last executing test programs: 26m33.084607463s ago: executing program 0 (id=538): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0x14, 0x1, 0x9, &(0x7f0000000580)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x1ff, 0x4) 26m31.712821407s ago: executing program 0 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 26m30.458205397s ago: executing program 0 (id=542): socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x2040009, 0x600) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendfile(r0, r0, 0x0, 0x2000009) 26m25.845725314s ago: executing program 0 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff9}]}]}, 0x50}}, 0x0) 26m24.750497183s ago: executing program 0 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0xf2, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r5, r6, 0x0) 26m21.937863573s ago: executing program 0 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x8824) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0xc008744c, &(0x7f0000000180)) 26m6.572282009s ago: executing program 32 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x8824) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0xc008744c, &(0x7f0000000180)) 17m55.135942229s ago: executing program 1 (id=1554): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) writev(r0, &(0x7f0000003540)=[{&(0x7f00000010c0)="8eee", 0x2}], 0x1) 17m53.614039596s ago: executing program 1 (id=1557): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 17m51.33852814s ago: executing program 1 (id=1559): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) 17m48.467998414s ago: executing program 1 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 17m43.002148088s ago: executing program 1 (id=1573): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x12}}, 0x8) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x59}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') pread64(r6, &(0x7f0000000180)=""/42, 0x2a, 0x8004) ioctl$UI_SET_PHYS(r6, 0x4004556c, &(0x7f0000000300)='syz0\x00') syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_fetch_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x4, 0x5c2, 0x0, 0x0}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x48000, 0x0) ioctl$TIOCGSID(r7, 0x5429, 0x0) io_uring_enter(r2, 0x66a1, 0xfffffffd, 0x9, 0x0, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) r9 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \aMaster Capture!Switch\' '], 0x33) close(r10) syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a92000905021010000204070905640208000803080905030010"], 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdafb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x40) write(r9, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) ioctl$FE_SET_PROPERTY(r8, 0x40086f52, &(0x7f0000000040)={0x2, &(0x7f00000006c0)=[{0xc, '\x00', @buffer={"d533d2e865bfe29c4c40aa3355f3d9b54edf2acbbe53acfd86cfa45c1ca806a3", 0x20}, 0x6}, {0x24, '\x00', @data=0x10}]}) 17m39.594879504s ago: executing program 1 (id=1580): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000004fc0)=ANY=[@ANYBLOB="bf060000750100b40600000645dd30c822b6e51e5c9c593945ac3ce9295b3d3226019fe9fb1d348dcf22d5d3c58d5cfca8ef572b227d24fe3097a98d9eb9ba825d22e5f071c5f1ebd11b69c33748ad86dd7e185d4aaf9fe884fe9f2a60d19b4ee91de078f5c0b4ba7def396a016f5de5e7262d95f9acdbe9c756d8b46c99f1548a7cd446b3c695e91fdbd219c142f5e50b6a87d3c30b86c0195cc0bc2d5d2b5c1ee6ce63cd95eac29b905b41b23eb58cae118e2ab67d589c7de9ac55952e451d519fe383a42508753c8d935cff6fc09cdecd32f98336cdf4a03718bb0c0a8225e1366e18bb53d816e5269e0000c3f498d6e4da9ef9c449a2ad8c16991afa94360d32bea2a4005b09a944b415b655038c8d830caf36c398f6fd1fc9a635cf64770a7c227c5fcdebebd5e5af8d8a43bd04703832f5274cc3575bf613da3c444fd47850ccfe01b872749fd3dc636d5c75a44500c454fd1476e94869518c4c69c85470120b858a5ff5986b591ef50865b69710eec3af4e5f593e085b7e2a29161251484c5b835f2c52ddccd908037038f9cb4f7d32a799629c936242a2b2882b53ff33b0c69377540db016b5eff4268f1c52630db5b3c0e78252e0ee9d4c0123c93b2fdcba10bc4fde3b520ad27f8fc5b5c2fb9a34bf5d2f5e62e5e5a6456298a8011bc69afb7d0fa6fce53087e11b08cd76568de36172d30df46fac972de33589a7de7a20787bd1c5b9453ffd928a6473a0a63ea9db1b2b0af42b1d2c9db91f98b44ca2612c4b96edc92f206e7a2962d51f63c8a722c357e8cddb87bef4adee139128b31f40c754d91535b37215e6941895900e2d71569b173109027bbb0c97970a1979f52acc4ba88e4eaa6f976a7d31eb0a55316821e4983b44a74348514597dd98"], 0x6bf) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 17m39.585355164s ago: executing program 33 (id=1580): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000004fc0)=ANY=[@ANYBLOB="bf060000750100b40600000645dd30c822b6e51e5c9c593945ac3ce9295b3d3226019fe9fb1d348dcf22d5d3c58d5cfca8ef572b227d24fe3097a98d9eb9ba825d22e5f071c5f1ebd11b69c33748ad86dd7e185d4aaf9fe884fe9f2a60d19b4ee91de078f5c0b4ba7def396a016f5de5e7262d95f9acdbe9c756d8b46c99f1548a7cd446b3c695e91fdbd219c142f5e50b6a87d3c30b86c0195cc0bc2d5d2b5c1ee6ce63cd95eac29b905b41b23eb58cae118e2ab67d589c7de9ac55952e451d519fe383a42508753c8d935cff6fc09cdecd32f98336cdf4a03718bb0c0a8225e1366e18bb53d816e5269e0000c3f498d6e4da9ef9c449a2ad8c16991afa94360d32bea2a4005b09a944b415b655038c8d830caf36c398f6fd1fc9a635cf64770a7c227c5fcdebebd5e5af8d8a43bd04703832f5274cc3575bf613da3c444fd47850ccfe01b872749fd3dc636d5c75a44500c454fd1476e94869518c4c69c85470120b858a5ff5986b591ef50865b69710eec3af4e5f593e085b7e2a29161251484c5b835f2c52ddccd908037038f9cb4f7d32a799629c936242a2b2882b53ff33b0c69377540db016b5eff4268f1c52630db5b3c0e78252e0ee9d4c0123c93b2fdcba10bc4fde3b520ad27f8fc5b5c2fb9a34bf5d2f5e62e5e5a6456298a8011bc69afb7d0fa6fce53087e11b08cd76568de36172d30df46fac972de33589a7de7a20787bd1c5b9453ffd928a6473a0a63ea9db1b2b0af42b1d2c9db91f98b44ca2612c4b96edc92f206e7a2962d51f63c8a722c357e8cddb87bef4adee139128b31f40c754d91535b37215e6941895900e2d71569b173109027bbb0c97970a1979f52acc4ba88e4eaa6f976a7d31eb0a55316821e4983b44a74348514597dd98"], 0x6bf) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 11m14.72320743s ago: executing program 5 (id=3112): r0 = socket(0x2, 0x80805, 0x0) sendto$inet(r0, &(0x7f0000000080)='f', 0x1, 0x4000000, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) 11m14.340995604s ago: executing program 5 (id=3114): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) 11m14.191421544s ago: executing program 5 (id=3116): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@random="cd25bedc5420", @empty, @void, {@x25={0x805, {0x0, 0x9e, 0x1}}}}, 0x0) 11m14.190329751s ago: executing program 5 (id=3117): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x102280}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) set_mempolicy(0x4005, 0x0, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ftruncate(0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x20) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) 11m13.844804892s ago: executing program 5 (id=3118): r0 = syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003024ed7f9e753754f2e421c4a6e9dc90000000203"]}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000002800)={0x0, 0x21, 0x2015, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="000000598dc30b15317977101fca1dca2b62f9140000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = userfaultfd(0x80801) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b3"}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES64=r5], 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000001c0)={{0x8, 0x67}, 0x1, 0x9, 0xfffffc01, {0x0, 0x53}, 0x1, 0x10}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x9}) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xf8}}, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) listen(r7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x1ea, 0x8, 0x0, 0x3ff}, {0x1800, 0xb1, 0x3, 0x7}, {0x8, 0x0, 0xf6, 0x3}, {0x2ed0, 0x1, 0x9, 0x7}, {0x2, 0xf7, 0x4e, 0x80}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0xffffffffffffffff, &(0x7f0000000a40), &(0x7f00000007c0), 0xb9, r2}, 0x38) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000100)=0xd) 11m13.244988261s ago: executing program 5 (id=3121): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x9, 0xc000, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) semop(0x0, 0x0, 0x0) migrate_pages(0x0, 0x100, &(0x7f0000000000)=0x6, &(0x7f0000000100)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_setup(0x3204, &(0x7f000000c480)={0x0, 0xe8dd, 0x800, 0x20001, 0x1c3}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$ptys(0xc, 0x3, 0x0) 10m57.873249687s ago: executing program 34 (id=3121): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x9, 0xc000, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) semop(0x0, 0x0, 0x0) migrate_pages(0x0, 0x100, &(0x7f0000000000)=0x6, &(0x7f0000000100)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_setup(0x3204, &(0x7f000000c480)={0x0, 0xe8dd, 0x800, 0x20001, 0x1c3}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$ptys(0xc, 0x3, 0x0) 25.877608968s ago: executing program 2 (id=6072): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) setns(0xc9, 0x0) 24.410496601s ago: executing program 2 (id=6076): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)=""/245, 0xf5}, 0xfffffff7}], 0x1, 0x2143, 0x0) 23.296532911s ago: executing program 2 (id=6078): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x20, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0x7d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 22.71231467s ago: executing program 4 (id=6085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 22.697088032s ago: executing program 7 (id=6087): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 22.558218853s ago: executing program 4 (id=6088): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)=""/245, 