last executing test programs: 7m43.856270219s ago: executing program 1 (id=740): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 7m43.22425422s ago: executing program 1 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) write(r0, &(0x7f0000000000)='30', 0x2) unshare(0x40000000) 7m41.93587026s ago: executing program 1 (id=751): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='veno', 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9273f6a", 0x4, 0x4044880, 0x0, 0x0) 7m39.472752327s ago: executing program 1 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) 7m38.995458044s ago: executing program 1 (id=764): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r1) 7m36.252416852s ago: executing program 1 (id=769): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 7m35.490132693s ago: executing program 32 (id=769): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 5m59.94897558s ago: executing program 3 (id=1138): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0xec, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x2, '\x00', 0xfd}, @in=@multicast2}, {@in=@empty, 0x0, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10}}, 0xec}}, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r4, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 5m59.657159742s ago: executing program 3 (id=1139): ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) 5m58.660360343s ago: executing program 3 (id=1142): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 5m58.415555781s ago: executing program 3 (id=1143): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m58.186629741s ago: executing program 3 (id=1144): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m52.29246991s ago: executing program 3 (id=1163): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 5m51.835304827s ago: executing program 33 (id=1163): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3m16.790720062s ago: executing program 4 (id=1839): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 3m15.885101389s ago: executing program 4 (id=1841): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 3m15.101270228s ago: executing program 4 (id=1843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000020a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m13.116764672s ago: executing program 4 (id=1853): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @GTPA_FAMILY={0x5, 0xd, 0x1d}]}, 0x34}}, 0x20000000) 3m12.214593167s ago: executing program 4 (id=1857): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc880, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 3m11.229028719s ago: executing program 4 (id=1859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2}, 0x81}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/35, 0x23}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000002500), 0x0, &(0x7f0000002580)=""/170, 0xaa}, 0xb479}, {{&(0x7f0000002640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/116, 0x74}, {&(0x7f0000002740)=""/63, 0x3f}], 0x2}, 0x3}, {{&(0x7f00000027c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002900)=""/90, 0x5a}], 0x1, &(0x7f00000029c0)=""/80, 0x50}, 0x12}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002ac0)=""/74, 0x4a}, {&(0x7f0000002b40)=""/223, 0xdf}, {&(0x7f0000002c80)=""/163, 0xa3}, {&(0x7f0000002d40)=""/8, 0x8}, {0x0}, {&(0x7f0000002e00)=""/105, 0x69}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x7, &(0x7f0000003f00)=""/226, 0xe2}, 0x80000001}, {{&(0x7f0000004000)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/130, 0x82}, {&(0x7f0000004140)=""/122, 0x7a}, {&(0x7f00000041c0)=""/8, 0x8}, {&(0x7f0000004200)=""/162, 0xa2}], 0x4, &(0x7f0000004300)=""/31, 0x1f}, 0x8}, {{&(0x7f0000004340)=@phonet, 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/250, 0xfa}, {0x0}, {&(0x7f0000004600)=""/226, 0xe2}], 0x3, &(0x7f0000004740)=""/90, 0x5a}, 0x4}], 0x8, 0x2000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") 3m10.209917409s ago: executing program 2 (id=1865): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r0, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x3031}, 0x0) syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x100019}, 0x0, 0x0, 0x0) 3m8.475357362s ago: executing program 2 (id=1868): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m4.939095428s ago: executing program 2 (id=1874): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9361, 0x0) 3m1.889502525s ago: executing program 2 (id=1879): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x19b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m0.587278877s ago: executing program 2 (id=1882): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40000001, 0x0) read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020) 2m57.736578218s ago: executing program 2 (id=1885): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m54.443844395s ago: executing program 34 (id=1859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2}, 0x81}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/35, 0x23}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000002500), 0x0, &(0x7f0000002580)=""/170, 0xaa}, 0xb479}, {{&(0x7f0000002640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/116, 0x74}, {&(0x7f0000002740)=""/63, 0x3f}], 0x2}, 0x3}, {{&(0x7f00000027c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002900)=""/90, 0x5a}], 0x1, &(0x7f00000029c0)=""/80, 0x50}, 0x12}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002ac0)=""/74, 0x4a}, {&(0x7f0000002b40)=""/223, 0xdf}, {&(0x7f0000002c80)=""/163, 0xa3}, {&(0x7f0000002d40)=""/8, 0x8}, {0x0}, {&(0x7f0000002e00)=""/105, 0x69}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x7, &(0x7f0000003f00)=""/226, 0xe2}, 0x80000001}, {{&(0x7f0000004000)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/130, 0x82}, {&(0x7f0000004140)=""/122, 0x7a}, {&(0x7f00000041c0)=""/8, 0x8}, {&(0x7f0000004200)=""/162, 0xa2}], 0x4, &(0x7f0000004300)=""/31, 0x1f}, 0x8}, {{&(0x7f0000004340)=@phonet, 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/250, 0xfa}, {0x0}, {&(0x7f0000004600)=""/226, 0xe2}], 0x3, &(0x7f0000004740)=""/90, 0x5a}, 0x4}], 0x8, 0x2000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") 2m45.053974583s ago: executing program 0 (id=1901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000003a03003e00ecffffff940200000000000040000000000000004d02000000000000000000000000380001"], 0x53) close(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file1\x00', 0x4000523) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m44.174998281s ago: executing program 0 (id=1903): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m41.672638523s ago: executing program 35 (id=1885): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m41.54329081s ago: executing program 0 (id=1908): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1}, 0x1fd}], 0x1, 0x20022, 0x0) 2m39.400301989s ago: executing program 0 (id=1910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 2m38.757704544s ago: executing program 0 (id=1912): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, 0x0, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x80131, 0x2, 0x40021c, 0x0, r0}}], 0x16, &(0x7f0000001540)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2m35.720918804s ago: executing program 0 (id=1915): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x810) 2m29.098628613s ago: executing program 6 (id=1920): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x781dcd1053ba2c59, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8ae257a062cc3564) 2m24.558330338s ago: executing program 6 (id=1922): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0xb7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 2m21.641157238s ago: executing program 6 (id=1924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_VERSION(r0, 0xc0046209, &(0x7f0000001040)) r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs/binder_logs/state\x00', 0x0, 0x0) read(r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000020c0)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) read(r2, &(0x7f0000002100)=""/4096, 0x1000) r3 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000003100)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) read(r3, &(0x7f0000003140)=""/16, 0x10) 2m20.379363087s ago: executing program 36 (id=1915): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x810) 2m20.331800488s ago: executing program 6 (id=1929): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) openat(r2, 0x0, 0x900, 0x6a) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.881611309s ago: executing program 6 (id=1930): memfd_secret(0x80000) socket(0x10, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES8], 0x44}}, 0x2000800) 2m16.814255404s ago: executing program 6 (id=1932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x58000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x100000003, 0xffffffffffffffff, 0x7fff, 0xffffffff, 0xd, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff801, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6000000000, 0xffffffffffffffff, 0x1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x30f3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 2m0.473313578s ago: executing program 37 (id=1932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x58000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x100000003, 0xffffffffffffffff, 0x7fff, 0xffffffff, 0xd, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff801, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6000000000, 0xffffffffffffffff, 0x1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x30f3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 33.287761412s ago: executing program 5 (id=1967): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000011c0)={0xf, 0xfffffffffffffffa, 0x8, 0x8, 0x7, 0x3, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0) 30.75800838s ago: executing program 5 (id=1968): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) 27.397515789s ago: executing program 5 (id=1969): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x810c9365, 0x0) 24.899953501s ago: executing program 5 (id=1970): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 17.135139338s ago: executing program 5 (id=1971): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) chroot(&(0x7f0000000100)='./file0\x00') 15.496100122s ago: executing program 5 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112f33445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 0s ago: executing program 38 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112f33445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): ce 0, times 0 [ 342.695377][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.4.1140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.695412][ T9588] Tainted: [L]=SOFTLOCKUP [ 342.695421][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 342.695436][ T9588] Call Trace: [ 342.695445][ T9588] [ 342.695456][ T9588] dump_stack_lvl+0xe8/0x150 [ 342.695499][ T9588] should_fail_ex+0x46b/0x600 [ 342.695540][ T9588] prepare_alloc_pages+0x223/0x650 [ 342.695584][ T9588] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 342.695628][ T9588] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.695677][ T9588] ? __pfx_policy_nodemask+0x10/0x10 [ 342.695701][ T9588] ? filemap_get_entry+0x374/0x3f0 [ 342.695730][ T9588] ? filemap_get_entry+0xcd/0x3f0 [ 342.695756][ T9588] ? __pfx_filemap_get_entry+0x10/0x10 [ 342.695788][ T9588] alloc_pages_mpol+0xd4/0x280 [ 342.695820][ T9588] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 342.695851][ T9588] shmem_get_folio_gfp+0x6ee/0x1c40 [ 342.695905][ T9588] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 342.695936][ T9588] ? folio_mapping+0x16f/0x1f0 [ 342.695974][ T9588] shmem_write_begin+0x166/0x320 [ 342.696015][ T9588] generic_perform_write+0x2ad/0x8b0 [ 342.696070][ T9588] ? __pfx_generic_perform_write+0x10/0x10 [ 342.696107][ T9588] ? mnt_put_write_access_file+0xc9/0x100 [ 342.696144][ T9588] ? file_update_time_flags+0x3b1/0x450 [ 342.696184][ T9588] shmem_file_write_iter+0xfb/0x120 [ 342.696212][ T9588] do_iter_readv_writev+0x624/0x8d0 [ 342.696251][ T9588] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 342.696305][ T9588] vfs_writev+0x34c/0x990 [ 342.696339][ T9588] ? __pfx_vfs_writev+0x10/0x10 [ 342.696380][ T9588] ? __fget_files+0x2a/0x420 [ 342.696414][ T9588] ? __fget_files+0x3a8/0x420 [ 342.696440][ T9588] ? __fget_files+0x2a/0x420 [ 342.696478][ T9588] __se_sys_pwritev2+0x17a/0x2a0 [ 342.696515][ T9588] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 342.696556][ T9588] ? __x64_sys_pwritev2+0x20/0xc0 [ 342.696594][ T9588] do_syscall_64+0x166/0x520 [ 342.696621][ T9588] ? trace_irq_disable+0x3b/0x140 [ 342.696653][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.696678][ T9588] ? clear_bhb_loop+0x70/0xc0 [ 342.696708][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.696733][ T9588] RIP: 0033:0x7fc42629e199 [ 342.696756][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.696777][ T9588] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 342.696805][ T9588] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 342.696823][ T9588] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000004 [ 342.696839][ T9588] RBP: 00007fc4263358e0 R08: 0000000000000000 R09: 0000000000000022 [ 342.696855][ T9588] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 342.696869][ T9588] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 342.696908][ T9588] [ 343.225528][ T9591] netlink: 'syz.4.1141': attribute type 39 has an invalid length. [ 343.641696][ T6358] bridge_slave_1: left allmulticast mode [ 343.641738][ T6358] bridge_slave_1: left promiscuous mode [ 343.642000][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.904699][ T9604] sctp: [Deprecated]: syz.0.1145 (pid 9604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.904699][ T9604] Use struct sctp_sack_info instead [ 343.987263][ T6358] bridge_slave_0: left allmulticast mode [ 343.987307][ T6358] bridge_slave_0: left promiscuous mode [ 343.987591][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.235097][ T9611] mtrr: base(0x105001e00000020000) is not aligned on a size(0x70bd2b000) boundary [ 346.586677][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.702865][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.746931][ T6358] bond0 (unregistering): Released all slaves [ 347.259026][ T5597] bond0: (slave syz_tun): Releasing backup interface [ 347.351270][ T5250] veth1_vlan: entered promiscuous mode [ 348.631285][ T5713] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 348.796435][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.796505][ T5713] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 348.799413][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.832335][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 348.832368][ T5713] usb 5-1: Product: syz [ 348.832384][ T5713] usb 5-1: Manufacturer: syz [ 349.080103][ T5713] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 349.436708][ T5713] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 349.466671][ T5713] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 349.466767][ T5713] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 349.506531][ T5713] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 349.588824][ T5713] usb 5-1: USB disconnect, device number 8 [ 349.596795][ T6358] hsr_slave_0: left promiscuous mode [ 349.751162][ T6358] hsr_slave_1: left promiscuous mode [ 349.758338][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.792276][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.598800][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.698131][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.700367][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.741930][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.743836][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.451304][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 351.546400][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 352.041360][ T9684] lo: entered promiscuous mode [ 352.054169][ T9684] tunl0: entered promiscuous mode [ 352.067718][ T9684] gre0: entered promiscuous mode [ 352.139409][ T9684] gretap0: entered promiscuous mode [ 352.222215][ T9684] erspan0: entered promiscuous mode [ 352.245713][ T9684] ip_vti0: entered promiscuous mode [ 352.258410][ T9684] ip6_vti0: entered promiscuous mode [ 352.276569][ T9684] sit0: entered promiscuous mode [ 352.284406][ T9684] ip6tnl0: entered promiscuous mode [ 352.294246][ T9684] ip6gre0: entered promiscuous mode [ 352.331671][ T9684] syz_tun: entered promiscuous mode [ 352.352033][ T9684] ip6gretap0: entered promiscuous mode [ 352.369642][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.379944][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.399406][ T9684] bridge0: entered promiscuous mode [ 352.425608][ T9684] vcan0: entered promiscuous mode [ 352.450938][ T9684] bond0: entered promiscuous mode [ 352.450968][ T9684] bond_slave_0: entered promiscuous mode [ 352.451235][ T9684] bond_slave_1: entered promiscuous mode [ 352.456760][ T9684] team0: entered promiscuous mode [ 352.456786][ T9684] team_slave_0: entered promiscuous mode [ 352.457130][ T9684] team_slave_1: entered promiscuous mode [ 352.463877][ T9684] dummy0: entered promiscuous mode [ 352.530828][ T9684] nlmon0: entered promiscuous mode [ 352.534115][ T9684] batadv0: entered promiscuous mode [ 352.549514][ T9684] veth0: entered promiscuous mode [ 352.560221][ T9684] veth1: entered promiscuous mode [ 352.591834][ T9684] wg0: entered promiscuous mode [ 352.635848][ T9684] wg1: entered promiscuous mode [ 352.671176][ T9684] wg2: entered promiscuous mode [ 352.676971][ T9684] veth0_to_bridge: entered promiscuous mode [ 352.701568][ T9684] veth1_to_bridge: entered promiscuous mode [ 352.718293][ T9684] veth0_to_bond: entered promiscuous mode [ 352.745574][ T9684] veth1_to_bond: entered promiscuous mode [ 352.749120][ T9684] veth0_to_team: entered promiscuous mode [ 352.774498][ T9684] veth1_to_team: entered promiscuous mode [ 352.778949][ T9684] veth0_to_batadv: entered promiscuous mode [ 352.801749][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.840879][ T9684] batadv_slave_0: entered promiscuous mode [ 352.862567][ T9684] veth1_to_batadv: entered promiscuous mode [ 352.869887][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.869961][ T9684] batadv_slave_1: entered promiscuous mode [ 352.895750][ T9684] xfrm0: entered promiscuous mode [ 352.907205][ T9684] veth0_to_hsr: entered promiscuous mode [ 352.931255][ T9684] veth1_to_hsr: entered promiscuous mode [ 352.980818][ T5605] Bluetooth: hci3: command tx timeout [ 352.982586][ T9684] hsr0: entered promiscuous mode [ 352.989495][ T9684] veth1_virt_wifi: entered promiscuous mode [ 353.013013][ T9684] veth0_virt_wifi: entered promiscuous mode [ 353.019202][ T9684] virt_wifi0: entered promiscuous mode [ 353.067800][ T9684] vlan0: entered promiscuous mode [ 353.085560][ T9684] vlan1: entered promiscuous mode [ 353.162098][ T9684] macvlan0: entered promiscuous mode [ 353.166335][ T9684] ipvlan0: entered promiscuous mode [ 353.166467][ T9684] ipvlan1: entered promiscuous mode [ 353.314438][ T9684] macvtap0: entered promiscuous mode [ 353.319813][ T9684] macsec0: entered promiscuous mode [ 353.335970][ T9684] geneve0: entered promiscuous mode [ 353.411221][ T9684] geneve1: entered promiscuous mode [ 353.480971][ T9684] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 353.551322][ T9684] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 353.640998][ T9684] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 353.730939][ T9684] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 353.834423][ T9684] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 353.925162][ T9684] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 353.930237][ T9684] bond1: entered promiscuous mode [ 353.930256][ T9684] vti0: entered promiscuous mode [ 353.937791][ T9684] vxlan0: entered promiscuous mode [ 353.943213][ T9684] veth2: entered promiscuous mode [ 353.943428][ T9684] veth3: entered promiscuous mode [ 353.990498][ T9684] ipvlan2: entered promiscuous mode [ 354.014111][ T9684] veth0_macvtap.2: entered promiscuous mode [ 354.060124][ T9684] erspan1: entered promiscuous mode [ 354.073431][ T9684] syztnl2: entered promiscuous mode [ 354.073553][ T9684] bond2: entered promiscuous mode [ 354.224438][ T9739] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 354.314163][ T9739] bond3: entered promiscuous mode [ 354.314738][ T9739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.332798][ T6369] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.332839][ T6369] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.334302][ T6366] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.334335][ T6366] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.334378][ T6366] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.334406][ T6366] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.334445][ T6366] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.334474][ T6366] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.868595][ T9739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.868878][ T9739] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 354.868893][ T9739] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 354.902341][ T9739] bond3: (slave ip6gre1): making interface the new active one [ 354.902372][ T9739] ip6gre1: entered promiscuous mode [ 354.904236][ T9739] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 355.060761][ T5605] Bluetooth: hci3: command tx timeout [ 356.049651][ T9774] Invalid auth_tok structure returned from key query [ 356.049674][ T9774] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 356.049689][ T9774] One or more global auth toks could not properly register; rc = [-22] [ 356.049776][ T9774] Error validating options; rc = [-22] [ 357.143924][ T5605] Bluetooth: hci3: command tx timeout [ 357.548115][ T9794] ima: policy update failed [ 357.572714][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 357.572740][ T37] audit: type=1802 audit(1791439034.585:253): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.1181" res=0 errno=0 [ 358.186168][ T9809] FAULT_INJECTION: forcing a failure. [ 358.186168][ T9809] name failslab, interval 1, probability 0, space 0, times 0 [ 358.186211][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.4.1187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.186242][ T9809] Tainted: [L]=SOFTLOCKUP [ 358.186250][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.186263][ T9809] Call Trace: [ 358.186327][ T9809] [ 358.186381][ T9809] dump_stack_lvl+0xe8/0x150 [ 358.186526][ T9809] should_fail_ex+0x46b/0x600 [ 358.186607][ T9809] should_failslab+0xa8/0x100 [ 358.186657][ T9809] __kmalloc_cache_noprof+0xa1/0x680 [ 358.186704][ T9809] ? get_mountpoint+0x2cc/0x510 [ 358.186764][ T9809] ? get_mountpoint+0x2cc/0x510 [ 358.186803][ T9809] get_mountpoint+0x2cc/0x510 [ 358.186839][ T9809] attach_recursive_mnt+0x23b/0x2510 [ 358.186887][ T9809] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 358.186927][ T9809] ? clone_mnt+0x726/0x9b0 [ 358.186960][ T9809] ? graft_tree+0x163/0x1c0 [ 358.186996][ T9809] do_loopback+0x369/0x6c0 [ 358.187021][ T9809] ? security_capable+0x7e/0x2c0 [ 358.187079][ T9809] ? __pfx_do_loopback+0x10/0x10 [ 358.187119][ T9809] ? user_path_at+0xd4/0x160 [ 358.187153][ T9809] __se_sys_mount+0x31d/0x420 [ 358.187187][ T9809] ? __pfx___se_sys_mount+0x10/0x10 [ 358.187223][ T9809] ? __x64_sys_mount+0x20/0xc0 [ 358.187253][ T9809] do_syscall_64+0x166/0x520 [ 358.187367][ T9809] ? trace_irq_disable+0x3b/0x140 [ 358.187427][ T9809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.187469][ T9809] ? clear_bhb_loop+0x70/0xc0 [ 358.187498][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.187520][ T9809] RIP: 0033:0x7fc42629e199 [ 358.187574][ T9809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.187595][ T9809] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.187700][ T9809] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 358.187717][ T9809] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 358.187734][ T9809] RBP: 00007fc4263358e0 R08: 0000000000000000 R09: 0000000000000000 [ 358.187750][ T9809] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 358.187765][ T9809] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 358.187805][ T9809] [ 358.424336][ T6358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.424386][ T6358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.424412][ T6358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 358.820755][ T5602] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 358.936385][ T9018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.990791][ T5602] usb 5-1: Using ep0 maxpacket: 16 [ 358.994513][ T5602] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.996157][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.996194][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.996219][ T5602] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.996264][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.005354][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.022509][ T5602] usb 5-1: config 0 descriptor?? [ 359.234941][ T5605] Bluetooth: hci3: command tx timeout [ 359.508278][ T5602] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 359.508319][ T5602] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 359.508360][ T5602] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 359.508387][ T5602] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 359.508414][ T5602] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 359.649403][ T5602] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input8 [ 359.960223][ T6358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.960265][ T6358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.960295][ T6358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 360.092987][ T5602] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 360.165895][ T5602] usb 5-1: USB disconnect, device number 9 [ 360.329903][ T9018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.403003][ T9840] fido_id[9840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 360.481236][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.723817][ T9018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.725212][ T37] audit: type=1326 audit(1791439037.765:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.725593][ T37] audit: type=1326 audit(1791439037.765:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.726269][ T37] audit: type=1326 audit(1791439037.765:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.726573][ T37] audit: type=1326 audit(1791439037.765:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.726891][ T37] audit: type=1326 audit(1791439037.765:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.727181][ T37] audit: type=1326 audit(1791439037.765:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.727493][ T37] audit: type=1326 audit(1791439037.765:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.727782][ T37] audit: type=1326 audit(1791439037.765:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9842 comm="syz.4.1194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 360.967198][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.985368][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.985537][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.985756][ T9686] bridge_slave_0: entered allmulticast mode [ 360.989351][ T9686] bridge_slave_0: entered promiscuous mode [ 361.013013][ T9018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.054294][ T9018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.577825][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.578058][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.578272][ T9686] bridge_slave_1: entered allmulticast mode [ 361.609417][ T9686] bridge_slave_1: entered promiscuous mode [ 361.872182][ T9857] fuse: fd is not a fuse device [ 361.907169][ T6358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.907198][ T6358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.907215][ T6358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 362.288454][ T9851] syz.4.1197 (9851) used greatest stack depth: 18120 bytes left [ 362.351471][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.382004][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.826467][ T6358] batman_adv: batadv0: Removing interface: macsec1 [ 362.928697][ T6358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.928747][ T6358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.928777][ T6358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.276637][ T9686] team0: Port device team_slave_0 added [ 363.352344][ T9686] team0: Port device team_slave_1 added [ 363.654891][ T9899] /dev/nullb0: Can't lookup blockdev [ 363.693492][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.693514][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.693541][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.766339][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.766361][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.766393][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.877168][ T9196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.094454][ T9196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.146409][ T9196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.300047][ T9196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.436803][ T9196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.506876][ T9196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.549679][ T9686] hsr_slave_0: entered promiscuous mode [ 364.554437][ T9686] hsr_slave_1: entered promiscuous mode [ 364.562411][ T9196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.630142][ T9196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.128869][ T9928] mac80211_hwsim hwsim13 ..ãc¤±: renamed from wlan1 (while UP) [ 365.611728][ T6358] bridge_slave_1: left allmulticast mode [ 365.611758][ T6358] bridge_slave_1: left promiscuous mode [ 365.626205][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.799312][ T6358] bridge_slave_0: left allmulticast mode [ 365.799356][ T6358] bridge_slave_0: left promiscuous mode [ 365.799797][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.350437][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.395053][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.396929][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.426469][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.427803][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.842398][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.945945][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.963733][ T6358] bond0 (unregistering): Released all slaves [ 368.349853][ T9971] fuse: fd is not a fuse device [ 369.019761][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.108656][ T9983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1230'. [ 369.340714][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 369.510768][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 369.511995][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40 [ 369.513664][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 39, changing to 7 [ 369.519948][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.519975][ T9] usb 5-1: Product: syz [ 369.519985][ T9] usb 5-1: Manufacturer: syz [ 369.519994][ T9] usb 5-1: SerialNumber: syz [ 369.630906][ T5605] Bluetooth: hci4: command tx timeout [ 369.991735][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 370.071178][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 370.302502][ T9] usb 5-1: USB disconnect, device number 10 [ 370.790275][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 371.678577][ T9196] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.700810][ T5605] Bluetooth: hci4: command tx timeout [ 371.979988][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.980155][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.187335][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.187490][ T6360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.194864][ T9686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.273664][ T9686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.398442][ T9686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 372.558558][ T37] audit: type=1326 audit(1791439049.595:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.0.1236" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13a769e199 code=0x0 [ 372.674240][ T9686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.687718][ T9686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.735666][ T9686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.940268][ T9686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.123247][ T9686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.744678][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 373.799000][ T5605] Bluetooth: hci4: command tx timeout [ 374.042155][ T6358] hsr_slave_0: left promiscuous mode [ 374.080815][ T6358] hsr_slave_1: left promiscuous mode [ 374.082982][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.083315][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.152599][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.152633][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.278728][ T6358] veth1_macvtap: left promiscuous mode [ 374.279129][ T6358] veth0_macvtap: left promiscuous mode [ 374.279506][ T6358] veth1_vlan: left promiscuous mode [ 374.279714][ T6358] veth0_vlan: left promiscuous mode [ 