.5718': attribute type 1 has an invalid length. [ 1859.944443][T27675] FAULT_INJECTION: forcing a failure. [ 1859.944443][T27675] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.944490][T27675] CPU: 0 UID: 0 PID: 27675 Comm: syz.1.5721 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1859.944530][T27675] Tainted: [L]=SOFTLOCKUP [ 1859.944540][T27675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1859.944556][T27675] Call Trace: [ 1859.944566][T27675] [ 1859.944579][T27675] dump_stack_lvl+0xe8/0x150 [ 1859.944621][T27675] should_fail_ex+0x46b/0x600 [ 1859.944661][T27675] should_failslab+0xa8/0x100 [ 1859.944701][T27675] __kmalloc_noprof+0xfb/0x790 [ 1859.944734][T27675] ? __register_sysctl_table+0xc02/0x1370 [ 1859.944765][T27675] ? __register_sysctl_table+0xc02/0x1370 [ 1859.944806][T27675] __register_sysctl_table+0xc02/0x1370 [ 1859.944850][T27675] setup_mq_sysctls+0x430/0x4b0 [ 1859.944888][T27675] copy_ipcs+0x47f/0x6c0 [ 1859.944925][T27675] create_new_namespaces+0x210/0x6b0 [ 1859.944962][T27675] ? security_capable+0x7e/0x2c0 [ 1859.945004][T27675] unshare_nsproxy_namespaces+0x149/0x190 [ 1859.945042][T27675] ksys_unshare+0x5a7/0x950 [ 1859.945085][T27675] ? __pfx_ksys_unshare+0x10/0x10 [ 1859.945122][T27675] ? rcu_is_watching+0x16/0xb0 [ 1859.945170][T27675] __x64_sys_unshare+0x38/0x50 [ 1859.945210][T27675] do_syscall_64+0x166/0x520 [ 1859.945243][T27675] ? trace_irq_disable+0x3b/0x140 [ 1859.945275][T27675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.945301][T27675] ? clear_bhb_loop+0x70/0xc0 [ 1859.945331][T27675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.945355][T27675] RIP: 0033:0x7fd36941e159 [ 1859.945379][T27675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.945401][T27675] RSP: 002b:00007fd367676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1859.945438][T27675] RAX: ffffffffffffffda RBX: 00007fd3696a5fa0 RCX: 00007fd36941e159 [ 1859.945457][T27675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 1859.945474][T27675] RBP: 00007fd3694b503b R08: 0000000000000000 R09: 0000000000000000 [ 1859.945490][T27675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.945505][T27675] R13: 00007fd3696a6038 R14: 00007fd3696a5fa0 R15: 00007ffe3d0b7448 [ 1859.945544][T27675] [ 1859.947085][T27675] sysctl could not get directory: /fs/mqueue -12 [ 1860.128970][T14132] usbhid 3-1:0.0: can't add hid device: -71 [ 1860.129102][T14132] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1860.216054][T14132] usb 3-1: USB disconnect, device number 88 [ 1860.334163][T27682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1860.491740][T27688] tipc: Started in network mode [ 1860.491779][T27688] tipc: Node identity 1000001, cluster identity 4369 [ 1860.491795][T27688] tipc: Node number set to 16777217 [ 1860.864495][T27693] tipc: New replicast peer: 127.0.0.1 [ 1860.878106][T27693] tipc: Enabled bearer , priority 10 [ 1861.513964][ T5599] Bluetooth: hci2: command tx timeout [ 1861.514506][ T5599] Bluetooth: hci4: command 0x0401 tx timeout [ 1861.514540][ T5599] Bluetooth: hci5: command 0x0c1a tx timeout [ 1861.514568][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout [ 1861.514596][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 1863.602705][T27085] Bluetooth: hci5: command 0x0c1a tx timeout [ 1863.602750][T27085] Bluetooth: hci2: command tx timeout [ 1863.669618][T27641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.669883][T27641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.670105][T27641] bridge_slave_0: entered allmulticast mode [ 1863.673216][T27641] bridge_slave_0: entered promiscuous mode [ 1863.843132][T27641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.843278][T27641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.843503][T27641] bridge_slave_1: entered allmulticast mode [ 1863.846663][T27641] bridge_slave_1: entered promiscuous mode [ 1864.507119][T27641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.534949][T27641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.604338][T27641] team0: Port device team_slave_0 added [ 1864.613994][T27641] team0: Port device team_slave_1 added [ 1864.886646][T27641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.886668][T27641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.886700][T27641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.939995][T27641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.940014][T27641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.940047][T27641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1865.309726][T27641] hsr_slave_0: entered promiscuous mode [ 1865.312825][T27641] hsr_slave_1: entered promiscuous mode [ 1865.313812][T27641] debugfs: 'hsr0' already exists in 'hsr' [ 1865.313840][T27641] Cannot create hsr debugfs directory [ 1865.639969][T27770] FAULT_INJECTION: forcing a failure. [ 1865.639969][T27770] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.640000][T27770] CPU: 1 UID: 0 PID: 27770 Comm: syz.3.5751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1865.640025][T27770] Tainted: [L]=SOFTLOCKUP [ 1865.640031][T27770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1865.640042][T27770] Call Trace: [ 1865.640049][T27770] [ 1865.640057][T27770] dump_stack_lvl+0xe8/0x150 [ 1865.640087][T27770] should_fail_ex+0x46b/0x600 [ 1865.640114][T27770] should_failslab+0xa8/0x100 [ 1865.640170][T27770] ? vm_area_dup+0x28/0x750 [ 1865.640213][T27770] kmem_cache_alloc_noprof+0x9e/0x690 [ 1865.640248][T27770] ? vm_area_dup+0x28/0x750 [ 1865.640287][T27770] vm_area_dup+0x28/0x750 [ 1865.640310][T27770] ? __split_vma+0x1b7/0xa00 [ 1865.640330][T27770] __split_vma+0x1d7/0xa00 [ 1865.640353][T27770] ? finish_task_switch+0x40e/0xc60 [ 1865.640373][T27770] ? lockdep_hardirqs_on+0x7b/0x110 [ 1865.640399][T27770] ? __pfx___split_vma+0x10/0x10 [ 1865.640423][T27770] ? __lock_acquire+0x747/0x2de0 [ 1865.640453][T27770] vma_modify+0x8b7/0x2060 [ 1865.640492][T27770] vma_modify_flags+0x2a4/0x3c0 [ 1865.640521][T27770] ? __pfx_vma_modify_flags+0x10/0x10 [ 1865.640558][T27770] ? __futex_wait+0x35a/0x410 [ 1865.640588][T27770] mlock_fixup+0x40f/0x940 [ 1865.640612][T27770] ? __pfx_mlock_fixup+0x10/0x10 [ 1865.640632][T27770] ? mas_find+0x6d9/0xcb0 [ 1865.640659][T27770] apply_vma_lock_flags+0x350/0x4a0 [ 1865.640682][T27770] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1865.640717][T27770] ? do_mlock+0x169/0x730 [ 1865.640737][T27770] do_mlock+0x54d/0x730 [ 1865.640754][T27770] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1865.640779][T27770] ? __pfx_do_mlock+0x10/0x10 [ 1865.640802][T27770] ? rcu_is_watching+0x16/0xb0 [ 1865.640834][T27770] __x64_sys_mlock+0x77/0xa0 [ 1865.640863][T27770] do_syscall_64+0x166/0x520 [ 1865.640887][T27770] ? trace_irq_disable+0x3b/0x140 [ 1865.640909][T27770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.640927][T27770] ? clear_bhb_loop+0x70/0xc0 [ 1865.640948][T27770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.640965][T27770] RIP: 0033:0x7f880e28e159 [ 1865.640981][T27770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.640996][T27770] RSP: 002b:00007f880c4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1865.641014][T27770] RAX: ffffffffffffffda RBX: 00007f880e515fa0 RCX: 00007f880e28e159 [ 1865.641028][T27770] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 1865.641039][T27770] RBP: 00007f880e32503b R08: 0000000000000000 R09: 0000000000000000 [ 1865.641050][T27770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1865.641061][T27770] R13: 00007f880e516038 R14: 00007f880e515fa0 R15: 00007ffc021acb28 [ 1865.641087][T27770] [ 1865.848117][ T5599] Bluetooth: hci2: command tx timeout [ 1866.463577][ T38] audit: type=1326 audit(2000000048.790:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27762 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36941e159 code=0x7fc00000 [ 1867.896975][T27791] batman_adv: batadv0: Adding interface: syzkaller0 [ 1867.896997][T27791] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1867.897036][T27791] batman_adv: batadv0: Interface activated: syzkaller0 [ 1867.928523][ T5599] Bluetooth: hci2: command tx timeout [ 1868.209821][T27786] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1868.473872][T27786] batman_adv: batadv0: Removing interface: syzkaller0 [ 1868.485607][T25122] NFSD: Failed to start, no listeners configured. [ 1869.178369][T27837] FAULT_INJECTION: forcing a failure. [ 1869.178369][T27837] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1869.178405][T27837] CPU: 1 UID: 0 PID: 27837 Comm: syz.6.5766 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1869.178432][T27837] Tainted: [L]=SOFTLOCKUP [ 1869.178440][T27837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1869.178452][T27837] Call Trace: [ 1869.178466][T27837] [ 1869.178476][T27837] dump_stack_lvl+0xe8/0x150 [ 1869.178514][T27837] should_fail_ex+0x46b/0x600 [ 