0xf5}, 0xfffffff7}], 0x1, 0x2143, 0x0) 22.528638226s ago: executing program 2 (id=6090): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x10b, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb08"], 0x0) 22.46266809s ago: executing program 7 (id=6092): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2a45e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) 21.116536767s ago: executing program 6 (id=6093): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 21.116333872s ago: executing program 4 (id=6094): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071000c000000000095000300"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) 20.299546623s ago: executing program 7 (id=6095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 20.099930489s ago: executing program 4 (id=6096): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x9}}}, 0x7) 19.424481707s ago: executing program 4 (id=6097): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x1004000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000980)="bba031ff5393", 0x6}], 0x1) 19.275924888s ago: executing program 7 (id=6099): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00"], 0x48}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) 19.184859693s ago: executing program 6 (id=6100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 19.1460935s ago: executing program 7 (id=6102): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 19.121489312s ago: executing program 2 (id=6103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.036955809s ago: executing program 4 (id=6104): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 18.913004036s ago: executing program 6 (id=6105): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x20, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0x7d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 18.833069742s ago: executing program 2 (id=6107): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18.808228063s ago: executing program 7 (id=6108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 18.659273521s ago: executing program 3 (id=6109): socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) socket$inet6(0xa, 0x3, 0x7) 17.771349534s ago: executing program 6 (id=6110): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 17.622433129s ago: executing program 6 (id=6111): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x2, 0x0, 0x6, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46"], 0x78) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 17.428587499s ago: executing program 3 (id=6112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17.408616656s ago: executing program 6 (id=6113): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00"], 0x48}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) 16.443708444s ago: executing program 3 (id=6114): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1004000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000980)="bba031ff5393", 0x6}], 0x1) 16.27259426s ago: executing program 3 (id=6115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 16.174786517s ago: executing program 3 (id=6116): unshare(0x8040480) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020000000058528c88d7a4000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x0, 0x4}, 0x20) 15.998589892s ago: executing program 3 (id=6117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, 0x0, &(0x7f00000006c0)}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) 3.61461214s ago: executing program 35 (id=6108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 2.117344644s ago: executing program 36 (id=6107): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.812246808s ago: executing program 37 (id=6104): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 1.063165041s ago: executing program 38 (id=6113): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00"], 0x48}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) 0s ago: executing program 39 (id=6117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, 0x0, &(0x7f00000006c0)}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) kernel console output (not intermixed with test programs): T,(full)} [ 1589.292679][T22107] Tainted: [L]=SOFTLOCKUP [ 1589.292687][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1589.292713][T22107] Call Trace: [ 1589.292722][T22107] [ 1589.292731][T22107] dump_stack_lvl+0xe8/0x150 [ 1589.292766][T22107] should_fail_ex+0x46b/0x600 [ 1589.292799][T22107] _copy_from_user+0x2d/0xb0 [ 1589.292830][T22107] do_sys_poll+0x258/0xf50 [ 1589.292866][T22107] ? __pfx_do_sys_poll+0x10/0x10 [ 1589.292893][T22107] ? lock_acquire+0x115/0x350 [ 1589.292979][T22107] ? futex_wait+0x2a2/0x390 [ 1589.293007][T22107] ? __pfx_futex_wait+0x10/0x10 [ 1589.293056][T22107] ? set_user_sigmask+0xcd/0x1c0 [ 1589.293084][T22107] ? __pfx_set_user_sigmask+0x10/0x10 [ 1589.293122][T22107] __se_sys_ppoll+0x209/0x2b0 [ 1589.293158][T22107] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1589.293196][T22107] ? __x64_sys_ppoll+0x20/0xc0 [ 1589.293229][T22107] do_syscall_64+0x166/0x520 [ 1589.293249][T22107] ? trace_irq_disable+0x3b/0x140 [ 1589.293274][T22107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.293299][T22107] ? clear_bhb_loop+0x70/0xc0 [ 1589.293324][T22107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.293345][T22107] RIP: 0033:0x7f30ea81e159 [ 1589.293363][T22107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.293381][T22107] RSP: 002b:00007f30e8a76028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1589.293404][T22107] RAX: ffffffffffffffda RBX: 00007f30eaaa5fa0 RCX: 00007f30ea81e159 [ 1589.293419][T22107] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1589.293434][T22107] RBP: 00007f30ea8b506b R08: 0000000000000000 R09: 0000000000000000 [ 1589.293448][T22107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.293461][T22107] R13: 00007f30eaaa6038 R14: 00007f30eaaa5fa0 R15: 00007ffe10d2f4e8 [ 1589.293493][T22107] [ 1590.408398][T22138] tmpfs: Bad value for 'nr_inodes' [ 1590.646457][T22122] bridge0: port 3(netdevsim0) entered disabled state [ 1590.646893][T22122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.704294][T22122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.721413][T22122] bridge0: port 3(netdevsim0) entered blocking state [ 1590.721564][T22122] bridge0: port 3(netdevsim0) entered forwarding state [ 1590.721932][T22122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.722089][T22122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.769593][T22122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.769785][T22122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.826631][T22122] team0: Port device bridge0 added [ 1592.728485][T18039] hsr_slave_0: left promiscuous mode [ 1592.958254][T22174] sctp: [Deprecated]: syz.3.4487 (pid 22174) Use of int in maxseg socket option. [ 1592.958254][T22174] Use struct sctp_assoc_value instead [ 1593.023099][T18039] hsr_slave_1: left promiscuous mode [ 1593.026273][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.026299][T18039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.087791][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1593.087810][T18039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.321304][T18039] veth1_macvtap: left promiscuous mode [ 1593.321392][T18039] veth0_macvtap: left promiscuous mode [ 1594.108341][T22190] fuse: Bad value for 'fd' [ 1594.166435][T22193] netlink: 'syz.7.4495': attribute type 10 has an invalid length. [ 1594.166458][T22193] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4495'. [ 1594.381092][T22197] netlink: 'syz.4.4497': attribute type 16 has an invalid length. [ 1594.381116][T22197] netlink: 'syz.4.4497': attribute type 17 has an invalid length. [ 1594.854757][T18039] team0 (unregistering): Port device team_slave_1 removed [ 1594.915425][T18039] team0 (unregistering): Port device team_slave_0 removed [ 1595.300540][ T5247] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1595.302465][ T5811] infiniband syz0: ib_query_port failed (-19) [ 1595.413370][T22193] ipvlan2: entered promiscuous mode [ 1595.813157][T12596] smbdirect: ib_dev[syz0] removed [ 1598.356426][T22234] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1598.853599][T21523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1599.030897][T21523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1599.034884][T21523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1599.043979][ T43] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1599.096618][T21523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1599.162900][T21523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1599.193963][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1599.194962][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1599.196637][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.196660][ T43] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1599.196709][ T43] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1599.196834][ T43] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1599.196877][ T43] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1599.196900][ T43] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1599.201619][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.201645][ T43] usb 5-1: Product: syz [ 1599.201660][ T43] usb 5-1: Manufacturer: syz [ 1599.201675][ T43] usb 5-1: SerialNumber: syz [ 1599.483026][T22259] 9p: Could not find request transport: Lò;-O§»â–qunix [ 