375.651404][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 375.706598][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 375.861068][ T5605] Bluetooth: hci4: command tx timeout [ 377.750081][T10090] netlink: 'syz.4.1247': attribute type 10 has an invalid length. [ 377.814061][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.014100][T10090] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.177182][T10090] bond0: (slave team0): Enslaving as an active interface with an up link [ 378.560248][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.617809][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.629014][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.663458][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.705812][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.072023][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.072107][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.128979][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.667849][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.668024][ T6349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.112227][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.112357][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.112953][ T9958] bridge_slave_0: entered allmulticast mode [ 380.115614][ T9958] bridge_slave_0: entered promiscuous mode [ 380.178600][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 380.240010][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.240158][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.240294][ T9958] bridge_slave_1: entered allmulticast mode [ 380.249195][ T9958] bridge_slave_1: entered promiscuous mode [ 380.255694][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.255908][ T6349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.762077][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.793843][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.015406][ T5605] Bluetooth: hci5: command tx timeout [ 381.034086][ T9958] team0: Port device team_slave_0 added [ 381.100924][ T9958] team0: Port device team_slave_1 added [ 381.266140][T10147] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 381.509906][T10147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.572088][T10148] bond1: (slave geneve2): making interface the new active one [ 381.597423][T10148] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 381.680440][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.680463][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.680491][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.794156][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.794179][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.794214][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.909601][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 383.070427][ T5605] Bluetooth: hci5: command tx timeout [ 383.074656][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 383.107155][ T9958] hsr_slave_0: entered promiscuous mode [ 383.108714][ T9958] hsr_slave_1: entered promiscuous mode [ 383.109830][ T9958] debugfs: 'hsr0' already exists in 'hsr' [ 383.109859][ T9958] Cannot create hsr debugfs directory [ 384.194473][T10187] netlink: 'syz.4.1261': attribute type 9 has an invalid length. [ 384.194501][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 384.399197][T10187] netlink: 'syz.4.1261': attribute type 9 has an invalid length. [ 384.399224][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 384.885963][ T6358] bridge_slave_1: left allmulticast mode [ 384.886003][ T6358] bridge_slave_1: left promiscuous mode [ 384.886373][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.062055][ T6358] bridge_slave_0: left allmulticast mode [ 385.062084][ T6358] bridge_slave_0: left promiscuous mode [ 385.062338][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.140738][ T5605] Bluetooth: hci5: command tx timeout [ 386.331988][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.340961][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 386.413231][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.472808][ T6358] bond0 (unregistering): Released all slaves [ 386.491470][ T5894] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 386.492812][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.492885][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.492916][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.045326][T10228] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 387.096817][T10229] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 387.245662][ T5605] Bluetooth: hci5: command tx timeout [ 387.515768][ T5894] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -71 [ 387.522445][ T5894] usb 5-1: USB disconnect, device number 11 [ 387.855835][T10237] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 388.304154][T10237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.310187][T10238] team0: left promiscuous mode [ 388.329465][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.339815][T10238] bond4: (slave team0): Enslaving as a backup interface with a down link [ 388.420997][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.710868][ T6358] hsr_slave_0: left promiscuous mode [ 388.732634][ T6358] hsr_slave_1: left promiscuous mode [ 388.734341][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.772720][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.261432][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 389.292506][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 389.554785][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.554954][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.555190][T10098] bridge_slave_0: entered allmulticast mode [ 389.586010][T10098] bridge_slave_0: entered promiscuous mode [ 389.604920][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.605057][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.605277][T10098] bridge_slave_1: entered allmulticast mode [ 389.645582][T10098] bridge_slave_1: entered promiscuous mode [ 389.887282][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.981818][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.270861][T10098] team0: Port device team_slave_0 added [ 390.279829][T10098] team0: Port device team_slave_1 added [ 390.382969][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.382992][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.383022][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.448244][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.448268][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.448298][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.017061][T10098] hsr_slave_0: entered promiscuous mode [ 391.021385][T10098] hsr_slave_1: entered promiscuous mode [ 391.022438][T10098] debugfs: 'hsr0' already exists in 'hsr' [ 391.022463][T10098] Cannot create hsr debugfs directory [ 391.246299][ T9686] veth0_vlan: entered promiscuous mode [ 391.399762][ T9686] veth1_vlan: entered promiscuous mode [ 391.456922][ T9958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.567467][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.612323][ T9958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.654882][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.384138][ T9958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.473995][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.538103][ T9958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.586504][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.569069][ T9686] veth0_macvtap: entered promiscuous mode [ 393.648988][ T9686] veth1_macvtap: entered promiscuous mode [ 393.921904][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.015812][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.005364][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.887599][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.888896][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.888918][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.968589][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.968717][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.999035][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.999203][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.326968][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.326992][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.494056][ T6358] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.691992][ T6339] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.025025][ T6353] bridge_slave_1: left allmulticast mode [ 398.025314][ T6353] bridge_slave_1: left promiscuous mode [ 398.025622][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.226734][ T6353] bridge_slave_0: left allmulticast mode [ 398.226778][ T6353] bridge_slave_0: left promiscuous mode [ 398.227072][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.588613][T10370] mmap: syz.4.1300 (10370) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 400.182276][T10387] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1306'. [ 400.502220][ T6353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.594983][ T6353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.724775][ T6353] bond0 (unregistering): Released all slaves [ 401.550881][ T5727] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 401.763194][ T5727] usb 5-1: Using ep0 maxpacket: 8 [ 401.764352][ T5727] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.771516][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.771598][ T5727] usb 5-1: Product: syz [ 401.771613][ T5727] usb 5-1: Manufacturer: syz [ 401.771628][ T5727] usb 5-1: SerialNumber: syz [ 401.793745][ T5727] usb 5-1: config 0 descriptor?? [ 402.081196][ T5727] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.631619][ T6339] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.155719][ T5727] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 403.333209][ T5727] usb 5-1: USB disconnect, device number 12 [ 403.834218][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 403.945750][T10450] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 403.945770][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 403.945780][T10450] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 403.945788][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 403.945912][T10450] iwpm_send_hello: Unable to send a nlmsg [ 404.250903][ T6353] hsr_slave_0: left promiscuous mode [ 404.291526][ T6353] hsr_slave_1: left promiscuous mode [ 404.293569][ T6353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.342218][ T6353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.374075][T10464] fuse: fd is not a fuse device [ 405.778062][ T6353] team0 (unregistering): Port device team_slave_1 removed [ 405.855776][ T6353] team0 (unregistering): Port device team_slave_0 removed [ 407.093813][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.261679][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.320850][T10528] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 408.320879][T10528] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1343'. [ 409.576020][T10544] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 409.759725][T10544] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 410.435669][T10544] CIFS: VFS: Error connecting to socket. Aborting operation. [ 410.435924][T10544] CIFS: VFS: cifs_mount failed w/return code = -4 [ 410.822344][ T6970] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 410.988677][ T6970] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 411.004996][ T6970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.005077][ T6970] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 411.005108][ T6970] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 411.005157][ T6970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.526349][ T6970] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 411.526387][ T6970] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 411.526404][ T6970] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 411.593686][ T6970] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 411.622674][ T6970] usb 7-1: USB disconnect, device number 2 [ 411.805426][ T9958] veth0_vlan: entered promiscuous mode [ 412.126626][ T9958] veth1_vlan: entered promiscuous mode [ 412.308805][T10098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.344821][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.348040][T10098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.455710][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.543139][T10098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.676233][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.711156][T10098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.757050][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.308704][ T9958] veth0_macvtap: entered promiscuous mode [ 413.337434][ T9958] veth1_macvtap: entered promiscuous mode [ 413.607353][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.724970][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.818396][T10607] netlink: 'syz.6.1361': attribute type 1 has an invalid length. [ 414.295038][ T37] audit: type=1326 audit(1791439091.325:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.297450][ T37] audit: type=1326 audit(1791439091.335:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.369812][ T37] audit: type=1326 audit(1791439091.405:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.396085][ T37] audit: type=1326 audit(1791439091.405:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.399358][ T37] audit: type=1326 audit(1791439091.435:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.399712][ T37] audit: type=1326 audit(1791439091.435:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.468334][ T37] audit: type=1326 audit(1791439091.505:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f535941e199 code=0x0 [ 414.714473][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.718138][ T37] audit: type=1326 audit(1791439091.755:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.718202][ T37] audit: type=1326 audit(1791439091.755:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10616 comm="syz.6.1363" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 414.962545][T10624] overlayfs: failed to clone lowerpath [ 415.447273][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.816828][ T9714] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.002828][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.002974][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.007920][ T9714] usb 7-1: Using ep0 maxpacket: 32 [ 416.015437][ T9714] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.017385][ T9714] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 416.017415][ T9714] usb 7-1: config 0 has no interface number 0 [ 416.082059][ T9714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.082092][ T9714] usb 7-1: Product: syz [ 416.082108][ T9714] usb 7-1: Manufacturer: syz [ 416.082124][ T9714] usb 7-1: SerialNumber: syz [ 416.141394][ T9714] usb 7-1: config 0 descriptor?? [ 416.161916][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.161940][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.296994][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.316011][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.763121][ T6366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.763146][ T6366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.873198][ T9714] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 416.873238][ T9714] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 416.873822][ T9714] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 416.874176][ T9714] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 416.941627][ T9714] usb 7-1: USB disconnect, device number 3 [ 416.969873][T10638] geneve2: entered promiscuous mode [ 417.309080][ T6353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.309341][ T6353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.309555][ T6353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.309818][ T6353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.404688][ T6353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.404936][ T6353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.456113][ T6353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.571087][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.109225][ T5894] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 418.221118][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 418.342855][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 418.343759][ T5894] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 418.457733][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.457766][ T5894] usb 7-1: Product: syz [ 418.457783][ T5894] usb 7-1: Manufacturer: syz [ 418.457800][ T5894] usb 