1869.178551][T27837] get_futex_key+0x1b4/0x1580 [ 1869.178596][T27837] ? __pfx_get_futex_key+0x10/0x10 [ 1869.178628][T27837] ? set_fd_set+0x70/0xa0 [ 1869.178662][T27837] ? core_sys_select+0x6c9/0xb40 [ 1869.178702][T27837] futex_wake+0x119/0x600 [ 1869.178736][T27837] ? __pfx_futex_wake+0x10/0x10 [ 1869.178772][T27837] ? __asan_memset+0x22/0x50 [ 1869.178802][T27837] ? poll_select_finish+0x525/0x5e0 [ 1869.178839][T27837] do_futex+0x458/0x4e0 [ 1869.178868][T27837] ? __pfx_do_futex+0x10/0x10 [ 1869.178891][T27837] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1869.178926][T27837] __se_sys_futex+0x3a8/0x450 [ 1869.178958][T27837] ? __pfx___se_sys_futex+0x10/0x10 [ 1869.178992][T27837] ? __x64_sys_futex+0x21/0xf0 [ 1869.179020][T27837] do_syscall_64+0x166/0x520 [ 1869.179053][T27837] ? trace_irq_disable+0x3b/0x140 [ 1869.179083][T27837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.179108][T27837] ? clear_bhb_loop+0x70/0xc0 [ 1869.179138][T27837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.179162][T27837] RIP: 0033:0x7f4e4d42e159 [ 1869.179185][T27837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.179206][T27837] RSP: 002b:00007f4e4b6860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1869.179233][T27837] RAX: ffffffffffffffda RBX: 00007f4e4d6b5fa8 RCX: 00007f4e4d42e159 [ 1869.179252][T27837] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e4d6b5fac [ 1869.179269][T27837] RBP: 00007f4e4d6b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1869.179298][T27837] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1869.179313][T27837] R13: 00007f4e4d6b6038 R14: 00007fff01752ec0 R15: 00007fff01752fa8 [ 1869.179350][T27837] [ 1873.141779][T27915] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1874.007253][T27938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5789'. [ 1874.320106][T27943] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.5789'. [ 1874.516748][T27956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1874.516786][T27956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1874.808954][T27956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1874.808994][T27956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1874.898495][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1874.910206][ T1431] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1874.910257][ T1431] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1874.910300][ T1431] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1875.450330][T27963] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5795'. [ 1875.472896][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1875.472921][T27973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1875.616505][T27970] bond1: option mode: unable to set because the bond device has slaves [ 1875.779392][T27973] bond1: (slave bond0): Releasing active interface [ 1875.919930][T27979] loop7: detected capacity change from 0 to 16384 [ 1875.976100][T27979] netlink: 'syz.1.5799': attribute type 13 has an invalid length. [ 1876.038120][T27982] loop7: detected capacity change from 16384 to 0 [ 1876.199996][T27992] lo: left promiscuous mode [ 1876.200026][T27992] lo: left allmulticast mode [ 1876.530482][T27641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1876.565316][T27641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1876.567133][T27641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1876.707000][T27641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1877.320146][T27641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1877.363641][T27641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1877.366868][T27641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1877.469513][T27641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1877.766763][T27641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.822085][T27641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.842620][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.842833][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.866573][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.867892][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.803723][T27641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.963504][T27641] veth0_vlan: entered promiscuous mode [ 1878.983977][T27641] veth1_vlan: entered promiscuous mode [ 1879.045261][T27641] veth0_macvtap: entered promiscuous mode [ 1879.061719][T27641] veth1_macvtap: entered promiscuous mode [ 