1599.833675][T21523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1599.835956][T22250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.844321][T22250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.891078][T21523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1599.935737][T22250] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1599.935757][T22250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1599.954609][T22250] vhci_hcd vhci_hcd.0: Device attached [ 1600.028245][T22270] vhci_hcd: connection closed [ 1600.038385][T21523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1600.074551][T22273] vhci_hcd vhci_hcd.0: port 0 already used [ 1600.075696][T18035] vhci_hcd vhci_hcd.4: stop threads [ 1600.075723][T18035] vhci_hcd vhci_hcd.4: release socket [ 1600.075761][T18035] vhci_hcd vhci_hcd.4: disconnect device [ 1600.335629][ T43] usb 5-1: selecting invalid altsetting 0 [ 1600.336113][ T43] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1600.336597][ T43] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1600.670926][ T43] usb 5-1: USB disconnect, device number 96 [ 1600.786929][T21603] udevd[21603]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: No such file or directory [ 1600.817729][T21605] udevd[21605]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.949217][T21523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.036397][T21523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.076452][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.076679][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.119943][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.120072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.351218][T22297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.363312][T22297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.779655][T22301] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1603.496630][ T43] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1603.675447][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1603.676259][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1603.677495][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.677524][ T43] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1603.677574][ T43] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1603.677605][ T43] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1603.677627][ T43] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1603.677639][ T43] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1603.679954][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.679979][ T43] usb 5-1: Product: syz [ 1603.679993][ T43] usb 5-1: Manufacturer: syz [ 1603.680007][ T43] usb 5-1: SerialNumber: syz [ 1604.177368][T22333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.179834][T22333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.206846][T22333] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1604.206875][T22333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1604.208533][T22333] vhci_hcd vhci_hcd.0: Device attached [ 1604.220764][T22333] vhci_hcd vhci_hcd.0: port 0 already used [ 1604.247354][T22356] vhci_hcd: connection closed [ 1604.248213][ T4175] vhci_hcd vhci_hcd.4: stop threads [ 1604.248317][ T4175] vhci_hcd vhci_hcd.4: release socket [ 1604.302740][ T4175] vhci_hcd vhci_hcd.4: disconnect device [ 1604.627726][ T43] usb 5-1: selecting invalid altsetting 0 [ 1604.631434][ T43] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1604.633197][ T43] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1604.723280][T21523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.792415][T22368] vlan0: entered promiscuous mode [ 1604.793477][T22367] vlan0: left promiscuous mode [ 1605.008129][ T43] usb 5-1: USB disconnect, device number 97 [ 1605.111831][T21523] veth0_vlan: entered promiscuous mode [ 1605.139300][T21523] veth1_vlan: entered promiscuous mode [ 1605.196851][T22380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1605.438782][T21523] veth0_macvtap: entered promiscuous mode [ 1605.441354][T21455] udevd[21455]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.508775][T21523] veth1_macvtap: entered promiscuous mode [ 1605.644451][T21523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.702457][T21523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.789680][T18039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.789725][T18039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.789758][T18039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.789792][T18039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.080723][T22405] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1607.463722][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.463977][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.752760][T22416] netlink: 'syz.6.4552': attribute type 2 has an invalid length. [ 1608.260806][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1608.330718][T18039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.330741][T18039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.603277][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.603298][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.297388][T22452] »»»»»»: renamed from vlan0 (while UP) [ 1609.782060][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1609.822450][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1609.883153][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1609.904280][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1609.906046][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1610.145822][T22464] sctp: [Deprecated]: syz.2.4570 (pid 22464) Use of int in maxseg socket option. [ 1610.145822][T22464] Use struct sctp_assoc_value instead [ 1612.435343][T17990] Bluetooth: hci0: command tx timeout [ 1613.976610][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1614.117367][T19300] bond1: (slave syz_tun): Releasing active interface [ 1614.164579][ T43] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1614.165839][ T43] usb 3-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.165873][ T43] usb 3-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1614.165902][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1614.165935][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.225854][ T43] usb 3-1: config 0 descriptor?? [ 1614.425711][T22503] sctp: [Deprecated]: syz.3.4583 (pid 22503) Use of int in maxseg socket option. [ 1614.425711][T22503] Use struct sctp_assoc_value instead [ 1614.494546][T17990] Bluetooth: hci0: command tx timeout [ 1614.784988][T22515] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4587'. [ 1615.256722][T22511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.258024][T22511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.545749][T22511] bridge_slave_0: left allmulticast mode [ 1615.545796][T22511] bridge_slave_0: left promiscuous mode [ 1615.546090][T22511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.732938][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 1615.744055][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1615.748173][ T43] usb 3-1: USB disconnect, device number 22 [ 1615.844853][T22511] bridge_slave_1: left allmulticast mode [ 1615.844889][T22511] bridge_slave_1: left promiscuous mode [ 1615.845129][T22511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.080146][T22511] bond0: (slave bond_slave_0): Releasing backup interface [ 1616.154773][T22511] bond0: (slave bond_slave_1): Releasing backup interface [ 1616.247037][T22511] team0: Port device team_slave_0 removed [ 1616.306579][T22511] team0: Port device team_slave_1 removed [ 1616.374663][T22511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.381510][T22511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.489074][T22511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.497579][T22511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.551560][T22511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1616.604110][T17990] Bluetooth: hci0: command tx timeout [ 1618.659222][T17990] Bluetooth: hci0: command tx timeout [ 1619.209928][T18039] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.492230][T22607] sctp: [Deprecated]: syz.4.4620 (pid 22607) Use of int in maxseg socket option. [ 1620.492230][T22607] Use struct sctp_assoc_value instead [ 1623.449448][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 1623.449468][ T36] audit: type=1326 audit(1790338308.184:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449513][ T36] audit: type=1326 audit(1790338308.184:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449552][ T36] audit: type=1326 audit(1790338308.184:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449591][ T36] audit: type=1326 audit(1790338308.184:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449630][ T36] audit: type=1326 audit(1790338308.184:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449667][ T36] audit: type=1326 audit(1790338308.184:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449703][ T36] audit: type=1326 audit(1790338308.184:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449739][ T36] audit: type=1326 audit(1790338308.184:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1623.449776][ T36] audit: type=1326 audit(1790338308.184:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22619 comm="syz.2.4623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1624.030248][T18039] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.152363][T22615] Bluetooth: hci2: command 0x0406 tx timeout [ 1625.199958][T22616] Bluetooth: hci6: command 0x0406 tx timeout [ 1625.940098][T22650] sctp: [Deprecated]: syz.2.4631 (pid 22650) Use of int in maxseg socket option. [ 