7-1: SerialNumber: syz [ 418.482090][ T5894] usb 7-1: config 0 descriptor?? [ 418.516670][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 419.746742][ T5894] gspca_sonixj: reg_r err -110 [ 419.746943][ T5894] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 419.898353][ T1237] usb 7-1: USB disconnect, device number 4 [ 420.136790][T10699] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1378'. [ 420.850354][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.421720][T10715] FAULT_INJECTION: forcing a failure. [ 421.421720][T10715] name failslab, interval 1, probability 0, space 0, times 0 [ 421.421767][T10715] CPU: 1 UID: 0 PID: 10715 Comm: syz.4.1380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.421798][T10715] Tainted: [L]=SOFTLOCKUP [ 421.421806][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.421818][T10715] Call Trace: [ 421.421829][T10715] [ 421.421839][T10715] dump_stack_lvl+0xe8/0x150 [ 421.421892][T10715] should_fail_ex+0x46b/0x600 [ 421.421929][T10715] should_failslab+0xa8/0x100 [ 421.421951][T10715] ? __kernfs_new_node+0xe7/0xa70 [ 421.422024][T10715] kmem_cache_alloc_noprof+0x9e/0x690 [ 421.422054][T10715] ? __kernfs_new_node+0xe7/0xa70 [ 421.422089][T10715] __kernfs_new_node+0xe7/0xa70 [ 421.422116][T10715] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.422224][T10715] ? __pfx___kernfs_new_node+0x10/0x10 [ 421.422260][T10715] ? kernfs_root+0x1c/0x230 [ 421.422293][T10715] ? kernfs_root+0x1c/0x230 [ 421.422317][T10715] ? kernfs_root+0x1c/0x230 [ 421.422340][T10715] ? kernfs_root+0x1c/0x230 [ 421.422369][T10715] kernfs_new_node+0xea/0x140 [ 421.422401][T10715] __kernfs_create_file+0x4b/0x2e0 [ 421.422426][T10715] sysfs_add_file_mode_ns+0x237/0x300 [ 421.422461][T10715] internal_create_group+0x679/0x1180 [ 421.422502][T10715] ? __pfx_internal_create_group+0x10/0x10 [ 421.422542][T10715] sysfs_create_groups+0x59/0x120 [ 421.422572][T10715] device_add_attrs+0x12c/0x600 [ 421.422668][T10715] ? __pfx_device_add_attrs+0x10/0x10 [ 421.422686][T10715] ? kobject_put+0x50f/0x550 [ 421.422757][T10715] ? device_add_class_symlinks+0x222/0x240 [ 421.422781][T10715] device_add+0x488/0xb80 [ 421.422817][T10715] input_register_device+0x9d7/0x1150 [ 421.422940][T10715] uinput_create_device+0x53e/0x690 [ 421.422990][T10715] uinput_ioctl_handler+0x436/0x15a0 [ 421.423021][T10715] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 421.423055][T10715] ? __fget_files+0x2a/0x420 [ 421.423079][T10715] ? __fget_files+0x3a8/0x420 [ 421.423108][T10715] ? bpf_lsm_file_ioctl+0x9/0x20 [ 421.423151][T10715] ? __pfx_uinput_ioctl+0x10/0x10 [ 421.423174][T10715] __se_sys_ioctl+0xff/0x170 [ 421.423206][T10715] do_syscall_64+0x166/0x520 [ 421.423231][T10715] ? trace_irq_disable+0x3b/0x140 [ 421.423259][T10715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.423281][T10715] ? clear_bhb_loop+0x70/0xc0 [ 421.423306][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.423326][T10715] RIP: 0033:0x7fc42629e199 [ 421.423348][T10715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.423367][T10715] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.423391][T10715] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 421.423408][T10715] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 421.423422][T10715] RBP: 00007fc4263358e0 R08: 0000000000000000 R09: 0000000000000000 [ 421.423436][T10715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.423449][T10715] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 421.423510][T10715] [ 421.702652][T10098] veth0_vlan: entered promiscuous mode [ 421.883647][T10098] veth1_vlan: entered promiscuous mode [ 422.140368][T10098] veth0_macvtap: entered promiscuous mode [ 422.224408][T10098] veth1_macvtap: entered promiscuous mode [ 422.482734][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.509348][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.584605][ T6353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.587224][ T6369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.587276][ T6369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.720906][ T6369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.305156][ T5605] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 424.695527][ T6358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.695555][ T6358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.239880][ T6358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.239907][ T6358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.327978][T10796] netlink: 'syz.6.1402': attribute type 1 has an invalid length. [ 426.624602][T10799] bond1: (slave veth0_to_bond): making interface the new active one [ 426.695390][T10799] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 426.772580][T10804] netlink: 'syz.2.1403': attribute type 4 has an invalid length. [ 426.772611][T10804] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1403'. [ 426.841769][T10804] FAULT_INJECTION: forcing a failure. [ 426.841769][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 426.841801][T10804] CPU: 1 UID: 0 PID: 10804 Comm: syz.2.1403 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.841821][T10804] Tainted: [L]=SOFTLOCKUP [ 426.841826][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 426.841834][T10804] Call Trace: [ 426.841840][T10804] [ 426.841847][T10804] dump_stack_lvl+0xe8/0x150 [ 426.841873][T10804] should_fail_ex+0x46b/0x600 [ 426.841897][T10804] should_failslab+0xa8/0x100 [ 426.841913][T10804] __kmalloc_noprof+0xfb/0x790 [ 426.841931][T10804] ? tnode_new+0xc7/0x3b0 [ 426.842028][T10804] ? tnode_new+0xc7/0x3b0 [ 426.842046][T10804] tnode_new+0xc7/0x3b0 [ 426.842063][T10804] resize+0x7de/0x2490 [ 426.842087][T10804] fib_insert_alias+0xd9a/0x10f0 [ 426.842106][T10804] fib_trie_unmerge+0x312/0xce0 [ 426.842128][T10804] fib_unmerge+0xc5/0x350 [ 426.842163][T10804] fib4_rule_configure+0x2c9/0x9d0 [ 426.842214][T10804] fib_newrule+0x61e/0xf20 [ 426.842271][T10804] ? __lock_acquire+0x747/0x2de0 [ 426.842309][T10804] ? __pfx_fib_newrule+0x10/0x10 [ 426.842351][T10804] ? __pfx_fib_nl_newrule+0x10/0x10 [ 426.842369][T10804] rtnetlink_rcv_msg+0x802/0xc00 [ 426.842405][T10804] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 426.842419][T10804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.842431][T10804] ? ref_tracker_free+0x668/0x820 [ 426.842453][T10804] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.842480][T10804] netlink_rcv_skb+0x226/0x4a0 [ 426.842529][T10804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.842547][T10804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.842593][T10804] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.842624][T10804] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.842659][T10804] netlink_unicast+0x7f5/0x990 [ 426.842692][T10804] netlink_sendmsg+0x813/0xb40 [ 426.842710][T10804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 426.842736][T10804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.842762][T10804] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 426.842793][T10804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.842818][T10804] sock_sendmsg_nosec+0x13a/0x180 [ 426.842882][T10804] ____sys_sendmsg+0x565/0x870 [ 426.842913][T10804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.842935][T10804] ? import_iovec+0x73/0xa0 [ 426.842968][T10804] ___sys_sendmsg+0x2a5/0x360 [ 426.842985][T10804] ? __lock_acquire+0x747/0x2de0 [ 426.843006][T10804] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.843025][T10804] ? futex_wait+0x2a2/0x390 [ 426.843068][T10804] ? __fget_files+0x2a/0x420 [ 426.843084][T10804] ? __fget_files+0x3a8/0x420 [ 426.843106][T10804] __x64_sys_sendmsg+0x1b7/0x290 [ 426.843124][T10804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.843155][T10804] do_syscall_64+0x166/0x520 [ 426.843169][T10804] ? trace_irq_disable+0x3b/0x140 [ 426.843187][T10804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.843200][T10804] ? clear_bhb_loop+0x70/0xc0 [ 426.843217][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.843230][T10804] RIP: 0033:0x7f9cc068e199 [ 426.843251][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.843263][T10804] RSP: 002b:00007f9cbe8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.843280][T10804] RAX: ffffffffffffffda RBX: 00007f9cc0915fa0 RCX: 00007f9cc068e199 [ 426.843290][T10804] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000005 [ 426.843299][T10804] RBP: 00007f9cc07258e0 R08: 0000000000000000 R09: 0000000000000000 [ 426.843307][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.843316][T10804] R13: 00007f9cc0916038 R14: 00007f9cc0915fa0 R15: 00007ffd734aed58 [ 426.843338][T10804] [ 428.036712][T10825] netlink: 'syz.0.1411': attribute type 12 has an invalid length. [ 428.652389][T10830] : renamed from veth0_macvtap (while UP) [ 430.068709][ C0] Unknown status report in ack skb [ 430.180672][ T6970] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 430.410727][ T6970] usb 7-1: Using ep0 maxpacket: 16 [ 430.415930][ T6970] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 430.437814][ T6970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.437959][ T6970] usb 7-1: Product: syz [ 430.437978][ T6970] usb 7-1: Manufacturer: syz [ 430.437994][ T6970] usb 7-1: SerialNumber: syz [ 431.202172][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 431.202196][ T37] audit: type=1326 audit(1791439108.245:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.202819][ T37] audit: type=1326 audit(1791439108.245:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.221968][ T37] audit: type=1326 audit(1791439108.265:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.222295][ T37] audit: type=1326 audit(1791439108.265:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.222353][ T37] audit: type=1326 audit(1791439108.265:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.224992][ T37] audit: type=1326 audit(1791439108.265:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.237409][ T37] audit: type=1326 audit(1791439108.265:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.237534][ T37] audit: type=1326 audit(1791439108.265:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.261274][ T37] audit: type=1326 audit(1791439108.285:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.261339][ T37] audit: type=1326 audit(1791439108.285:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.4.1427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42629e199 code=0x7ffc0000 [ 431.692948][T10879] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 432.247000][ T6970] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 432.270438][ T6970] usb 7-1: USB disconnect, device number 5 [ 432.343209][T10887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 433.064987][T10892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.432997][T10944] overlayfs: failed to clone upperpath [ 436.201594][T10949] 9pnet_fd: p9_fd_create_unix (10949): problem connecting socket: ./proc: -111 [ 438.225931][T10991] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1463'. [ 439.108462][T11012] fuse: fd is not a fuse device [ 439.125229][T11014] Option 'dnserror' to dns_resolver key: bad/missing value [ 439.655588][T11022] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 440.551666][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.509904][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1486'. [ 446.140322][T11146] xt_hashlimit: size too large, truncated to 1048576 [ 446.150282][T11146] xt_hashlimit: max too large, truncated to 1048576 [ 447.834995][T11178] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 447.835043][T11178] bond2: entered allmulticast mode [ 447.835302][T11180] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 448.296909][T11193] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1529'. [ 448.297428][T11193] 0ªX¹¦Dö»: renamed from gretap0 [ 448.477942][T11193] 0ªX¹¦Dö»: left promiscuous mode [ 448.477974][T11193] 0ªX¹¦Dö»: entered allmulticast mode [ 448.596962][T11204] gretap1: entered promiscuous mode [ 449.635297][T11218] FAULT_INJECTION: forcing a failure. [ 449.635297][T11218] name failslab, interval 1, probability 0, space 0, times 0 [ 449.635347][T11218] CPU: 0 UID: 0 PID: 11218 Comm: syz.4.1538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 449.635382][T11218] Tainted: [L]=SOFTLOCKUP [ 449.635391][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.635406][T11218] Call Trace: [ 449.635416][T11218] [ 449.635426][T11218] dump_stack_lvl+0xe8/0x150 [ 449.635473][T11218] should_fail_ex+0x46b/0x600 [ 449.635517][T11218] should_failslab+0xa8/0x100 [ 449.635547][T11218] __kmalloc_noprof+0xfb/0x790 [ 449.635583][T11218] ? mempool_init_node+0x21f/0x510 [ 449.635649][T11218] ? mempool_init_node+0x21f/0x510 [ 449.635686][T11218] ? __pfx_mempool_kmalloc+0x10/0x10 [ 449.635721][T11218] mempool_init_node+0x21f/0x510 [ 449.635765][T11218] ? __pfx_mempool_kfree+0x10/0x10 [ 449.635796][T11218] ? __pfx_mempool_kmalloc+0x10/0x10 [ 449.635828][T11218] mempool_init_noprof+0x3a/0x50 [ 449.635866][T11218] fanotify_add_mark+0xa37/0x12d0 [ 449.635931][T11218] do_fanotify_mark+0xe95/0x1020 [ 449.635978][T11218] ? __pfx_do_fanotify_mark+0x10/0x10 [ 449.636015][T11218] ? rcu_is_watching+0x16/0xb0 [ 449.636069][T11218] __x64_sys_fanotify_mark+0xb5/0xd0 [ 449.636101][T11218] do_syscall_64+0x166/0x520 [ 449.636134][T11218] ? trace_irq_disable+0x3b/0x140 [ 449.636168][T11218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.636193][T11218] ? clear_bhb_loop+0x70/0xc0 [ 449.636224][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.636253][T11218] RIP: 0033:0x7fc42629e199 [ 449.636276][T11218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.636296][T11218] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 449.636323][T11218] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 449.636341][T11218] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000004 [ 449.636357][T11218] RBP: 00007fc4263358e0 R08: 0000000000000000 R09: 0000000000000000 [ 449.636373][T11218] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 449.636388][T11218] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 449.636427][T11218] [ 451.887721][T11263] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1554'. [ 453.485334][T11306] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1567'. [ 453.574838][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1566'. [ 453.580241][T11313] l2tp_ppp: sess 2/0: no socket in recv [ 453.767713][T11320] FAULT_INJECTION: forcing a failure. [ 453.767713][T11320] name failslab, interval 1, probability 0, space 0, times 0 [ 453.767760][T11320] CPU: 1 UID: 0 PID: 11320 Comm: syz.5.1571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.767794][T11320] Tainted: [L]=SOFTLOCKUP [ 453.767802][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.767816][T11320] Call Trace: [ 453.767826][T11320] [ 453.767837][T11320] dump_stack_lvl+0xe8/0x150 [ 453.767879][T11320] should_fail_ex+0x46b/0x600 [ 453.767919][T11320] should_failslab+0xa8/0x100 [ 453.767946][T11320] __kmalloc_cache_noprof+0xa1/0x680 [ 453.767980][T11320] ? fanout_add+0x24d/0x13d0 [ 453.768100][T11320] ? fanout_add+0x24d/0x13d0 [ 453.768123][T11320] ? fanout_add+0x16c/0x13d0 [ 453.768151][T11320] fanout_add+0x24d/0x13d0 [ 453.768181][T11320] ? _copy_from_user+0x94/0xb0 [ 453.768209][T11320] packet_setsockopt+0xc34/0x1510 [ 453.768235][T11320] ? __pfx_packet_setsockopt+0x10/0x10 [ 453.768260][T11320] ? __pfx___sys_bpf+0x10/0x10 [ 453.768310][T11320] ? do_futex+0x3e7/0x4e0 [ 453.768342][T11320] ? lock_acquire+0x115/0x350 [ 453.768383][T11320] ? __fget_files+0x2a/0x420 [ 453.768415][T11320] ? __fget_files+0x2a/0x420 [ 453.768440][T11320] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 453.768466][T11320] ? __pfx_packet_setsockopt+0x10/0x10 [ 453.768491][T11320] do_sock_setsockopt+0x17c/0x1b0 [ 453.768527][T11320] __x64_sys_setsockopt+0x143/0x1b0 [ 453.768570][T11320] do_syscall_64+0x166/0x520 [ 453.768597][T11320] ? trace_irq_disable+0x3b/0x140 [ 453.768627][T11320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.768650][T11320] ? clear_bhb_loop+0x70/0xc0 [ 453.768684][T11320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.768706][T11320] RIP: 0033:0x7efebb5ce199 [ 453.768729][T11320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.768748][T11320] RSP: 002b:00007efeb9826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 453.768776][T11320] RAX: ffffffffffffffda RBX: 00007efebb855fa0 RCX: 00007efebb5ce199 [ 453.768794][T11320] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 453.768809][T11320] RBP: 00007efebb6658e0 R08: 0000000000000004 R09: 0000000000000000 [ 453.768862][T11320] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.768877][T11320] R13: 00007efebb856038 R14: 00007efebb855fa0 R15: 00007ffea3d87c18 [ 453.768916][T11320] [ 455.840682][ T9714] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 456.080401][ T5605] Bluetooth: hci3: Unknown advertising packet type: 0x18 [ 456.080431][ T5605] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 456.167461][ T9714] usb 7-1: unable to get BOS descriptor or descriptor too short [ 456.167524][ T9714] usb 7-1: New USB device found, idVendor=07aa, idProduct=003f, bcdDevice=45.bf [ 456.168531][ T9714] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 456.168570][ T9714] usb 7-1: can't read configurations, error -71 [ 457.638599][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1599'. [ 457.638637][T11423] netlink: 'syz.6.1599': attribute type 6 has an invalid length. [ 457.931477][T11423] @: entered promiscuous mode [ 458.016806][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1599'. [ 458.016847][T11423] netlink: 'syz.6.1599': attribute type 6 has an invalid length. [ 458.031129][ T6354] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.031824][T11347] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.031866][T11347] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.031901][T11347] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.608658][T11454] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 459.846920][T11454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.032703][T11456] bond1: (slave dummy0): making interface the new active one [ 460.102311][T11456] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 460.609179][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1615'. [ 460.865629][T11479] jffs2: notice: (11479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 460.899978][T11481] FAULT_INJECTION: forcing a failure. [ 460.899978][T11481] name failslab, interval 1, probability 0, space 0, times 0 [ 460.900024][T11481] CPU: 1 UID: 0 PID: 11481 Comm: syz.6.1618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 460.900059][T11481] Tainted: [L]=SOFTLOCKUP [ 460.900069][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.900082][T11481] Call Trace: [ 460.900090][T11481] [ 460.900099][T11481] dump_stack_lvl+0xe8/0x150 [ 460.900139][T11481] should_fail_ex+0x46b/0x600 [ 460.900178][T11481] should_failslab+0xa8/0x100 [ 460.900209][T11481] __kmalloc_cache_noprof+0xa1/0x680 [ 460.900245][T11481] ? ucma_alloc_ctx+0x4e/0x340 [ 460.900380][T11481] ? ucma_alloc_ctx+0x4e/0x340 [ 460.900429][T11481] ucma_alloc_ctx+0x4e/0x340 [ 460.900480][T11481] ucma_create_id+0x1e3/0x370 [ 460.900511][T11481] ? __pfx_ucma_create_id+0x10/0x10 [ 460.900557][T11481] ucma_write+0x257/0x2f0 [ 460.900589][T11481] ? __pfx_ucma_write+0x10/0x10 [ 460.900617][T11481] ? security_file_permission+0x75/0x260 [ 460.900653][T11481] ? rw_verify_area+0x209/0x4d0 [ 460.900694][T11481] ? __pfx_ucma_write+0x10/0x10 [ 460.900721][T11481] vfs_write+0x29f/0xbb0 [ 460.900759][T11481] ? __pfx_vfs_write+0x10/0x10 [ 460.900792][T11481] ? __fget_files+0x2a/0x420 [ 460.900823][T11481] ? __fget_files+0x2a/0x420 [ 460.900849][T11481] ? __fget_files+0x3a8/0x420 [ 460.900874][T11481] ? __fget_files+0x2a/0x420 [ 460.900908][T11481] ksys_write+0x156/0x270 [ 460.900937][T11481] ? __pfx_ksys_write+0x10/0x10 [ 460.900977][T11481] do_syscall_64+0x166/0x520 [ 460.901003][T11481] ? trace_irq_disable+0x3b/0x140 [ 460.901034][T11481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.901058][T11481] ? clear_bhb_loop+0x70/0xc0 [ 460.901087][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.901110][T11481] RIP: 0033:0x7f535941e199 [ 460.901133][T11481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.901155][T11481] RSP: 002b:00007f5357676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.901183][T11481] RAX: ffffffffffffffda RBX: 00007f53596a5fa0 RCX: 00007f535941e199 [ 460.901202][T11481] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003 [ 460.901218][T11481] RBP: 00007f53594b58e0 R08: 0000000000000000 R09: 0000000000000000 [ 460.901234][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.901249][T11481] R13: 00007f53596a6038 R14: 00007f53596a5fa0 R15: 00007fff47778988 [ 460.901286][T11481] [ 461.546134][T11338] bridge_slave_1: left allmulticast mode [ 461.546176][T11338] bridge_slave_1: left promiscuous mode [ 461.546493][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.742734][T11338] bridge_slave_0: left allmulticast mode [ 461.742777][T11338] bridge_slave_0: left promiscuous mode [ 461.743127][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.902280][T11506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.975940][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.242885][T11514] FAULT_INJECTION: forcing a failure. [ 462.242885][T11514] name failslab, interval 1, probability 0, space 0, times 0 [ 462.242934][T11514] CPU: 1 UID: 0 PID: 11514 Comm: syz.4.1632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.242969][T11514] Tainted: [L]=SOFTLOCKUP [ 462.242977][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.242991][T11514] Call Trace: [ 462.243000][T11514] [ 462.243011][T11514] dump_stack_lvl+0xe8/0x150 [ 462.243052][T11514] should_fail_ex+0x46b/0x600 [ 462.243109][T11514] should_failslab+0xa8/0x100 [ 462.243137][T11514] __kmalloc_cache_noprof+0xa1/0x680 [ 462.243173][T11514] ? nfnetlink_rcv+0x102a/0x28d0 [ 462.243292][T11514] ? nfnetlink_rcv+0x102a/0x28d0 [ 462.243329][T11514] nfnetlink_rcv+0x102a/0x28d0 [ 462.243395][T11514] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 462.243444][T11514] ? ref_tracker_free+0x668/0x820 [ 462.243507][T11514] ? skb_clone+0x246/0x3a0 [ 462.243657][T11514] ? __netlink_deliver_tap+0x811/0x860 [ 462.243698][T11514] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.243728][T11514] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.243765][T11514] netlink_unicast+0x7f5/0x990 [ 462.243803][T11514] netlink_sendmsg+0x813/0xb40 [ 462.243833][T11514] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 462.243876][T11514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.243915][T11514] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 462.243951][T11514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.243980][T11514] sock_sendmsg_nosec+0x13a/0x180 [ 462.244020][T11514] ____sys_sendmsg+0x565/0x870 [ 462.244058][T11514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.244098][T11514] ? import_iovec+0x73/0xa0 [ 462.244139][T11514] ___sys_sendmsg+0x2a5/0x360 [ 462.244168][T11514] ? __lock_acquire+0x747/0x2de0 [ 462.244207][T11514] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.244241][T11514] ? futex_wait+0x2a2/0x390 [ 462.244307][T11514] ? __fget_files+0x2a/0x420 [ 462.244335][T11514] ? __fget_files+0x3a8/0x420 [ 462.244375][T11514] __x64_sys_sendmsg+0x1b7/0x290 [ 462.244409][T11514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.244465][T11514] do_syscall_64+0x166/0x520 [ 462.244492][T11514] ? trace_irq_disable+0x3b/0x140 [ 462.244524][T11514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.244558][T11514] ? clear_bhb_loop+0x70/0xc0 [ 462.244589][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.244614][T11514] RIP: 0033:0x7fc42629e199 [ 462.244637][T11514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.244658][T11514] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.244686][T11514] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 462.244704][T11514] RDX: 0000000000040804 RSI: 0000200000002fc0 RDI: 0000000000000005 [ 462.244721][T11514] RBP: 00007fc4263358e0 R08: 0000000000000000 R09: 0000000000000000 [ 462.244736][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.244752][T11514] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 462.244792][T11514] [ 462.271498][T11517] FAULT_INJECTION: forcing a failure. [ 462.271498][T11517] name failslab, interval 1, probability 0, space 0, times 0 [ 462.271543][T11517] CPU: 1 UID: 0 PID: 11517 Comm: syz.6.1633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.271577][T11517] Tainted: [L]=SOFTLOCKUP [ 462.271586][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.271601][T11517] Call Trace: [ 462.271611][T11517] [ 462.271621][T11517] dump_stack_lvl+0xe8/0x150 [ 462.271662][T11517] should_fail_ex+0x46b/0x600 [ 462.271704][T11517] should_failslab+0xa8/0x100 [ 462.271729][T11517] ? anon_vma_clone+0x3f3/0x9f0 [ 462.271762][T11517] kmem_cache_alloc_noprof+0x9e/0x690 [ 462.271795][T11517] ? __pfx_mas_preallocate+0x10/0x10 [ 462.271827][T11517] ? anon_vma_clone+0x3f3/0x9f0 [ 462.271867][T11517] anon_vma_clone+0x3f3/0x9f0 [ 462.271910][T11517] __split_vma+0x3d8/0xa00 [ 462.271958][T11517] ? __pfx___split_vma+0x10/0x10 [ 462.272010][T11517] vms_gather_munmap_vmas+0x322/0x1370 [ 462.272046][T11517] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 462.272081][T11517] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 462.272105][T11517] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 462.272145][T11517] ? reacquire_held_locks+0x117/0x1a0 [ 462.272182][T11517] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 462.272231][T11517] do_vmi_align_munmap+0x2c7/0x4d0 [ 462.272254][T11517] ? move_page_tables+0x67a/0x1db0 [ 462.272298][T11517] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 462.272356][T11517] ? mas_walk+0x381/0x490 [ 462.272383][T11517] ? mas_find+0x645/0xcb0 [ 462.272414][T11517] do_vmi_munmap+0x252/0x2d0 [ 462.272444][T11517] move_vma+0x11bd/0x1850 [ 462.272492][T11517] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 462.272564][T11517] ? __pfx_move_vma+0x10/0x10 [ 462.272594][T11517] ? mtree_load+0x12a/0x780 [ 462.272629][T11517] ? cap_mmap_addr+0xaf/0x100 [ 462.272660][T11517] ? bpf_lsm_mmap_addr+0x9/0x50 [ 462.272695][T11517] mremap_to+0x7f9/0x8d0 [ 462.272724][T11517] ? __pfx_mremap_to+0x10/0x10 [ 462.272751][T11517] ? __pfx_check_prep_vma+0x10/0x10 [ 462.272777][T11517] ? mas_walk+0x381/0x490 [ 462.272801][T11517] ? mas_find+0x645/0xcb0 [ 462.272829][T11517] __se_sys_mremap+0xd30/0x12d0 [ 462.272864][T11517] ? __pfx___se_sys_mremap+0x10/0x10 [ 462.272885][T11517] ? do_futex+0x3e7/0x4e0 [ 462.272914][T11517] ? lock_acquire+0x115/0x350 [ 462.272959][T11517] ? __se_sys_futex+0x3a8/0x450 [ 462.273001][T11517] ? __x64_sys_mremap+0x20/0xc0 [ 462.273027][T11517] do_syscall_64+0x166/0x520 [ 462.273051][T11517] ? trace_irq_disable+0x3b/0x140 [ 462.273078][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.273100][T11517] ? clear_bhb_loop+0x70/0xc0 [ 462.273127][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.273148][T11517] RIP: 0033:0x7f535941e199 [ 462.273170][T11517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.273189][T11517] RSP: 002b:00007f5357676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 462.273213][T11517] RAX: ffffffffffffffda RBX: 00007f53596a5fa0 RCX: 00007f535941e199 [ 462.273228][T11517] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 462.273243][T11517] RBP: 00007f53594b58e0 R08: 0000200000ffd000 R09: 0000000000000000 [ 462.273258][T11517] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 462.273272][T11517] R13: 00007f53596a6038 R14: 00007f53596a5fa0 R15: 00007fff47778988 [ 462.273305][T11517] [ 462.916677][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 462.918623][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 463.667278][T11338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.774863][T11338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.824652][T11338] bond0 (unregistering): Released all slaves [ 465.188895][T11558] FAULT_INJECTION: forcing a failure. [ 465.188895][T11558] name failslab, interval 1, probability 0, space 0, times 0 [ 465.188942][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.4.1649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.188978][T11558] Tainted: [L]=SOFTLOCKUP [ 465.188987][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.189002][T11558] Call Trace: [ 465.189012][T11558] [ 465.189022][T11558] dump_stack_lvl+0xe8/0x150 [ 465.189066][T11558] should_fail_ex+0x46b/0x600 [ 465.189104][T11558] should_failslab+0xa8/0x100 [ 465.189133][T11558] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 465.189170][T11558] ? vfs_parse_fs_qstr+0x11e/0x1e0 [ 465.189238][T11558] ? vfs_parse_fs_qstr+0x11e/0x1e0 [ 465.189279][T11558] kmemdup_nul+0x36/0xf0 [ 465.189317][T11558] vfs_parse_fs_qstr+0x11e/0x1e0 [ 465.189354][T11558] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 465.189393][T11558] ? alloc_fs_context+0x9b7/0xd00 [ 465.189435][T11558] do_new_mount+0x2a6/0xdc0 [ 465.189462][T11558] ? cap_capable+0x123/0x460 [ 465.189500][T11558] ? __pfx_do_new_mount+0x10/0x10 [ 465.189557][T11558] ? ns_capable+0x89/0xe0 [ 465.189600][T11558] ? path_mount+0x647/0x1050 [ 465.189631][T11558] ? user_path_at+0xd4/0x160 [ 465.189666][T11558] __se_sys_mount+0x31d/0x420 [ 465.189705][T11558] ? __pfx___se_sys_mount+0x10/0x10 [ 465.189737][T11558] ? __x64_sys_mount+0x20/0xc0 [ 465.189767][T11558] do_syscall_64+0x166/0x520 [ 465.189791][T11558] ? trace_irq_disable+0x3b/0x140 [ 465.189823][T11558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.189847][T11558] ? clear_bhb_loop+0x70/0xc0 [ 465.189877][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.189901][T11558] RIP: 0033:0x7fc42629e199 [ 465.189925][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.189946][T11558] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.189974][T11558] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 465.189993][T11558] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 00002000000002c0 [ 465.190010][T11558] RBP: 00007fc4263358e0 R08: 0000200000000500 R09: 0000000000000000 [ 465.190025][T11558] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000000 [ 465.190040][T11558] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 465.190078][T11558] [ 466.466943][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1658'. [ 467.887539][T11598] FAULT_INJECTION: forcing a failure. [ 467.887539][T11598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.887583][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.2.1662 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 467.887615][T11598] Tainted: [L]=SOFTLOCKUP [ 467.887623][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.887638][T11598] Call Trace: [ 467.887647][T11598] [ 467.887658][T11598] dump_stack_lvl+0xe8/0x150 [ 467.887700][T11598] should_fail_ex+0x46b/0x600 [ 467.887740][T11598] _copy_to_user+0x31/0xb0 [ 467.887764][T11598] bpf_verifier_vlog+0x52a/0x900 [ 467.887850][T11598] btf_verifier_log+0x11d/0x1a0 [ 467.887884][T11598] ? __pfx_btf_verifier_log+0x10/0x10 [ 467.887922][T11598] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 467.887957][T11598] btf_enum_check_meta+0xc7e/0xdc0 [ 467.888003][T11598] btf_parse_type_sec+0x3cf/0x2360 [ 467.888042][T11598] ? __pfx_btf_check_sec_info+0x10/0x10 [ 467.888080][T11598] ? btf_parse_str_sec+0x244/0x2f0 [ 467.888116][T11598] btf_new_fd+0x4ad/0xc70 [ 467.888156][T11598] __sys_bpf+0xd2e/0xd90 [ 467.888196][T11598] ? __pfx___sys_bpf+0x10/0x10 [ 467.888225][T11598] ? __lock_acquire+0x747/0x2de0 [ 467.888258][T11598] ? do_futex+0x3e7/0x4e0 [ 467.888311][T11598] ? rcu_is_watching+0x16/0xb0 [ 467.888350][T11598] __x64_sys_bpf+0xba/0xd0 [ 467.888381][T11598] do_syscall_64+0x166/0x520 [ 467.888405][T11598] ? trace_irq_disable+0x3b/0x140 [ 467.888434][T11598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.888456][T11598] ? clear_bhb_loop+0x70/0xc0 [ 467.888482][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.888503][T11598] RIP: 0033:0x7f9cc068e199 [ 467.888525][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.888544][T11598] RSP: 002b:00007f9cbe8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.888569][T11598] RAX: ffffffffffffffda RBX: 00007f9cc0915fa0 RCX: 00007f9cc068e199 [ 467.888585][T11598] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 467.888600][T11598] RBP: 00007f9cc07258e0 R08: 0000000000000000 R09: 0000000000000000 [ 467.888613][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.888627][T11598] R13: 00007f9cc0916038 R14: 00007f9cc0915fa0 R15: 00007ffd734aed58 [ 467.888671][T11598] [ 469.718287][T11617] bridge0: port 3(vlan2) entered blocking state [ 469.718462][T11617] bridge0: port 3(vlan2) entered disabled state [ 469.718694][T11617] vlan2: entered allmulticast mode [ 469.718713][T11617] geneve0: entered allmulticast mode [ 469.760170][T11617] vlan2: entered promiscuous mode [ 469.760197][T11617] geneve0: entered promiscuous mode [ 470.410298][T11635] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 470.410324][T11635] overlayfs: failed to set xattr on upper [ 470.410341][T11635] overlayfs: ...falling back to redirect_dir=nofollow. [ 470.410346][T11635] overlayfs: ...falling back to index=off. [ 470.410351][T11635] overlayfs: ...falling back to uuid=null. [ 470.410356][T11635] overlayfs: ...falling back to xino=off. [ 470.410369][T11635] overlayfs: maximum fs stacking depth exceeded [ 471.406425][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 471.406449][ T37] audit: type=1326 audit(1791439148.445:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.421582][ T37] audit: type=1326 audit(1791439148.445:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.502890][ T37] audit: type=1326 audit(1791439148.545:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.506098][ T37] audit: type=1326 audit(1791439148.545:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.506158][ T37] audit: type=1326 audit(1791439148.545:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.507614][ T37] audit: type=1326 audit(1791439148.545:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.507672][ T37] audit: type=1326 audit(1791439148.545:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.517462][ T37] audit: type=1326 audit(1791439148.545:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.517524][ T37] audit: type=1326 audit(1791439148.555:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 471.517570][ T37] audit: type=1326 audit(1791439148.555:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.6.1682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f535941e199 code=0x7ffc0000 [ 472.668181][T11686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1693'. [ 472.798914][T11338] hsr_slave_0: left promiscuous mode [ 472.857119][T11338] hsr_slave_1: left promiscuous mode [ 472.858589][T11338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.884378][T11338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.381087][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 473.440162][T11699] ref_ctr going negative. vaddr: 0x2000001f8002, curr val: -15478, delta: 1 [ 473.440193][T11699] ref_ctr increment failed for inode: 0x1a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888034e45b00 [ 474.894026][T11338] team0 (unregistering): Port device team_slave_1 removed [ 474.992936][T11338] team0 (unregistering): Port device team_slave_0 removed [ 475.679743][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1710'. [ 477.894337][T11779] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 477.946467][T11778] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 478.611305][ T5612] Bluetooth: hci1: connection err: -111 [ 479.368498][T11789] syz.4.1728 (11789) used greatest stack depth: 17656 bytes left [ 480.382155][T11822] sctp: [Deprecated]: syz.2.1740 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.382155][T11822] Use struct sctp_sack_info instead [ 481.777497][T11851] FAULT_INJECTION: forcing a failure. [ 481.777497][T11851] name failslab, interval 1, probability 0, space 0, times 0 [ 481.777543][T11851] CPU: 0 UID: 0 PID: 11851 Comm: syz.2.1753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.777577][T11851] Tainted: [L]=SOFTLOCKUP [ 481.777586][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 481.777600][T11851] Call Trace: [ 481.777610][T11851] [ 481.777620][T11851] dump_stack_lvl+0xe8/0x150 [ 481.777664][T11851] should_fail_ex+0x46b/0x600 [ 481.777706][T11851] should_failslab+0xa8/0x100 [ 481.777735][T11851] __kmalloc_cache_noprof+0xa1/0x680 [ 481.777772][T11851] ? cuse_channel_open+0x1ee/0x7a0 [ 481.777860][T11851] ? cuse_channel_open+0x1ee/0x7a0 [ 481.777894][T11851] cuse_channel_open+0x1ee/0x7a0 [ 481.777919][T11851] ? mutex_lock_nested+0x152/0x1d0 [ 481.777957][T11851] ? __pfx_cuse_channel_open+0x10/0x10 [ 481.777982][T11851] misc_open+0x2de/0x350 [ 481.778091][T11851] chrdev_open+0x4dc/0x600 [ 481.778143][T11851] ? __pfx_chrdev_open+0x10/0x10 [ 481.778178][T11851] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 481.778221][T11851] ? __pfx_chrdev_open+0x10/0x10 [ 481.778256][T11851] do_dentry_open+0x849/0x1420 [ 481.778294][T11851] vfs_open+0x3b/0x350 [ 481.778313][T11851] ? path_openat+0x142d/0x1d60 [ 481.778348][T11851] path_openat+0x1448/0x1d60 [ 481.778404][T11851] do_file_open+0x23e/0x4a0 [ 481.778443][T11851] ? __pfx_do_file_open+0x10/0x10 [ 481.778504][T11851] ? alloc_fd+0x654/0x6d0 [ 481.778542][T11851] do_sys_openat2+0x115/0x200 [ 481.778567][T11851] ? __se_sys_futex+0x3a8/0x450 [ 481.778594][T11851] ? __pfx_do_sys_openat2+0x10/0x10 [ 481.778626][T11851] ? rcu_is_watching+0x16/0xb0 [ 481.778669][T11851] __x64_sys_openat+0x138/0x170 [ 481.778700][T11851] do_syscall_64+0x166/0x520 [ 481.778727][T11851] ? trace_irq_disable+0x3b/0x140 [ 481.778760][T11851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.778784][T11851] ? clear_bhb_loop+0x70/0xc0 [ 481.778824][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.778848][T11851] RIP: 0033:0x7f9cc068e199 [ 481.778871][T11851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.778892][T11851] RSP: 002b:00007f9cbe8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.778919][T11851] RAX: ffffffffffffffda RBX: 00007f9cc0915fa0 RCX: 00007f9cc068e199 [ 481.778938][T11851] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 481.778954][T11851] RBP: 00007f9cc07258e0 R08: 0000000000000000 R09: 0000000000000000 [ 481.778970][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.778985][T11851] R13: 00007f9cc0916038 R14: 00007f9cc0915fa0 R15: 00007ffd734aed58 [ 481.779025][T11851] [ 482.404049][T11858] FAULT_INJECTION: forcing a failure. [ 482.404049][T11858] name failslab, interval 1, probability 0, space 0, times 0 [ 482.404098][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.4.1757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.404130][T11858] Tainted: [L]=SOFTLOCKUP [ 482.404138][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 482.404151][T11858] Call Trace: [ 482.404164][T11858] [ 482.404176][T11858] dump_stack_lvl+0xe8/0x150 [ 482.404213][T11858] should_fail_ex+0x46b/0x600 [ 482.404248][T11858] should_failslab+0xa8/0x100 [ 482.404272][T11858] kmem_cache_alloc_node_noprof+0xac/0x660 [ 482.404315][T11858] ? __alloc_skb+0x1db/0x7a0 [ 482.404336][T11858] ? __alloc_skb+0x1db/0x7a0 [ 482.404364][T11858] __alloc_skb+0x1db/0x7a0 [ 482.404392][T11858] alloc_skb_with_frags+0xc6/0x760 [ 482.404493][T11858] ? lock_acquire+0x115/0x350 [ 482.404528][T11858] sock_alloc_send_pskb+0x884/0x9a0 [ 482.404554][T11858] ? lock_acquire+0x115/0x350 [ 482.404596][T11858] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 482.404627][T11858] ? kernel_text_address+0xa5/0xe0 [ 482.404651][T11858] ? __kernel_text_address+0xd/0x30 [ 482.404682][T11858] __ip6_append_data+0x2de9/0x40c0 [ 482.404776][T11858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.404833][T11858] ? __lock_acquire+0x747/0x2de0 [ 482.404876][T11858] ? ip6_mtu+0x7d/0x4a0 [ 482.404923][T11858] ? __pfx___ip6_append_data+0x10/0x10 [ 482.404948][T11858] ? ip6_mtu+0x38c/0x4a0 [ 482.404972][T11858] ? __pfx_ip6_mtu+0x10/0x10 [ 482.404995][T11858] ? ip6_setup_cork+0x631/0xfb0 [ 482.405023][T11858] ? __lock_acquire+0x747/0x2de0 [ 482.405054][T11858] ip6_make_skb+0x2df/0x350 [ 482.405086][T11858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.405117][T11858] ? __pfx_ip6_make_skb+0x10/0x10 [ 482.405169][T11858] ? ip6_dst_hoplimit+0x65/0x3e0 [ 482.405190][T11858] ? ip6_dst_hoplimit+0x65/0x3e0 [ 482.405216][T11858] udpv6_sendmsg+0x1dfb/0x2610 [ 482.405310][T11858] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 482.405365][T11858] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 482.405393][T11858] ? __futex_wait+0x35a/0x410 [ 482.405436][T11858] ? inet_send_prepare+0x5b/0x260 [ 482.405486][T11858] ? inet6_sendmsg+0xe4/0x120 [ 482.405508][T11858] ? __pfx_inet6_sendmsg+0x10/0x10 [ 482.405527][T11858] sock_sendmsg_nosec+0x90/0x180 [ 482.405560][T11858] sock_write_iter+0x2e4/0x3f0 [ 482.405592][T11858] ? __pfx_sock_write_iter+0x10/0x10 [ 482.405628][T11858] ? bpf_lsm_file_permission+0x9/0x20 [ 482.405652][T11858] ? security_file_permission+0x75/0x260 [ 482.405691][T11858] vfs_write+0x61e/0xbb0 [ 482.405727][T11858] ? __pfx_vfs_write+0x10/0x10 [ 482.405763][T11858] ? __fget_files+0x2a/0x420 [ 482.405797][T11858] ksys_write+0x156/0x270 [ 482.405824][T11858] ? __pfx_ksys_write+0x10/0x10 [ 482.405863][T11858] do_syscall_64+0x166/0x520 [ 482.405887][T11858] ? trace_irq_disable+0x3b/0x140 [ 482.405916][T11858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.405938][T11858] ? clear_bhb_loop+0x70/0xc0 [ 482.405964][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.405985][T11858] RIP: 0033:0x7fc42629e199 [ 482.406008][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.406027][T11858] RSP: 002b:00007fc4244f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.406051][T11858] RAX: ffffffffffffffda RBX: 00007fc426525fa0 RCX: 00007fc42629e199 [ 482.406067][T11858] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003 [ 482.406082][T11858] RBP: 00007fc4263358e0 R08: 0000000000000000 R09: 0000000000000000 [ 482.406095][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.406109][T11858] R13: 00007fc426526038 R14: 00007fc426525fa0 R15: 00007ffdfea3d8a8 [ 482.406145][T11858] [ 482.988469][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1756'. [ 487.676801][T11927] netlink: 'syz.0.1774': attribute type 2 has an invalid length. [ 490.876895][T11969] FAULT_INJECTION: forcing a failure. [ 490.876895][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 490.876938][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.6.1788 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.876968][T11969] Tainted: [L]=SOFTLOCKUP [ 490.876976][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 490.876988][T11969] Call Trace: [ 490.876997][T11969] [ 490.877006][T11969] dump_stack_lvl+0xe8/0x150 [ 490.877045][T11969] should_fail_ex+0x46b/0x600 [ 490.877081][T11969] should_failslab+0xa8/0x100 [ 490.877108][T11969] __kmalloc_cache_noprof+0xa1/0x680 [ 490.877141][T11969] ? vim2m_open+0xaf/0x620 [ 490.877251][T11969] ? vim2m_open+0xaf/0x620 [ 490.877283][T11969] ? vim2m_open+0x5d/0x620 [ 490.877316][T11969] vim2m_open+0xaf/0x620 [ 490.877351][T11969] v4l2_open+0x1bf/0x3a0 [ 490.877446][T11969] chrdev_open+0x4dc/0x600 [ 490.877482][T11969] ? __pfx_chrdev_open+0x10/0x10 [ 490.877514][T11969] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 490.877563][T11969] ? __pfx_chrdev_open+0x10/0x10 [ 490.877594][T11969] do_dentry_open+0x849/0x1420 [ 490.877629][T11969] vfs_open+0x3b/0x350 [ 490.877647][T11969] ? path_openat+0x142d/0x1d60 [ 490.877679][T11969] path_openat+0x1448/0x1d60 [ 490.877728][T11969] do_file_open+0x23e/0x4a0 [ 490.877772][T11969] ? __pfx_do_file_open+0x10/0x10 [ 490.877832][T11969] ? alloc_fd+0x654/0x6d0 [ 490.877868][T11969] do_sys_openat2+0x115/0x200 [ 490.877889][T11969] ? __se_sys_futex+0x3a8/0x450 [ 490.877913][T11969] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.877942][T11969] ? rcu_is_watching+0x16/0xb0 [ 490.877979][T11969] __x64_sys_openat+0x138/0x170 [ 490.878007][T11969] do_syscall_64+0x166/0x520 [ 490.878031][T11969] ? trace_irq_disable+0x3b/0x140 [ 490.878057][T11969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.878079][T11969] ? clear_bhb_loop+0x70/0xc0 [ 490.878105][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.878126][T11969] RIP: 0033:0x7f535941e199 [ 490.878149][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.878170][T11969] RSP: 002b:00007f5357676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.878196][T11969] RAX: ffffffffffffffda RBX: 00007f53596a5fa0 RCX: 00007f535941e199 [ 490.878213][T11969] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 490.878228][T11969] RBP: 00007f53594b58e0 R08: 0000000000000000 R09: 0000000000000000 [ 490.878242][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.878255][T11969] R13: 00007f53596a6038 R14: 00007f53596a5fa0 R15: 00007fff47778988 [ 490.878290][T11969] [ 492.652121][T11956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 492.652484][T11956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 492.652623][T11956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 493.095486][T11956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.095642][T11956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 493.591433][T11956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.592136][T11956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 494.407777][T11956] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 494.407882][T11956] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 494.793763][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 494.793826][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 495.140603][ T4904] Bluetooth: hci3: command 0x0406 tx timeout [ 495.622699][ T4904] Bluetooth: hci4: command 0x0406 tx timeout [ 495.828319][T12000] uprobe: syz.5.1800:12000 failed to unregister, leaking uprobe [ 495.998156][T11956] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 496.505132][ T4904] Bluetooth: hci5: command 0x0c1a tx timeout [ 496.831539][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 497.231013][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 497.712185][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 497.833766][T12044] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 498.580703][ T5612] Bluetooth: hci5: command 0x0c1a tx timeout [ 500.660815][ T5612] Bluetooth: hci5: command 0x0c1a tx timeout [ 501.951507][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.979129][T12110] netlink: 'syz.5.1837': attribute type 16 has an invalid length. [ 503.979160][T12110] netlink: 'syz.5.1837': attribute type 17 has an invalid length. [ 505.646417][T12110] bridge0: port 3(vlan2) entered blocking state [ 505.646614][T12110] bridge0: port 3(vlan2) entered forwarding state [ 506.394932][T12115] ceph: No mds server is up or the cluster is laggy [ 507.984558][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.036088][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.050028][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.063518][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.082959][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.114177][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.116695][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.119990][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.163310][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.165429][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.204222][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.227676][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.245135][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.319036][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.626309][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.628452][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.629781][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.631646][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.675432][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.678568][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.685592][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.689299][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.696325][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.701833][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.706568][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.710647][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.715148][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 508.720128][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 509.033575][T12150] 9pnet_fd: p9_fd_create_tcp (12150): problem connecting socket to 127.0.0.1 [ 510.148109][T12177] FAULT_INJECTION: forcing a failure. [ 510.148109][T12177] name failslab, interval 1, probability 0, space 0, times 0 [ 510.148171][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.2.1858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.148205][T12177] Tainted: [L]=SOFTLOCKUP [ 510.148214][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 510.148229][T12177] Call Trace: [ 510.148239][T12177] [ 510.148249][T12177] dump_stack_lvl+0xe8/0x150 [ 510.148293][T12177] should_fail_ex+0x46b/0x600 [ 510.148334][T12177] should_failslab+0xa8/0x100 [ 510.148359][T12177] ? alloc_empty_file+0x5b/0x1d0 [ 510.148384][T12177] kmem_cache_alloc_noprof+0x9e/0x690 [ 510.148425][T12177] ? alloc_empty_file+0x5b/0x1d0 [ 510.148455][T12177] alloc_empty_file+0x5b/0x1d0 [ 510.148479][T12177] alloc_file_pseudo+0x115/0x1e0 [ 510.148505][T12177] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 510.148543][T12177] anon_inode_getfile+0xc5/0x1a0 [ 510.148570][T12177] bpf_link_prime+0x2d8/0x500 [ 510.148602][T12177] ? bpf_link_prime+0x50/0x500 [ 510.148638][T12177] bpf_xdp_link_attach+0x26d/0x990 [ 510.148744][T12177] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 510.148771][T12177] ? lock_acquire+0x115/0x350 [ 510.148824][T12177] ? __fget_files+0x3a8/0x420 [ 510.148857][T12177] ? attach_type_to_prog_type+0x52/0x4d0 [ 510.148884][T12177] ? bpf_prog_attach_check_attach_type+0x3b3/0x570 [ 510.148912][T12177] link_create+0x4d4/0x850 [ 510.148937][T12177] __sys_bpf+0x760/0xd90 [ 510.148973][T12177] ? __pfx___sys_bpf+0x10/0x10 [ 510.149006][T12177] ? do_futex+0x3e7/0x4e0 [ 510.149065][T12177] ? rcu_is_watching+0x16/0xb0 [ 510.149111][T12177] __x64_sys_bpf+0xba/0xd0 [ 510.149147][T12177] do_syscall_64+0x166/0x520 [ 510.149174][T12177] ? trace_irq_disable+0x3b/0x140 [ 510.149206][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.149231][T12177] ? clear_bhb_loop+0x70/0xc0 [ 510.149261][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.149299][T12177] RIP: 0033:0x7f9cc068e199 [ 510.149325][T12177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.149346][T12177] RSP: 002b:00007f9cbe8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.149374][T12177] RAX: ffffffffffffffda RBX: 00007f9cc0915fa0 RCX: 00007f9cc068e199 [ 510.149470][T12177] RDX: 000000000000001c RSI: 0000200000000080 RDI: 000000000000001c [ 510.149494][T12177] RBP: 00007f9cc07258e0 R08: 0000000000000000 R09: 0000000000000000 [ 510.149508][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.149522][T12177] R13: 00007f9cc0916038 R14: 00007f9cc0915fa0 R15: 00007ffd734aed58 [ 510.149561][T12177] [ 511.725296][T12202] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1863'. [ 519.676753][T12257] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 522.701004][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 525.749867][T12290] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.1887'. [ 526.005785][T12290] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 527.504796][T12290] 0ªX¹¦Dö»: entered allmulticast mode [ 533.007262][ T4904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.039953][ T4904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.140672][ T4904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.167095][ T4904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.180378][ T4904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.617470][ T5612] Bluetooth: hci2: command tx timeout [ 538.681950][ T5612] Bluetooth: hci2: command tx timeout [ 540.040635][ T202] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 540.225442][ T202] usb 7-1: Using ep0 maxpacket: 8 [ 540.226389][ T202] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.245852][ T202] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.245889][ T202] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.245917][ T202] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.245944][ T202] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.245992][ T202] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.776983][ T5612] Bluetooth: hci2: command tx timeout [ 541.197385][ T202] usb 7-1: GET_CAPABILITIES returned 0 [ 541.197447][ T202] usbtmc 7-1:16.0: can't read capabilities [ 541.947479][ T4904] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.020782][ T4904] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 542.042503][ T4904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.284891][ T4904] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.288308][ T4904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.820692][ T5612] Bluetooth: hci2: command tx timeout [ 543.186823][ T9714] usb 7-1: USB disconnect, device number 8 [ 544.665227][ T5612] Bluetooth: hci6: command tx timeout [ 546.880749][ T5612] Bluetooth: hci6: command tx timeout [ 548.900647][ T5612] Bluetooth: hci6: command tx timeout [ 551.041813][ T5612] Bluetooth: hci6: command tx timeout [ 563.389617][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.537943][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.009088][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.027206][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.028514][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.029897][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 566.142722][ T5612] Bluetooth: hci0: command tx timeout [ 567.004426][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.004585][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.004825][T12309] bridge_slave_0: entered allmulticast mode [ 567.037482][T12309] bridge_slave_0: entered promiscuous mode [ 568.183205][ T5612] Bluetooth: hci0: command tx timeout [ 568.398104][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.429499][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.477763][T12309] bridge_slave_1: entered allmulticast mode [ 568.503628][T12309] bridge_slave_1: entered promiscuous mode [ 569.114303][T12471] 9p: Bad value for 'rfdno' [ 569.807679][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.316878][ T5612] Bluetooth: hci0: command tx timeout [ 571.153745][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.340752][ T5612] Bluetooth: hci0: command tx timeout [ 572.818519][T12309] team0: Port device team_slave_0 added [ 574.177303][T12309] team0: Port device team_slave_1 added [ 575.758414][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.758439][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.758471][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.230112][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.230135][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.230168][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.830776][ T6339] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 581.348241][ T3432] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 581.629362][T12309] hsr_slave_0: entered promiscuous mode [ 582.602721][T12309] hsr_slave_1: entered promiscuous mode [ 582.622917][T12309] debugfs: 'hsr0' already exists in 'hsr' [ 582.622954][T12309] Cannot create hsr debugfs directory [ 584.013448][ T4904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 584.160727][ T4904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 584.632210][ T4904] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 584.705535][ T4904] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 584.723467][ T4904] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 586.981071][ T5612] Bluetooth: hci7: command tx timeout [ 587.242795][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.242948][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.243396][T12365] bridge_slave_0: entered allmulticast mode [ 587.303209][T12365] bridge_slave_0: entered promiscuous mode [ 587.519150][T12365] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.519310][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.519529][T12365] bridge_slave_1: entered allmulticast mode [ 587.692396][T12365] bridge_slave_1: entered promiscuous mode [ 589.061039][ T5612] Bluetooth: hci7: command tx timeout [ 589.699052][ T4904] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 589.762309][ T4904] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 589.799280][ T4904] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 590.235752][ T4904] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 590.236685][ T4904] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 590.425624][T12365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.788264][T12365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.150577][ T4904] Bluetooth: hci7: command tx timeout [ 592.616685][ T4904] Bluetooth: hci8: command tx timeout [ 593.045582][T12365] team0: Port device team_slave_0 added [ 593.225618][ T4904] Bluetooth: hci7: command tx timeout [ 593.295939][T12365] team0: Port device team_slave_1 added [ 594.660975][ T4904] Bluetooth: hci8: command tx timeout [ 596.740629][ T4904] Bluetooth: hci8: command tx timeout [ 598.900644][ T4904] Bluetooth: hci8: command tx timeout [ 602.868586][T12546] netlink: 'syz.5.1947': attribute type 1 has an invalid length. [ 606.508364][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.588361][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.610227][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.746693][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.760402][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.250204][T12546] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 609.781252][T12555] Bluetooth: hci2: command tx timeout [ 611.860995][T12555] Bluetooth: hci2: command tx timeout [ 613.941012][T12555] Bluetooth: hci2: command tx timeout [ 616.024652][T12555] Bluetooth: hci2: command tx timeout [ 624.829268][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.019282][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.118190][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.171693][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.246027][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.342922][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 627.716537][T12555] Bluetooth: hci5: command tx timeout [ 629.781022][T12555] Bluetooth: hci5: command tx timeout [ 631.860641][ T5605] Bluetooth: hci5: command tx timeout [ 633.894410][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 633.894435][ T37] audit: type=1326 audit(1791439310.935:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12632 comm="syz.5.1959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x0 [ 633.951160][ T5605] Bluetooth: hci5: command tx timeout [ 634.402559][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.402712][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.402956][T12498] bridge_slave_0: entered allmulticast mode [ 634.457901][T12498] bridge_slave_0: entered promiscuous mode [ 638.465558][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.494394][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.507240][T12498] bridge_slave_1: entered allmulticast mode [ 638.573986][T12498] bridge_slave_1: entered promiscuous mode [ 642.056245][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.062970][T12555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.098402][T12555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.113322][T12555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.140944][T12555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.179078][T12555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.780921][ T5605] Bluetooth: hci0: command tx timeout [ 649.870640][ T5605] Bluetooth: hci0: command tx timeout [ 652.040684][ T5605] Bluetooth: hci0: command tx timeout [ 652.644164][T12555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 652.754203][T12555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 652.763623][T12555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 652.777325][T12555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 652.789495][T12555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 654.149185][ T5605] Bluetooth: hci0: command tx timeout [ 655.620788][ T5605] Bluetooth: hci6: command tx timeout [ 656.436292][ T37] audit: type=1326 audit(1791439333.465:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.436366][ T37] audit: type=1326 audit(1791439333.465:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.436420][ T37] audit: type=1326 audit(1791439333.475:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.436471][ T37] audit: type=1326 audit(1791439333.475:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.436522][ T37] audit: type=1326 audit(1791439333.475:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.438578][ T37] audit: type=1326 audit(1791439333.475:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.438803][ T37] audit: type=1326 audit(1791439333.475:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.438855][ T37] audit: type=1326 audit(1791439333.475:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.526493][ T37] audit: type=1326 audit(1791439333.565:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 656.526561][ T37] audit: type=1326 audit(1791439333.565:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebb5ce199 code=0x7ffc0000 [ 657.702587][ T5605] Bluetooth: hci6: command tx timeout [ 659.823197][ T5605] Bluetooth: hci6: command tx timeout [ 661.860648][ T5605] Bluetooth: hci6: command tx timeout [ 664.603596][T12555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 664.876678][T12555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 664.881391][T12555] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 664.950102][T12555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 664.971352][T12555] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 667.250715][ T5605] Bluetooth: hci7: command tx timeout [ 669.399492][ T5605] Bluetooth: hci7: command tx timeout [ 671.876344][ T5605] Bluetooth: hci7: command tx timeout [ 673.940653][ T5605] Bluetooth: hci7: command tx timeout [ 683.883218][T12555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.961849][T12555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.979815][T12555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 684.130764][T12555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 684.137184][T12555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.272173][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.480781][ T5605] Bluetooth: hci2: command tx timeout [ 688.540650][ T5605] Bluetooth: hci2: command tx timeout [ 690.580559][ T5605] Bluetooth: hci2: command tx timeout [ 691.148181][T12749] batman_adv: batadv0: Adding interface: veth0 [ 691.148204][T12749] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.148240][T12749] batman_adv: batadv0: Interface activated: veth0 [ 691.305200][T12750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.305250][T12750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.662091][ T5605] Bluetooth: hci2: command tx timeout [ 692.878124][T12750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.878163][T12750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.289792][T12750] batman_adv: batadv0: Interface deactivated: veth0 [ 693.311847][T12750] batman_adv: batadv0: Removing interface: veth0 [ 704.723330][T12555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.495703][T12555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.637454][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.702132][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.703003][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 705.945232][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 706.323650][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 706.381064][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 706.388570][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 706.389584][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.741954][ T38] INFO: task syz.0.1915:12391 blocked for more than 143 seconds. [ 706.741989][ T38] Tainted: G L syzkaller #0 [ 706.742013][ T38] Blocked by coredump. [ 706.742021][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 706.742030][ T38] task:syz.0.1915 state:D stack:24296 pid:12391 tgid:12387 ppid:5596 task_flags:0x40054c flags:0x00080003 [ 706.742093][ T38] Call Trace: [ 706.742102][ T38] [ 706.742118][ T38] __schedule+0x16d9/0x5700 [ 706.742157][ T38] ? __lock_acquire+0x747/0x2de0 [ 706.742197][ T38] ? do_group_exit+0x22d/0x2f0 [ 706.742250][ T38] ? do_syscall_64+0x328/0x520 [ 706.742282][ T38] ? look_up_lock_class+0x57/0x110 [ 706.742367][ T38] ? __pfx___schedule+0x10/0x10 [ 706.742390][ T38] ? lock_acquire+0x115/0x350 [ 706.742432][ T38] ? schedule+0x90/0x2b0 [ 706.742460][ T38] schedule+0x164/0x2b0 [ 706.742487][ T38] schedule_timeout+0xc0/0x2c0 [ 706.742511][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 706.742536][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 706.742575][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 706.742602][ T38] ? wait_for_completion+0x272/0x5e0 [ 706.742628][ T38] wait_for_completion+0x2ca/0x5e0 [ 706.742667][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 706.742700][ T38] ? kill_ioctx+0x2b0/0x3d0 [ 706.742737][ T38] exit_aio+0x310/0x3e0 [ 706.742773][ T38] ? __pfx_exit_aio+0x10/0x10 [ 706.742819][ T38] ? uprobe_clear_state+0x2a7/0x3e0 [ 706.742855][ T38] __mmput+0x68/0x3d0 [ 706.742887][ T38] exit_mm+0x18e/0x240 [ 706.742915][ T38] do_exit+0x6cd/0x2360 [ 706.742941][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 706.742974][ T38] ? __pfx_do_exit+0x10/0x10 [ 706.742998][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 706.743053][ T38] ? rt_spin_unlock+0x159/0x200 [ 706.743090][ T38] do_group_exit+0x22d/0x2f0 [ 706.743114][ T38] ? rt_spin_unlock+0x165/0x200 [ 706.743151][ T38] get_signal+0x121b/0x12c0 [ 706.743208][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 706.743266][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 706.743299][ T38] ? __x64_sys_sendmsg+0x263/0x290 [ 706.743354][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 706.743388][ T38] ? rcu_is_watching+0x16/0xb0 [ 706.743428][ T38] do_syscall_64+0x328/0x520 [ 706.743454][ T38] ? trace_irq_disable+0x3b/0x140 [ 706.743487][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.743512][ T38] ? clear_bhb_loop+0x70/0xc0 [ 706.743541][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.743565][ T38] RIP: 0033:0x7f13a769e199 [ 706.743587][ T38] RSP: 002b:00007f13a58d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.743615][ T38] RAX: 0000000000000014 RBX: 00007f13a7926090 RCX: 00007f13a769e199 [ 706.743631][ T38] RDX: 0000000000000810 RSI: 0000200000000600 RDI: 0000000000000003 [ 706.743647][ T38] RBP: 00007f13a77358e0 