1879.165304][T27641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1879.192099][T27641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1879.732312][ T1431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.734225][ T1431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.137199][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.137225][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.158780][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.158831][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.330440][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.330464][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.109396][T15697] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 1210 sec [ 1919.433612][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1959.430029][T15697] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 1270 sec [ 1980.870574][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.948409][ T5599] Bluetooth: hci2: command 0x0406 tx timeout [ 2003.908717][ T39] INFO: task syz.4.5618:27393 blocked for more than 143 seconds. [ 2003.908752][ T39] Tainted: G L syzkaller #0 [ 2003.908770][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2003.908779][ T39] task:syz.4.5618 state:D stack:27784 pid:27393 tgid:27391 ppid:21754 task_flags:0x400140 flags:0x00080002 [ 2003.908849][ T39] Call Trace: [ 2003.908856][ T39] [ 2003.908868][ T39] __schedule+0x16d9/0x5700 [ 2003.908917][ T39] ? __pfx___schedule+0x10/0x10 [ 2003.908937][ T39] ? lock_acquire+0x115/0x350 [ 2003.908967][ T39] ? schedule+0x90/0x2b0 [ 2003.908991][ T39] schedule+0x164/0x2b0 [ 2003.909014][ T39] cgroup_lock_and_drain_offline+0x51a/0x650 [ 2003.909046][ T39] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 2003.909081][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2003.909112][ T39] cgroup_kn_lock_live+0x120/0x230 [ 2003.909152][ T39] cgroup_subtree_control_write+0x4b5/0x1080 [ 2003.909197][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2003.909240][ T39] ? kernfs_root+0x1c/0x230 [ 2003.909259][ T39] ? kernfs_root+0x1c/0x230 [ 2003.909279][ T39] ? kernfs_root+0x1ea/0x230 [ 2003.909300][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2003.909321][ T39] cgroup_file_write+0x331/0x8f0 [ 2003.909366][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 2003.909385][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2003.909443][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 2003.909460][ T39] kernfs_fop_write_iter+0x3a5/0x540 [ 2003.909495][ T39] vfs_write+0x61e/0xbb0 [ 2003.909522][ T39] ? __pfx_vfs_write+0x10/0x10 [ 2003.909548][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2003.909575][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 2003.909598][ T39] ? fdget_pos+0x252/0x320 [ 2003.909622][ T39] ksys_write+0x156/0x270 [ 2003.909647][ T39] ? __pfx_ksys_write+0x10/0x10 [ 2003.909680][ T39] do_syscall_64+0x166/0x520 [ 2003.909703][ T39] ? trace_irq_disable+0x3b/0x140 [ 2003.909725][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.909742][ T39] ? clear_bhb_loop+0x70/0xc0 [ 2003.909794][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.909820][ T39] RIP: 0033:0x7f716f0ae159 [ 2003.909836][ T39] RSP: 002b:00007f716d306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2003.909853][ T39] RAX: ffffffffffffffda RBX: 00007f716f335fa0 RCX: 00007f716f0ae159 [ 2003.909866][ T39] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 2003.909889][ T39] RBP: 00007f716f14503b R08: 0000000000000000 R09: 0000000000000000 [ 2003.909900][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2003.909936][ T39] R13: 00007f716f336038 R14: 00007f716f335fa0 R15: 00007ffe1a0d0228 [ 2003.909962][ T39] [ 2003.909996][ T39] [ 2003.909996][ T39] Showing all locks held in the system: [ 2003.910009][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 2003.910022][ T39] #0: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2003.910086][ T39] locks held by getty/17842: 2, on CPU#1: [ 2003.910097][ T39] #0: ffff888028a880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2003.910142][ T39] #1: ffffc900043982e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 2003.910194][ T39] locks held by syz.9.4897/25122: 3, on CPU#1: [ 2003.910206][ T39] #0: ffff888033ef0b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 2003.910245][ T39] #1: ffff88803479c510 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2003.910289][ T39] #2: ffffffff8e4f8398 