1625.940098][T22650] Use struct sctp_assoc_value instead [ 1629.266290][T18039] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.724012][T18039] bridge0: port 3(netdevsim0) entered disabled state [ 1630.853944][T17539] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1631.007863][T17539] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1631.012995][T18039] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1631.013036][T18039] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 1631.032534][T18039] bridge0: port 3(netdevsim0) entered disabled state [ 1631.057350][T17539] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.057382][T17539] usb 5-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1631.057397][T17539] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1631.057416][T17539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.108486][T17539] usb 5-1: config 0 descriptor?? [ 1631.459009][T18039] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.100289][T22457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.100622][T22457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.100787][T22457] bridge_slave_0: entered allmulticast mode [ 1632.103680][T22457] bridge_slave_0: entered promiscuous mode [ 1632.109313][T22457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.109676][T22457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.109840][T22457] bridge_slave_1: entered allmulticast mode [ 1632.112820][T22457] bridge_slave_1: entered promiscuous mode [ 1632.178701][T22457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.190548][T22457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.320386][T22457] team0: Port device team_slave_0 added [ 1632.344051][T22457] team0: Port device team_slave_1 added [ 1632.606811][T17539] usbhid 5-1:0.0: can't add hid device: -71 [ 1632.606933][T17539] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1632.644673][T17539] usb 5-1: USB disconnect, device number 98 [ 1633.678313][T22457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.678332][T22457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.678365][T22457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.707637][T22457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.707656][T22457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.707683][T22457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.675973][ T5720] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1634.922827][ T5720] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1634.957966][ T5720] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.958052][ T5720] usb 5-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1634.958131][ T5720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1634.958310][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.232470][ T5720] usb 5-1: config 0 descriptor?? [ 1636.090505][T22457] hsr_slave_0: entered promiscuous mode [ 1636.094805][T22457] hsr_slave_1: entered promiscuous mode [ 1636.096748][T22457] debugfs: 'hsr0' already exists in 'hsr' [ 1636.096775][T22457] Cannot create hsr debugfs directory [ 1636.397365][T18039] bridge_slave_1: left allmulticast mode [ 1636.397404][T18039] bridge_slave_1: left promiscuous mode [ 1636.397760][T18039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.516811][T18039] bridge_slave_0: left allmulticast mode [ 1636.516850][T18039] bridge_slave_0: left promiscuous mode [ 1636.517593][T18039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.861781][ T5720] usbhid 5-1:0.0: can't add hid device: -71 [ 1636.861902][ T5720] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1636.889104][ T5720] usb 5-1: USB disconnect, device number 99 [ 1638.213136][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1638.630023][T18039] team0: Port device bridge0 removed [ 1639.058284][T18039] team0: Port device bridge2 removed [ 1639.584545][T18039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.665040][T18039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.707354][T18039] bond0 (unregistering): Released all slaves [ 1639.744802][T18039] bond1 (unregistering): (slave veth3): Releasing active interface [ 1639.808892][T18039] bond1 (unregistering): Released all slaves [ 1639.831364][T18039] bond2 (unregistering): Released all slaves [ 1639.853056][T18039] bond3 (unregistering): Released all slaves [ 1641.250322][T22824] netlink: 'syz.4.4693': attribute type 1 has an invalid length. [ 1641.383494][T22825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1641.847840][T22824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1641.930320][T22829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4695'. [ 1642.313262][ T36] audit: type=1326 audit(1790338327.044:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.313598][ T36] audit: type=1326 audit(1790338327.044:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.313640][ T36] audit: type=1326 audit(1790338327.044:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.313680][ T36] audit: type=1326 audit(1790338327.044:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.343717][ T36] audit: type=1326 audit(1790338327.074:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.343889][ T36] audit: type=1326 audit(1790338327.074:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.404573][ T36] audit: type=1326 audit(1790338327.144:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.404622][ T36] audit: type=1326 audit(1790338327.144:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.407008][ T36] audit: type=1326 audit(1790338327.144:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.407063][ T36] audit: type=1326 audit(1790338327.144:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22844 comm="syz.3.4699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8434d7e159 code=0x7ffc0000 [ 1642.470624][T22847] netlink: 'syz.3.4699': attribute type 2 has an invalid length. [ 1642.823584][T22856] netlink: 'syz.3.4699': attribute type 2 has an invalid length. [ 1643.113224][T22865] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 1643.168974][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1643.168998][T22867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1643.657894][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1643.803862][T22865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1643.828846][T22870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1644.515685][T18039] hsr_slave_0: left promiscuous mode [ 1644.589916][T18039] hsr_slave_1: left promiscuous mode [ 1644.591207][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1644.591235][T18039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.618540][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.618568][T18039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.695065][T18039] veth1_macvtap: left promiscuous mode [ 1644.695158][T18039] veth0_macvtap: left promiscuous mode [ 1644.695316][T18039] veth1_vlan: left promiscuous mode [ 1644.788465][T18039] veth0_vlan: left promiscuous mode [ 1645.519795][T22905] netlink: 'syz.3.4719': attribute type 1 has an invalid length. [ 1645.577040][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1645.577063][T22908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1647.038143][T18039] team0 (unregistering): Port device team_slave_1 removed [ 1647.709428][T22905] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1647.752692][T22939] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1648.923091][T22979] netlink: 'syz.4.4745': attribute type 1 has an invalid length. [ 1649.022630][T22980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1649.022655][T22980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1649.546003][T22979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1649.577791][T22983] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1651.943535][T23028] netlink: 'syz.4.4757': attribute type 1 has an invalid length. [ 1652.000323][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1652.000357][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1652.180004][T23028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1653.208170][T22457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1653.258525][T22457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1653.279337][T22457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1653.346088][T22457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1653.346753][T22457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1653.399175][T22457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1653.404467][T22457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1653.473664][T22457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1654.009960][T22457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.050150][T22457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.060007][T18039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.060205][T18039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.092246][T18039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.092379][T18039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.776390][T17338] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1654.933940][T17338] usb 3-1: Using ep0 maxpacket: 32 [ 1654.934859][T17338] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1654.940512][T17338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.940537][T17338] usb 3-1: Product: syz [ 1654.940552][T17338] usb 3-1: Manufacturer: syz [ 1654.940566][T17338] usb 3-1: SerialNumber: syz [ 1654.964451][T17338] usb 3-1: config 0 descriptor?? [ 