R08: 0000000000000000 R09: 0000000000000000 [ 706.743661][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.743676][ T38] R13: 00007f13a7926128 R14: 00007f13a7926090 R15: 00007ffe6f2cc208 [ 706.743712][ T38] [ 706.743746][ T38] [ 706.743746][ T38] Showing all locks held in the system: [ 706.743791][ T38] locks held by rcuc/0/20: 4, last CPU#0: [ 706.743878][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 706.743978][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 706.744070][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 706.744127][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 706.744192][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 706.744208][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 706.744271][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 706.744326][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 706.744380][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 706.744397][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 706.744484][ T38] locks held by kworker/u8:9/188: 5, last CPU#1: [ 706.744501][ T38] #0: ffff8880331c7938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.744565][ T38] #1: ffffc9000414fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.744645][ T38] #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 706.744709][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 706.744772][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 706.744856][ T38] locks held by getty/5343: 2, on CPU#0: [ 706.744875][ T38] #0: ffff888036a2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 706.744992][ T38] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 706.745097][ T38] locks held by kworker/1:7/5894: 3, last CPU#1: [ 706.745116][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745184][ T38] #1: ffffc90006e17c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745253][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x18b0 [ 706.745345][ T38] locks held by kworker/u8:59/6365: 4, last CPU#0: [ 706.745364][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745431][ T38] #1: ffffc9000e327c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745499][ T38] #2: ffff888080c00938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 706.745640][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 706.745736][ T38] locks held by kworker/u8:63/6369: 2, on CPU#1: [ 706.745755][ T38] #0: ffff88801ff71938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745822][ T38] #1: ffffc9000e357c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745899][ T38] locks held by kworker/u8:0/11332: 3, on CPU#1: [ 706.745917][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.745985][ T38] #1: ffffc9000e22fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.746063][ T38] #2: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.746124][ T38] locks held by kworker/u8:11/11339: 6, last CPU#0: [ 706.746142][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.746211][ T38] #1: ffffc9000e28fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.746283][ T38] #2: ffff88802996e310 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 706.746428][ T38] #3: ffff8880625a4520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 706.746496][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 706.746565][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 706.746634][ T38] locks held by kworker/u8:16/11345: 8, last CPU#1: [ 706.746652][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.746720][ T38] #1: ffffc9000e30fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.746787][ T38] #2: ffffffff8f5c7240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 706.746848][ T38] #3: ffff888060f45160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 706.746976][ T38] #4: ffff88803e48e310 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 706.747064][ T38] #5: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 706.747133][ T38] #6: ffffffff8e051ef0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0xcac/0x2130 [ 706.747203][ T38] #7: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 706.747273][ T38] locks held by kworker/u8:18/11348: 2, on CPU#0: [ 706.747291][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.747359][ T38] #1: ffffc9000e3f7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.747428][ T38] locks held by kworker/u8:19/11349: 2, on CPU#1: [ 706.747446][ T38] #0: ffff88801ff71938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.747512][ T38] #1: ffffc90007b37c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.747581][ T38] locks held by kworker/u8:23/11357: 6, last CPU#0: [ 706.747598][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.747665][ T38] #1: ffffc9000e4bfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.747733][ T38] #2: ffff888025040310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 706.747805][ T38] #3: ffff8880349d4920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 706.747872][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 706.747940][ T38] #5: ffff88801ea85958 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 706.748018][ T38] locks held by kworker/u8:26/11362: 3, on CPU#1: [ 706.748036][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.748103][ T38] #1: ffffc9000e547c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 706.748170][ T38] #2: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 706.748237][ T38] locks held by syz.2.1885/12280: 1, on CPU#1: [ 706.748255][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748315][ T38] locks held by syz-executor/12309: 1, on CPU#0: [ 706.748333][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748393][ T38] locks held by syz-executor/12365: 1, on CPU#0: [ 706.748410][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748471][ T38] locks held by syz-executor/12449: 1, on CPU#0: [ 706.748489][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748548][ T38] locks held by syz.6.1932/12458: 1, on CPU#0: [ 706.748565][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748627][ T38] locks held by syz-executor/12498: 1, on CPU#1: [ 706.748645][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748707][ T38] locks held by syz-executor/12521: 1, on CPU#1: [ 706.748725][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748786][ T38] locks held by syz-executor/12551: 1, on CPU#1: [ 706.748803][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748865][ T38] locks held by syz-executor/12601: 1, on CPU#1: [ 706.748883][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.748944][ T38] locks held by syz-executor/12652: 2, on CPU#1: [ 706.748961][ T38] #0: ffffffff8f5c7240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 706.749027][ T38] #1: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 706.749088][ T38] locks held by syz-executor/12674: 2, on CPU#1: [ 706.749106][ T38] #0: ffffffff8f5c7240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 706.749162][ T38] #1: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 706.749231][ T38] locks held by syz-executor/12697: 2, on CPU#0: [ 706.749248][ T38] #0: ffffffff8f5c7240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 706.749306][ T38] #1: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 706.749372][ T38] locks held by syz-executor/12737: 1, on CPU#0: [ 706.749389][ T38] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 706.749453][ T38] locks held by syz.5.1972/12750: 1, on CPU#0: [ 706.749471][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 706.749532][ T38] locks held by syz-executor/12760: 1, on CPU#1: [ 706.749549][ T38] #0: ffff8880356e8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_status+0x36/0x150 [ 706.749687][ T38] locks held by syz-executor/12762: 2, on CPU#1: [ 706.749706][ T38] #0: ffffffff8e311a30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 706.749774][ T38] #1: ffff88801ea85958 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xef/0x2a0 [ 706.749842][ T38] locks held by kworker/u8:18/12764: 2, last CPU#0: [ 706.749860][ T38] #0: ffff88802ec04250 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb7/0x1590 [ 706.749927][ T38] #1: ffff8880339bcd18 (&lockref->lock){+.+.}-{3:3}, at: lockref_get+0x15/0x60 [ 706.750007][ T38] [ 706.750014][ T38] ============================================= [ 706.750014][ T38] [ 706.750025][ T38] NMI backtrace for cpu 0 [ 706.750046][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 706.750079][ T38] Tainted: [L]=SOFTLOCKUP [ 706.750088][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 706.750102][ T38] Call Trace: [ 706.750112][ T38] [ 706.750123][ T38] dump_stack_lvl+0xe8/0x150 [ 706.750159][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 706.750260][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 706.750288][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 706.750327][ T38] sys_info+0x135/0x170 [ 706.750358][ T38] watchdog+0xfd7/0x1030 [ 706.750401][ T38] ? watchdog+0x1c7/0x1030 [ 706.750436][ T38] kthread+0x38b/0x470 [ 706.750474][ T38] ? __pfx_watchdog+0x10/0x10 [ 706.750499][ T38] ? __pfx_kthread+0x10/0x10 [ 706.750523][ T38] ret_from_fork+0x514/0xb70 [ 706.750548][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 706.750572][ T38] ? __switch_to+0xc89/0x1420 [ 706.750608][ T38] ? __pfx_kthread+0x10/0x10 [ 706.750634][ T38] ret_from_fork_asm+0x1a/0x30 [ 706.750674][ T38] [ 706.750738][ T38] Sending NMI from CPU 0 to CPUs 1: [ 706.750771][ C1] NMI backtrace for cpu 1 [ 706.750793][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 706.750821][ C1] Tainted: [L]=SOFTLOCKUP [ 706.750828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 706.750839][ C1] RIP: 0010:__rcu_read_unlock+0x0/0xe0 [ 706.750867][ C1] Code: d9 80 e1 07 80 c1 03 38 c1 7c dc 48 89 df e8 97 c8 86 00 eb d2 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff [ 706.750883][ C1] RSP: 0018:ffffc90000a2e9d8 EFLAGS: 00000282 [ 706.750901][ C1] RAX: f38b5ffd4e6db100 RBX: ffffc90000a2ea98 RCX: 0000000000000046 [ 706.750916][ C1] RDX: ffffc90000a2ea01 RSI: ffffffff8dae12cb RDI: ffffffff8bcc4c80 [ 706.750931][ C1] RBP: 1ffffffff2188f01 R08: ffffc90000a2f8c8 R09: 0000000000000000 [ 706.750944][ C1] R10: ffffc90000a2ead8 R11: fffff52000145d5d R12: ffffc90000a28000 [ 706.750959][ C1] R13: ffffffff817801bf R14: ffffc90000a2ea88 R15: ffffc90000a2f8d8 [ 706.750973][ C1] FS: 0000000000000000(0000) GS:ffff888125cc2000(0000) knlGS:0000000000000000 [ 706.750990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.751003][ C1] CR2: 00007f49f4e3d3c0 CR3: 00000000581d8000 CR4: 00000000003526f0 [ 706.751023][ C1] Call Trace: [ 706.751030][ C1] [ 706.751037][ C1] unwind_next_frame+0x1baf/0x2550 [ 706.751063][ C1] ? process_backlog+0x564/0xc50 [ 706.751081][ C1] ? unwind_next_frame+0x8f/0x2550 [ 706.751104][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 706.751144][ C1] arch_stack_walk+0x11b/0x150 [ 706.751169][ C1] ? __napi_poll+0xae/0x550 [ 706.751197][ C1] stack_trace_save+0xa9/0x100 [ 706.751220][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 706.751248][ C1] kasan_save_track+0x3e/0x80 [ 706.751274][ C1] ? kasan_save_track+0x3e/0x80 [ 706.751299][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 706.751316][ C1] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 706.751341][ C1] ? __alloc_skb+0x1db/0x7a0 [ 706.751360][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 706.751409][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 706.751456][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 706.751475][ C1] ? nft_do_chain+0x48d/0x1b10 [ 706.751604][ C1] ? nft_do_chain_ipv4+0x195/0x290 [ 706.751776][ C1] ? nf_hook_slow+0xc5/0x220 [ 706.751846][ C1] ? NF_HOOK+0x21f/0x3c0 [ 706.751863][ C1] ? NF_HOOK+0x336/0x3c0 [ 706.751879][ C1] ? process_backlog+0x564/0xc50 [ 706.751922][ C1] __kasan_slab_alloc+0x6c/0x80 [ 706.751943][ C1] kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 706.751969][ C1] ? __alloc_skb+0x1db/0x7a0 [ 706.751988][ C1] ? __alloc_skb+0x1db/0x7a0 [ 706.752009][ C1] __alloc_skb+0x1db/0x7a0 [ 706.752029][ C1] synproxy_send_client_synack+0x175/0xde0 [ 706.752049][ C1] ? lock_acquire+0x115/0x350 [ 706.752072][ C1] ? synproxy_pernet+0x45/0x270 [ 706.752095][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 706.752113][ C1] ? nft_xfrm_get_eval+0x4e4/0x690 [ 706.752133][ C1] ? synproxy_pernet+0x45/0x270 [ 706.752155][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 706.752179][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 706.752202][ C1] ? nf_ip_checksum+0x13c/0x510 [ 706.752224][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 706.752248][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 706.752277][ C1] nft_do_chain+0x48d/0x1b10 [ 706.752298][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 706.752319][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 706.752344][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 706.752368][ C1] ? __lock_acquire+0x747/0x2de0 [ 706.752397][ C1] ? __lock_acquire+0x747/0x2de0 [ 706.752423][ C1] ? nf_conntrack_in+0x18e/0x1610 [ 706.752446][ C1] nft_do_chain_ipv4+0x195/0x290 [ 706.752480][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 706.752502][ C1] ? lock_acquire+0x115/0x350 [ 706.752526][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 706.752548][ C1] nf_hook_slow+0xc5/0x220 [ 706.752577][ C1] NF_HOOK+0x21f/0x3c0 [ 706.752595][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 706.752614][ C1] ? NF_HOOK+0x9e/0x3c0 [ 706.752630][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 706.752649][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 706.752670][ C1] ? ip_local_deliver+0x113/0x190 [ 706.752689][ C1] NF_HOOK+0x336/0x3c0 [ 706.752707][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 706.752725][ C1] ? NF_HOOK+0x9e/0x3c0 [ 706.752741][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 706.752760][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 706.752780][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 706.752797][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 706.752814][ C1] ? process_backlog+0x261/0xc50 [ 706.752831][ C1] process_backlog+0x564/0xc50 [ 706.752850][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 706.752879][ C1] __napi_poll+0xae/0x550 [ 706.752925][ C1] net_rx_action+0x621/0xd70 [ 706.752949][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 706.752966][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 706.752992][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 706.753027][ C1] handle_softirqs+0x1da/0x6d0 [ 706.753057][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 706.753080][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 706.753103][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 706.753128][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 706.753153][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 706.753187][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 706.753220][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 706.753246][ C1] smpboot_thread_fn+0x565/0xa70 [ 706.753273][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 706.753303][ C1] kthread+0x38b/0x470 [ 706.753322][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 706.753347][ C1] ? __pfx_kthread+0x10/0x10 [ 706.753366][ C1] ret_from_fork+0x514/0xb70 [ 706.753386][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 706.753404][ C1] ? __switch_to+0xc89/0x1420 [ 706.753430][ C1] ? __pfx_kthread+0x10/0x10 [ 706.753449][ C1] ret_from_fork_asm+0x1a/0x30 [ 706.753483][ C1] [ 706.753935][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 708.915640][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 708.927676][ T38] Tainted: [L]=SOFTLOCKUP [ 708.932459][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 708.943047][ T38] Call Trace: [ 708.946535][ T38] [ 708.949505][ T38] vpanic+0x56d/0xa60 [ 708.953665][ T38] ? __pfx___schedule+0x10/0x10 [ 708.958928][ T38] ? __pfx_vpanic+0x10/0x10 [ 708.963495][ T38] panic+0xc5/0xd0 [ 708.967493][ T38] ? __pfx_panic+0x10/0x10 [ 708.972102][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 708.977855][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 708.983792][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 708.990150][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 708.996544][ T38] watchdog+0x1030/0x1030 [ 709.001216][ T38] ? watchdog+0x1c7/0x1030 [ 709.005774][ T38] kthread+0x38b/0x470 [ 709.010266][ T38] ? __pfx_watchdog+0x10/0x10 [ 709.015046][ T38] ? __pfx_kthread+0x10/0x10 [ 709.019756][ T38] ret_from_fork+0x514/0xb70 [ 709.024645][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 709.030527][ T38] ? __switch_to+0xc89/0x1420 [ 709.035586][ T38] ? __pfx_kthread+0x10/0x10 [ 709.040199][ T38] ret_from_fork_asm+0x1a/0x30 [ 709.045171][ T38] [ 709.048351][ T38] Kernel Offset: disabled [ 709.052776][ T38] Rebooting in 86400 seconds..