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 2003.910329][ T39] locks held by syz.4.5618/27393: 3, on CPU#1: [ 2003.910340][ T39] #0: ffff888037f48528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 2003.910384][ T39] #1: ffff888036bbe510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2003.910427][ T39] #2: ffff88803ba5d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2003.910476][ T39] [ 2003.910481][ T39] ============================================= [ 2003.910481][ T39] [ 2003.910489][ T39] NMI backtrace for cpu 0 [ 2003.910503][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2003.910524][ T39] Tainted: [L]=SOFTLOCKUP [ 2003.910530][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2003.910540][ T39] Call Trace: [ 2003.910546][ T39] [ 2003.910553][ T39] dump_stack_lvl+0xe8/0x150 [ 2003.910579][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 2003.910597][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2003.910627][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2003.910649][ T39] sys_info+0x135/0x170 [ 2003.910664][ T39] watchdog+0xfd7/0x1030 [ 2003.910691][ T39] ? watchdog+0x1c7/0x1030 [ 2003.910716][ T39] kthread+0x38b/0x470 [ 2003.910733][ T39] ? __pfx_watchdog+0x10/0x10 [ 2003.910752][ T39] ? __pfx_kthread+0x10/0x10 [ 2003.910769][ T39] ret_from_fork+0x514/0xb70 [ 2003.910788][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2003.910804][ T39] ? __switch_to+0xc89/0x1420 [ 2003.910830][ T39] ? __pfx_kthread+0x10/0x10 [ 2003.910847][ T39] ret_from_fork_asm+0x1a/0x30 [ 2003.910873][ T39] [ 2003.910880][ T39] Sending NMI from CPU 0 to CPUs 1: [ 2003.910924][ C1] NMI backtrace for cpu 1 [ 2003.910942][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2003.910966][ C1] Tainted: [L]=SOFTLOCKUP [ 2003.910973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2003.910984][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2003.911011][ C1] Code: bc 61 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 dc 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2003.911028][ C1] RSP: 0018:ffffc900001d7e40 EFLAGS: 00000246 [ 2003.911044][ C1] RAX: 0000000000a9fd55 RBX: ffffffff819a8000 RCX: 8000000000000001 [ 2003.911058][ C1] RDX: 0000000000000001 RSI: ffffffff8d8cb770 RDI: ffffffff8bcc2a80 [ 2003.911072][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8733e9b R09: 1ffff110170e67d3 [ 2003.911086][ C1] R10: dffffc0000000000 R11: ffffed10170e67d4 R12: 0000000000000000 [ 2003.911099][ C1] R13: 1ffff110039dc000 R14: 1ffff9200003afd0 R15: dffffc0000000000 [ 2003.911114][ C1] FS: 0000000000000000(0000) GS:ffff888125cce000(0000) knlGS:0000000000000000 [ 2003.911131][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2003.911144][ C1] CR2: 0000564dd1d0e660 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 2003.911161][ C1] Call Trace: [ 2003.911169][ C1] [ 2003.911176][ C1] default_idle+0x9/0x20 [ 2003.911202][ C1] default_idle_call+0x72/0xb0 [ 2003.911231][ C1] do_idle+0x2e0/0x540 [ 2003.911256][ C1] ? __pfx_do_idle+0x10/0x10 [ 2003.911285][ C1] cpu_startup_entry+0x43/0x60 [ 2003.911309][ C1] start_secondary+0x101/0x110 [ 2003.911356][ C1] common_startup_64+0x13e/0x157 [ 2003.911391][ C1] [ 2003.911932][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 2004.590150][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2004.601374][ T39] Tainted: [L]=SOFTLOCKUP [ 2004.605722][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2004.615802][ T39] Call Trace: [ 2004.619111][ T39] [ 2004.622088][ T39] vpanic+0x56d/0xa60 [ 2004.626116][ T39] ? __pfx_vpanic+0x10/0x10 [ 2004.630675][ T39] ? console_srcu_read_unlock+0x3a/0x60 [ 2004.636267][ T39] panic+0xc5/0xd0 [ 2004.640011][ T39] ? __pfx_panic+0x10/0x10 [ 2004.644463][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 2004.649514][ T39] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 2004.655694][ T39] watchdog+0x1030/0x1030 [ 2004.660060][ T39] ? watchdog+0x1c7/0x1030 [ 2004.664523][ T39] kthread+0x38b/0x470 [ 2004.668623][ T39] ? __pfx_watchdog+0x10/0x10 [ 2004.673342][ T39] ? __pfx_kthread+0x10/0x10 [ 2004.678136][ T39] ret_from_fork+0x514/0xb70 [ 2004.682793][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2004.688075][ T39] ? __switch_to+0xc89/0x1420 [ 2004.692787][ T39] ? __pfx_kthread+0x10/0x10 [ 2004.697401][ T39] ret_from_fork_asm+0x1a/0x30 [ 2004.702208][ T39] [ 2004.705841][ T39] Kernel Offset: disabled [ 2004.710183][ T39] Rebooting in 86400 seconds..