1655.019183][T17338] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1655.019287][T17338] dvb-usb: bulk message failed: -22 (4/0) [ 1655.019303][T17338] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1655.019407][T17338] dvb-usb: bulk message failed: -22 (5/0) [ 1655.019419][T17338] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1655.085555][T17338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1655.087829][T17338] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1655.087893][T17338] usb 3-1: media controller created [ 1655.142769][T17338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1655.280864][T17338] usb 3-1: selecting invalid altsetting 3 [ 1655.280887][T17338] ttusb2: set interface to alts=3 failed [ 1655.370718][T22457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.501667][T17338] DVB: Unable to find symbol tda10086_attach() [ 1655.501687][T17338] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1655.502528][T17338] dvb-usb: bulk message failed: -22 (4/0) [ 1655.502548][T17338] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1655.502672][T17338] dvb-usb: bulk message failed: -22 (5/0) [ 1655.502687][T17338] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1655.502753][T17338] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1656.107171][T22457] veth0_vlan: entered promiscuous mode [ 1656.205634][T22457] veth1_vlan: entered promiscuous mode [ 1656.338475][T22457] veth0_macvtap: entered promiscuous mode [ 1656.383499][T22457] veth1_macvtap: entered promiscuous mode [ 1656.489687][T22457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.548115][T22457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.655627][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.655673][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.655708][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.655741][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.603003][T17338] usb 3-1: USB disconnect, device number 23 [ 1657.962494][T17338] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1659.220527][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.220550][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.506122][ T1804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.506145][ T1804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.440298][T23176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4804'. [ 1663.868234][T23264] syz.4.4834: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1663.868654][T23264] CPU: 1 UID: 0 PID: 23264 Comm: syz.4.4834 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1663.868684][T23264] Tainted: [L]=SOFTLOCKUP [ 1663.868692][T23264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1663.868705][T23264] Call Trace: [ 1663.868714][T23264] [ 1663.868724][T23264] dump_stack_lvl+0xe8/0x150 [ 1663.868764][T23264] warn_alloc+0x24d/0x270 [ 1663.868801][T23264] ? __pfx_warn_alloc+0x10/0x10 [ 1663.868836][T23264] ? __schedule+0x16ef/0x5700 [ 1663.868877][T23264] ? register_lock_class+0x31/0x2e0 [ 1663.868903][T23264] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1663.868960][T23264] __vmalloc_node_range_noprof+0x127/0x1540 [ 1663.868987][T23264] ? __lock_acquire+0x747/0x2de0 [ 1663.869027][T23264] ? __pfx___schedule+0x10/0x10 [ 1663.869055][T23264] ? irqentry_exit+0x218/0x910 [ 1663.869077][T23264] ? irqentry_exit+0x218/0x910 [ 1663.869101][T23264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1663.869136][T23264] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1663.869163][T23264] vmalloc_noprof+0xb2/0xe0 [ 1663.869187][T23264] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1663.869215][T23264] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1663.869241][T23264] ? dvb_demux_do_ioctl+0x323/0x540 [ 1663.869270][T23264] dvb_demux_do_ioctl+0x460/0x540 [ 1663.869299][T23264] dvb_usercopy+0x199/0x2e0 [ 1663.869322][T23264] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1663.869347][T23264] ? __pfx_dvb_usercopy+0x10/0x10 [ 1663.869382][T23264] ? __fget_files+0x3a8/0x420 [ 1663.869404][T23264] ? __fget_files+0x2a/0x420 [ 1663.869428][T23264] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1663.869452][T23264] dvb_demux_ioctl+0x29/0x40 [ 1663.869478][T23264] __se_sys_ioctl+0xff/0x170 [ 1663.869508][T23264] do_syscall_64+0x166/0x520 [ 1663.869528][T23264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.869550][T23264] ? clear_bhb_loop+0x70/0xc0 [ 1663.869575][T23264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.869596][T23264] RIP: 0033:0x7fc895c5e159 [ 1663.869616][T23264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.869634][T23264] RSP: 002b:00007fc893e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.869657][T23264] RAX: ffffffffffffffda RBX: 00007fc895ee6090 RCX: 00007fc895c5e159 [ 1663.869673][T23264] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000a [ 1663.869688][T23264] RBP: 00007fc895cf506b R08: 0000000000000000 R09: 0000000000000000 [ 1663.869702][T23264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1663.869715][T23264] R13: 00007fc895ee6128 R14: 00007fc895ee6090 R15: 00007ffe04e2a458 [ 1663.869749][T23264] [ 1663.869782][T23264] Mem-Info: [ 1663.869858][T23264] active_anon:267 inactive_anon:23715 isolated_anon:0 [ 1663.869858][T23264] active_file:26334 inactive_file:16442 isolated_file:0 [ 1663.869858][T23264] unevictable:0 dirty:29 writeback:0 [ 1663.869858][T23264] slab_reclaimable:9658 slab_unreclaimable:106892 [ 1663.869858][T23264] mapped:30036 shmem:17585 pagetables:4054 [ 1663.869858][T23264] sec_pagetables:0 bounce:0 [ 1663.869858][T23264] kernel_misc_reclaimable:0 [ 1663.869858][T23264] free:1278371 free_pcp:8674 free_cma:0 [ 1663.870045][T23264] Node 0 active_anon:1068kB inactive_anon:94856kB active_file:105148kB inactive_file:65700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120100kB dirty:116kB writeback:0kB shmem:70340kB kernel_stack:14436kB pagetables:16052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1663.870154][T23264] Node 1 active_anon:0kB inactive_anon:4kB active_file:188kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1663.870215][T23264] Node 0 DMA free:15352kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1663.870385][T23264] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1663.871104][T23264] Node 0 DMA32 free:1157448kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1068kB inactive_anon:94856kB active_file:105148kB inactive_file:65700kB unevictable:0kB writepending:116kB zspages:200kB present:3129332kB managed:2559048kB mlocked:0kB bounce:0kB free_pcp:34436kB local_pcp:3924kB free_cma:0kB [ 1663.871228][T23264] lowmem_reserve[]: 0 0 1 1 1 [ 1663.871425][T23264] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1663.871594][T23264] lowmem_reserve[]: 0 0 0 0 0 [ 1663.871887][T23264] Node 1 Normal free:3940684kB boost:2048kB min:8416kB low:12524kB high:16632kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:188kB inactive_file:68kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 1663.872057][T23264] lowmem_reserve[]: 0 0 0 0 0 [ 1663.872197][T23264] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15352kB [ 1663.873184][T23264] Node 0 DMA32: 145*4kB (UME) 1434*8kB (UE) 1104*16kB (UE) 982*32kB (UME) 789*64kB (UE) 536*128kB (UME) 439*256kB (UME) 261*512kB (UME) 172*1024kB (UME) 7*2048kB (UME) 132*4096kB (UM) = 1157396kB [ 1663.874341][T23264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1663.875076][T23264] Node 1 Normal: 1*4kB (M) 1*8kB (U) 2*16kB (M) 23*32kB (UM) 19*64kB (UM) 15*128kB (UM) 12*256kB (UM) 7*512kB (UM) 10*1024kB (UM) 10*2048kB (UM) 952*4096kB (U) = 3940684kB [ 1663.886919][T23264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1663.886978][T23264] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1663.887152][T23264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1663.887231][T23264] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1663.887361][T23264] 60347 total pagecache pages [ 1663.887417][T23264] 2 pages in swap cache [ 1663.887608][T23264] Free swap = 124916kB [ 1663.887690][T23264] Total swap = 124996kB [ 1663.887758][T23264] 2097051 pages RAM [ 1663.887822][T23264] 0 pages HighMem/MovableOnly [ 1663.887890][T23264] 425221 pages reserved [ 1663.888058][T23264] 0 pages cma reserved [ 1666.605610][ T36] kauditd_printk_skb: 186 callbacks suppressed [ 1666.605630][ T36] audit: type=1326 audit(1790338351.344:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.606203][ T36] audit: type=1326 audit(1790338351.344:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.606327][ T36] audit: type=1326 audit(1790338351.344:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.607308][ T36] audit: type=1326 audit(1790338351.344:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.607422][ T36] audit: type=1326 audit(1790338351.344:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.607567][ T36] audit: type=1326 audit(1790338351.344:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.610101][ T36] audit: type=1326 audit(1790338351.344:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1666.610609][ T36] audit: type=1326 audit(1790338351.344:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.2.4838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1667.924326][T23304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1668.066415][T17539] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1668.233900][T17539] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1668.233959][T17539] usb 7-1: no configurations [ 1668.233972][T17539] usb 7-1: can't read configurations, error -22 [ 1668.393987][T17539] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1668.594779][T17539] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1668.594841][T17539] usb 7-1: no configurations [ 1668.594855][T17539] usb 7-1: can't read configurations, error -22 [ 1668.595205][T17539] usb usb7-port1: attempt power cycle [ 1668.903601][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.903673][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.934493][T17539] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1668.958657][T17539] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1668.958715][T17539] usb 7-1: no configurations [ 1668.958729][T17539] usb 7-1: can't read configurations, error -22 [ 1669.093934][T17539] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1669.117658][T17539] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1669.117717][T17539] usb 7-1: no configurations [ 1669.117730][T17539] usb 7-1: can't read configurations, error -22 [ 1669.118088][T17539] usb usb7-port1: unable to enumerate USB device [ 1669.281973][T23338] kvm: kvm [23337]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006c) [ 1670.340767][T23361] FAULT_INJECTION: forcing a failure. [ 1670.340767][T23361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.340813][T23361] CPU: 1 UID: 0 PID: 23361 Comm: syz.4.4871 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1670.340852][T23361] Tainted: [L]=SOFTLOCKUP [ 1670.340861][T23361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1670.340875][T23361] Call Trace: [ 1670.340884][T23361] [ 1670.340895][T23361] dump_stack_lvl+0xe8/0x150 [ 1670.340931][T23361] should_fail_ex+0x46b/0x600 [ 1670.340965][T23361] _copy_from_iter+0x1d3/0x1660 [ 1670.341000][T23361] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1670.341034][T23361] ? __pfx__copy_from_iter+0x10/0x10 [ 1670.341059][T23361] ? __alloc_skb+0x27a/0x7a0 [ 1670.341079][T23361] ? __alloc_skb+0x27a/0x7a0 [ 1670.341103][T23361] ? netlink_sendmsg+0x650/0xb40 [ 1670.341130][T23361] ? skb_put+0x112/0x210 [ 1670.341152][T23361] netlink_sendmsg+0x6c0/0xb40 [ 1670.341187][T23361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.341215][T23361] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1670.341257][T23361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.341282][T23361] sock_sendmsg_nosec+0x13a/0x180 [ 1670.341314][T23361] __sys_sendto+0x41e/0x5d0 [ 1670.341338][T23361] ? __pfx___sys_sendto+0x10/0x10 [ 1670.341386][T23361] ? do_user_addr_fault+0xc4c/0x1340 [ 1670.341431][T23361] __x64_sys_sendto+0xde/0x100 [ 1670.341455][T23361] do_syscall_64+0x166/0x520 [ 1670.341475][T23361] ? trace_irq_disable+0x3b/0x140 [ 1670.341502][T23361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.341524][T23361] ? clear_bhb_loop+0x70/0xc0 [ 1670.341548][T23361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.341569][T23361] RIP: 0033:0x7fc895c1e98e [ 1670.341590][T23361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1670.341608][T23361] RSP: 002b:00007fc893eb4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1670.341630][T23361] RAX: ffffffffffffffda RBX: 00007fc893eb66c0 RCX: 00007fc895c1e98e [ 1670.341646][T23361] RDX: 0000000000000020 RSI: 00007fc893eb5000 RDI: 0000000000000005 [ 1670.341659][T23361] RBP: 0000000000000000 R08: 00007fc893eb4f04 R09: 000000000000000c [ 1670.341673][T23361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1670.341687][T23361] R13: 00007fc893eb4f58 R14: 00007fc893eb5000 R15: 0000000000000000 [ 1670.341720][T23361] [ 1672.024481][T23413] sg_write: process 221 (syz.2.4891) changed security contexts after opening file descriptor, this is not allowed. [ 1673.541698][T23472] FAULT_INJECTION: forcing a failure. [ 1673.541698][T23472] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.541738][T23472] CPU: 1 UID: 0 PID: 23472 Comm: syz.4.4916 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1673.541768][T23472] Tainted: [L]=SOFTLOCKUP [ 1673.541776][T23472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1673.541789][T23472] Call Trace: [ 1673.541797][T23472] [ 1673.541807][T23472] dump_stack_lvl+0xe8/0x150 [ 1673.541843][T23472] should_fail_ex+0x46b/0x600 [ 1673.541872][T23472] ? sock_alloc_inode+0x2c/0x1a0 [ 1673.541903][T23472] should_failslab+0xa8/0x100 [ 1673.541938][T23472] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1673.541968][T23472] ? sock_alloc_inode+0x2c/0x1a0 [ 1673.542001][T23472] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1673.542026][T23472] sock_alloc_inode+0x2c/0x1a0 [ 1673.542052][T23472] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1673.542078][T23472] alloc_inode+0x6a/0x1b0 [ 1673.542110][T23472] __sock_create+0x12d/0x9d0 [ 1673.542148][T23472] __sys_socket+0xd6/0x1b0 [ 1673.542182][T23472] __x64_sys_socket+0x7a/0x90 [ 1673.542213][T23472] do_syscall_64+0x166/0x520 [ 1673.542234][T23472] ? trace_irq_disable+0x3b/0x140 [ 1673.542260][T23472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.542282][T23472] ? clear_bhb_loop+0x70/0xc0 [ 1673.542305][T23472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.542322][T23472] RIP: 0033:0x7fc895c5e159 [ 1673.542340][T23472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.542357][T23472] RSP: 002b:00007fc893eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1673.542379][T23472] RAX: ffffffffffffffda RBX: 00007fc895ee5fa0 RCX: 00007fc895c5e159 [ 1673.542395][T23472] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 1673.542407][T23472] RBP: 00007fc895cf506b R08: 0000000000000000 R09: 0000000000000000 [ 1673.542420][T23472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.542432][T23472] R13: 00007fc895ee6038 R14: 00007fc895ee5fa0 R15: 00007ffe04e2a458 [ 1673.542464][T23472] [ 1673.542486][T23472] socket: no more sockets [ 1673.604035][ T5603] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1673.786277][ T5603] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1673.786381][ T5603] usb 3-1: no configurations [ 1673.786418][ T5603] usb 3-1: can't read configurations, error -22 [ 1673.926199][ T5603] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1674.084924][ T5603] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1674.085042][ T5603] usb 3-1: no configurations [ 1674.085057][ T5603] usb 3-1: can't read configurations, error -22 [ 1674.085589][ T5603] usb usb3-port1: attempt power cycle [ 1674.433918][ T5603] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1674.455432][ T5603] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1674.455515][ T5603] usb 3-1: no configurations [ 1674.455554][ T5603] usb 3-1: can't read configurations, error -22 [ 1674.542907][T23496] netlink: 'syz.3.4925': attribute type 1 has an invalid length. [ 1674.584563][ T5603] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1674.601781][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1674.608159][T23496] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1674.610062][ T5603] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1674.610140][ T5603] usb 3-1: no configurations [ 1674.610313][ T5603] usb 3-1: can't read configurations, error -22 [ 1674.610701][ T5603] usb usb3-port1: unable to enumerate USB device [ 1675.342708][T23524] fuse: Bad value for 'fd' [ 1676.009337][T23543] fuse: Bad value for 'fd' [ 1676.269089][ T36] audit: type=1326 audit(1790338361.004:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23547 comm="syz.6.4947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7fc00000 [ 1676.330200][ T36] audit: type=1326 audit(1790338361.064:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23547 comm="syz.6.4947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f287972e159 code=0x7fc00000 [ 1676.554380][T23560] F2FS-fs: Conflicting test_dummy_encryption options [ 1679.764111][ T36] audit: type=1326 audit(1790338364.504:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23588 comm="syz.2.4964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7fc00000 [ 1679.780957][ T36] audit: type=1326 audit(1790338364.514:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23588 comm="syz.2.4964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbee6ce159 code=0x7fc00000 [ 1680.918568][T23628] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4980'. [ 1681.232454][T17990] Bluetooth: hci3: command 0x0406 tx timeout [ 1681.860020][ T36] audit: type=1326 audit(1790338366.594:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23648 comm="syz.7.4986" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ea81e159 code=0x7fc00000 [ 1681.871346][ T36] audit: type=1326 audit(1790338366.594:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23648 comm="syz.7.4986" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f30ea81e159 code=0x7fc00000 [ 1683.061312][T23690] fuse: Bad value for 'fd' [ 1683.818800][T23711] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5007'. [ 1683.819521][T23711] bridge_slave_0: left allmulticast mode [ 1683.819551][T23711] bridge_slave_0: left promiscuous mode [ 1683.819809][T23711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.341925][T23731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1685.073899][T23746] netlink: 'syz.6.5020': attribute type 4 has an invalid length. [ 1685.963191][T23761] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5027'. [ 1686.286609][ T5720] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1686.445165][ T5720] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1686.453118][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.498718][ T5720] usb 3-1: config 0 descriptor?? [ 1687.068793][T23794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5039'. [ 1688.717804][T23834] sctp: [Deprecated]: syz.7.5053 (pid 23834) Use of int in maxseg socket option. [ 1688.717804][T23834] Use struct sctp_assoc_value instead [ 1688.742409][T23836] bond0: default FDB implementation only supports local addresses [ 1688.863359][ T43] usb 3-1: USB disconnect, device number 28 [ 1689.178038][T23852] syz.2.5059: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1689.178426][T23852] CPU: 1 UID: 0 PID: 23852 Comm: syz.2.5059 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1689.178463][T23852] Tainted: [L]=SOFTLOCKUP [ 1689.178472][T23852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1689.178485][T23852] Call Trace: [ 1689.178494][T23852] [ 1689.178504][T23852] dump_stack_lvl+0xe8/0x150 [ 1689.178541][T23852] warn_alloc+0x24d/0x270 [ 1689.178576][T23852] ? __pfx_warn_alloc+0x10/0x10 [ 1689.178610][T23852] ? __schedule+0x16ef/0x5700 [ 1689.178647][T23852] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1689.178677][T23852] __vmalloc_node_range_noprof+0x127/0x1540 [ 1689.178704][T23852] ? __lock_acquire+0x747/0x2de0 [ 1689.178744][T23852] ? __pfx___schedule+0x10/0x10 [ 1689.178771][T23852] ? irqentry_exit+0x218/0x910 [ 1689.178794][T23852] ? irqentry_exit+0x218/0x910 [ 1689.178817][T23852] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1689.178844][T23852] ? preempt_schedule_thunk+0x16/0x40 [ 1689.178870][T23852] ? preempt_schedule_common+0x7f/0xd0 [ 1689.178902][T23852] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1689.178929][T23852] vmalloc_noprof+0xb2/0xe0 [ 1689.178953][T23852] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1689.178982][T23852] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1689.179008][T23852] ? dvb_demux_do_ioctl+0x323/0x540 [ 1689.179037][T23852] dvb_demux_do_ioctl+0x460/0x540 [ 1689.179067][T23852] dvb_usercopy+0x199/0x2e0 [ 1689.179090][T23852] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1689.179115][T23852] ? __pfx_dvb_usercopy+0x10/0x10 [ 1689.179151][T23852] ? dvb_demux_ioctl+0x15/0x40 [ 1689.179179][T23852] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1689.179205][T23852] dvb_demux_ioctl+0x29/0x40 [ 1689.179229][T23852] __se_sys_ioctl+0xff/0x170 [ 1689.179260][T23852] do_syscall_64+0x166/0x520 [ 1689.179280][T23852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.179301][T23852] ? clear_bhb_loop+0x70/0xc0 [ 1689.179327][T23852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.179348][T23852] RIP: 0033:0x7ffbee6ce159 [ 1689.179368][T23852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.179386][T23852] RSP: 002b:00007ffbec905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1689.179409][T23852] RAX: ffffffffffffffda RBX: 00007ffbee956090 RCX: 00007ffbee6ce159 [ 1689.179425][T23852] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000a [ 1689.179439][T23852] RBP: 00007ffbee76506b R08: 0000000000000000 R09: 0000000000000000 [ 1689.179461][T23852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.179474][T23852] R13: 00007ffbee956128 R14: 00007ffbee956090 R15: 00007ffdc594fc98 [ 1689.179509][T23852] [ 1689.179528][T23852] Mem-Info: [ 1689.179606][T23852] active_anon:268 inactive_anon:23905 isolated_anon:0 [ 1689.179606][T23852] active_file:26365 inactive_file:16441 isolated_file:0 [ 1689.179606][T23852] unevictable:0 dirty:69 writeback:0 [ 1689.179606][T23852] slab_reclaimable:9648 slab_unreclaimable:106705 [ 1689.179606][T23852] mapped:30121 shmem:17571 pagetables:4124 [ 1689.179606][T23852] sec_pagetables:0 bounce:0 [ 1689.179606][T23852] kernel_misc_reclaimable:0 [ 1689.179606][T23852] free:1278805 free_pcp:8173 free_cma:0 [ 1689.179723][T23852] Node 0 active_anon:1072kB inactive_anon:95616kB active_file:105272kB inactive_file:65696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120484kB dirty:276kB writeback:0kB shmem:70284kB kernel_stack:14672kB pagetables:16332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1689.179837][T23852] Node 1 active_anon:0kB inactive_anon:4kB active_file:188kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1689.179895][T23852] Node 0 DMA free:15352kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1689.180019][T23852] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1689.180384][T23852] Node 0 DMA32 free:1158940kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1072kB inactive_anon:95616kB active_file:105272kB inactive_file:65696kB unevictable:0kB writepending:276kB zspages:200kB present:3129332kB managed:2559048kB mlocked:0kB bounce:0kB free_pcp:32676kB local_pcp:15572kB free_cma:0kB [ 1689.180593][T23852] lowmem_reserve[]: 0 0 1 1 1 [ 1689.180917][T23852] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1689.181086][T23852] lowmem_reserve[]: 0 0 0 0 0 [ 1689.181345][T23852] Node 1 Normal free:3940928kB boost:2048kB min:8416kB low:12524kB high:16632kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:188kB inactive_file:68kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1689.181518][T23852] lowmem_reserve[]: 0 0 0 0 0 [ 1689.181849][T23852] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15352kB [ 1689.182891][T23852] Node 0 DMA32: 2955*4kB (UME) 1791*8kB (UME) 1512*16kB (UME) 1145*32kB (UME) 1006*64kB (UME) 597*128kB (UME) 383*256kB (UME) 233*512kB (UME) 155*1024kB (UME) 7*2048kB (UME) 132*4096kB (UM) = 1158852kB [ 1689.193316][T23852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1689.193996][T23852] Node 1 Normal: 6*4kB (UM) 9*8kB (U) 12*16kB (UM) 23*32kB (UM) 19*64kB (UM) 15*128kB (UM) 12*256kB (UM) 7*512kB (UM) 10*1024kB (UM) 10*2048kB (UM) 952*4096kB (U) = 3940928kB [ 1689.194894][T23852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.195014][T23852] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1689.195087][T23852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.195168][T23852] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1689.195285][T23852] 60363 total pagecache pages [ 1689.195347][T23852] 2 pages in swap cache [ 1689.195408][T23852] Free swap = 124916kB [ 1689.195417][T23852] Total swap = 124996kB [ 1689.195524][T23852] 2097051 pages RAM [ 1689.195602][T23852] 0 pages HighMem/MovableOnly [ 1689.195659][T23852] 425221 pages reserved [ 1689.195668][T23852] 0 pages cma reserved [ 1691.882521][ T36] audit: type=1326 audit(1790338376.614:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.916280][ T36] audit: type=1326 audit(1790338376.614:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.916544][ T36] audit: type=1326 audit(1790338376.644:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.917124][ T36] audit: type=1326 audit(1790338376.654:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.918780][ T36] audit: type=1326 audit(1790338376.654:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.919871][ T36] audit: type=1326 audit(1790338376.654:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.921612][ T36] audit: type=1326 audit(1790338376.654:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.921658][ T36] audit: type=1326 audit(1790338376.654:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.944156][ T36] audit: type=1326 audit(1790338376.684:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1691.994563][ T36] audit: type=1326 audit(1790338376.734:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23887 comm="syz.2.5072" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee6ce159 code=0x7ffc0000 [ 1692.379602][T23894] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1692.648699][T23907] FAULT_INJECTION: forcing a failure. [ 1692.648699][T23907] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.648736][T23907] CPU: 0 UID: 0 PID: 23907 Comm: syz.7.5081 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1692.648764][T23907] Tainted: [L]=SOFTLOCKUP [ 1692.648771][T23907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1692.648784][T23907] Call Trace: [ 1692.648792][T23907] [ 1692.648802][T23907] dump_stack_lvl+0xe8/0x150 [ 1692.648837][T23907] should_fail_ex+0x46b/0x600 [ 1692.648865][T23907] ? __d_alloc+0x37/0x6f0 [ 1692.648890][T23907] should_failslab+0xa8/0x100 [ 1692.648923][T23907] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1692.648953][T23907] ? __d_alloc+0x37/0x6f0 [ 1692.648980][T23907] __d_alloc+0x37/0x6f0 [ 1692.649009][T23907] path_from_stashed+0x35c/0x580 [ 1692.649041][T23907] open_namespace+0x9a/0x1c0 [ 1692.649062][T23907] ? __pfx_open_namespace+0x10/0x10 [ 1692.649092][T23907] pidfd_ioctl+0x2885/0x3280 [ 1692.649123][T23907] ? __pfx_pidfd_ioctl+0x10/0x10 [ 1692.649150][T23907] ? __fget_files+0x2a/0x420 [ 1692.649171][T23907] ? __fget_files+0x3a8/0x420 [ 1692.649192][T23907] ? __fget_files+0x2a/0x420 [ 1692.649215][T23907] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1692.649238][T23907] ? __pfx_pidfd_ioctl+0x10/0x10 [ 1692.649260][T23907] __se_sys_ioctl+0xff/0x170 [ 1692.649290][T23907] do_syscall_64+0x166/0x520 [ 1692.649310][T23907] ? trace_irq_disable+0x3b/0x140 [ 1692.649334][T23907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.649358][T23907] ? clear_bhb_loop+0x70/0xc0 [ 1692.649383][T23907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.649403][T23907] RIP: 0033:0x7f30ea81e159 [ 1692.649423][T23907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.649441][T23907] RSP: 002b:00007f30e8a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.649462][T23907] RAX: ffffffffffffffda RBX: 00007f30eaaa5fa0 RCX: 00007f30ea81e159 [ 1692.649477][T23907] RDX: 0000000000000000 RSI: 000000000000ff04 RDI: 0000000000000005 [ 1692.649490][T23907] RBP: 00007f30ea8b506b R08: 0000000000000000 R09: 0000000000000000 [ 1692.649503][T23907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.649514][T23907] R13: 00007f30eaaa6038 R14: 00007f30eaaa5fa0 R15: 00007ffe10d2f4e8 [ 1692.649545][T23907] [ 1694.156392][T23928] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1694.662835][T23949] fuse: fd is not a fuse device [ 1696.453915][ T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1696.604726][ T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1696.606429][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.613175][ T43] usb 3-1: config 0 descriptor?? [ 1696.879516][T23997] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1696.879546][T23997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1696.879900][T23997] vhci_hcd vhci_hcd.0: Device attached [ 1696.883201][T23997] vhci_hcd vhci_hcd.0: port 0 already used [ 1696.887558][T23998] vhci_hcd: connection closed [ 1696.904457][ T4175] vhci_hcd vhci_hcd.7: stop threads [ 1696.904488][ T4175] vhci_hcd vhci_hcd.7: release socket [ 1696.904524][ T4175] vhci_hcd vhci_hcd.7: disconnect device [ 1697.382410][T24010] netlink: 'syz.6.5119': attribute type 1 has an invalid length. [ 1697.439442][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1697.440292][T24010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1698.091385][ T5598] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1699.128296][T21432] usb 3-1: USB disconnect, device number 29 [ 1699.388833][T24052] netlink: 'syz.2.5135': attribute type 1 has an invalid length. [ 1699.447637][T24052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1699.453373][T24056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1700.300193][ T5598] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1700.872930][T24079] netlink: 'syz.4.5144': attribute type 1 has an invalid length. [ 1701.033577][T24079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1701.300711][T24083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.313263][T24083] bond5: (slave team0): Enslaving as a backup interface with a down link [ 1701.409509][T24086] bond5: (slave team0): Releasing backup interface [ 1701.439940][T24092] FAULT_INJECTION: forcing a failure. [ 1701.439940][T24092] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.439981][T24092] CPU: 1 UID: 0 PID: 24092 Comm: syz.2.5149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1701.440010][T24092] Tainted: [L]=SOFTLOCKUP [ 1701.440018][T24092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1701.440032][T24092] Call Trace: [ 1701.440041][T24092] [ 1701.440050][T24092] dump_stack_lvl+0xe8/0x150 [ 1701.440085][T24092] should_fail_ex+0x46b/0x600 [ 1701.440120][T24092] should_failslab+0xa8/0x100 [ 1701.440153][T24092] __kmalloc_cache_noprof+0xa1/0x680 [ 1701.440183][T24092] ? sget_fc+0x74a/0x1a60 [ 1701.440203][T24092] ? sget_fc+0x74a/0x1a60 [ 1701.440228][T24092] sget_fc+0x74a/0x1a60 [ 1701.440258][T24092] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1701.440285][T24092] ? __pfx_sget_fc+0x10/0x10 [ 1701.440305][T24092] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 1701.440332][T24092] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1701.440367][T24092] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1701.440395][T24092] get_tree_nodev+0x2a/0x150 [ 1701.440422][T24092] vfs_get_tree+0x92/0x2a0 [ 1701.440449][T24092] fc_mount_longterm+0x1c/0x100 [ 1701.440479][T24092] mq_init_ns+0x508/0x770 [ 1701.440506][T24092] copy_ipcs+0x45c/0x6c0 [ 1701.440538][T24092] create_new_namespaces+0x210/0x6b0 [ 1701.440568][T24092] ? security_capable+0x7e/0x2c0 [ 1701.440603][T24092] unshare_nsproxy_namespaces+0x149/0x190 [ 1701.440635][T24092] ksys_unshare+0x5a7/0x950 [ 1701.440671][T24092] ? __pfx_ksys_unshare+0x10/0x10 [ 1701.440701][T24092] ? rcu_is_watching+0x16/0xb0 [ 1701.440741][T24092] __x64_sys_unshare+0x38/0x50 [ 1701.440770][T24092] do_syscall_64+0x166/0x520 [ 1701.440791][T24092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.440816][T24092] ? clear_bhb_loop+0x70/0xc0 [ 1701.440850][T24092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.440871][T24092] RIP: 0033:0x7ffbee6ce159 [ 1701.440892][T24092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.440911][T24092] RSP: 002b:00007ffbec926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1701.440939][T24092] RAX: ffffffffffffffda RBX: 00007ffbee955fa0 RCX: 00007ffbee6ce159 [ 1701.440955][T24092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1701.440969][T24092] RBP: 00007ffbee76506b R08: 0000000000000000 R09: 0000000000000000 [ 1701.440984][T24092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.440997][T24092] R13: 00007ffbee956038 R14: 00007ffbee955fa0 R15: 00007ffdc594fc98 [ 1701.441031][T24092] [ 1701.498706][T24093] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 1701.603556][T24086] bridge_slave_1: left allmulticast mode [ 1701.603590][T24086] bridge_slave_1: left promiscuous mode [ 1701.605473][T24086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.926346][T24086] bond0: (slave bond_slave_0): Releasing backup interface [ 1702.037084][T24086] bond0: (slave bond_slave_1): Releasing backup interface [ 1702.144596][T24086] team0: Port device team_slave_0 removed [ 1702.337836][T24086] team0: Port device team_slave_1 removed [ 1702.338373][T24086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1702.338390][T24086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.376381][T24086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.376410][T24086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.429570][ T5598] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1702.433222][T24086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1702.434105][T24093] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1702.589724][T24111] bond3: entered allmulticast mode [ 1703.152399][T24147] netlink: 'syz.3.5169': attribute type 1 has an invalid length. [ 1703.272367][T24147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1704.364665][T24187] netlink: 'syz.6.5184': attribute type 1 has an invalid length. [ 1704.419092][T24187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1704.804693][T24194] 9p: Bad value for 'rfdno' [ 1705.288710][ T5598] Bluetooth: hci6: unexpected event for opcode 0x1408 [ 1706.107935][T24229] syz.2.5200: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1706.108320][T24229] CPU: 0 UID: 0 PID: 24229 Comm: syz.2.5200 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1706.108350][T24229] Tainted: [L]=SOFTLOCKUP [ 1706.108358][T24229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1706.108372][T24229] Call Trace: [ 1706.108380][T24229] [ 1706.108390][T24229] dump_stack_lvl+0xe8/0x150 [ 1706.108433][T24229] warn_alloc+0x24d/0x270 [ 1706.108469][T24229] ? __pfx_warn_alloc+0x10/0x10 [ 1706.108503][T24229] ? __pfx___schedule+0x10/0x10 [ 1706.108539][T24229] ? register_lock_class+0x31/0x2e0 [ 1706.108568][T24229] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1706.108596][T24229] __vmalloc_node_range_noprof+0x127/0x1540 [ 1706.108623][T24229] ? __lock_acquire+0x747/0x2de0 [ 1706.108654][T24229] ? irqentry_exit+0x218/0x910 [ 1706.108692][T24229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1706.108727][T24229] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1706.108755][T24229] vmalloc_noprof+0xb2/0xe0 [ 1706.108780][T24229] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1706.108808][T24229] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1706.108835][T24229] ? dvb_demux_do_ioctl+0x323/0x540 [ 1706.108864][T24229] dvb_demux_do_ioctl+0x460/0x540 [ 1706.108893][T24229] dvb_usercopy+0x199/0x2e0 [ 1706.108916][T24229] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1706.108941][T24229] ? __pfx_dvb_usercopy+0x10/0x10 [ 1706.108977][T24229] ? __fget_files+0x3a8/0x420 [ 1706.108998][T24229] ? __fget_files+0x2a/0x420 [ 1706.109022][T24229] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1706.109047][T24229] dvb_demux_ioctl+0x29/0x40 [ 1706.109072][T24229] __se_sys_ioctl+0xff/0x170 [ 1706.109102][T24229] do_syscall_64+0x166/0x520 [ 1706.109122][T24229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.109143][T24229] ? clear_bhb_loop+0x70/0xc0 [ 1706.109169][T24229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.109189][T24229] RIP: 0033:0x7ffbee6ce159 [ 1706.109209][T24229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.109227][T24229] RSP: 002b:00007ffbec905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.109249][T24229] RAX: ffffffffffffffda RBX: 00007ffbee956090 RCX: 00007ffbee6ce159 [ 1706.109265][T24229] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000a [ 1706.109280][T24229] RBP: 00007ffbee76506b R08: 0000000000000000 R09: 0000000000000000 [ 1706.109293][T24229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.109306][T24229] R13: 00007ffbee956128 R14: 00007ffbee956090 R15: 00007ffdc594fc98 [ 1706.109340][T24229] [ 1706.109475][T24229] Mem-Info: [ 1706.109537][T24229] active_anon:3102 inactive_anon:26672 isolated_anon:0 [ 1706.109537][T24229] active_file:26406 inactive_file:16426 isolated_file:0 [ 1706.109537][T24229] unevictable:0 dirty:74 writeback:0 [ 1706.109537][T24229] slab_reclaimable:9625 slab_unreclaimable:106451 [ 1706.109537][T24229] mapped:33379 shmem:23261 pagetables:4116 [ 1706.109537][T24229] sec_pagetables:0 bounce:0 [ 1706.109537][T24229] kernel_misc_reclaimable:0 [ 1706.109537][T24229] free:1276220 free_pcp:4698 free_cma:0 [ 1706.109600][T24229] Node 0 active_anon:12408kB inactive_anon:106684kB active_file:105436kB inactive_file:65636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133516kB dirty:296kB writeback:0kB shmem:93044kB kernel_stack:14904kB pagetables:16300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1706.109718][T24229] Node 1 active_anon:0kB inactive_anon:4kB active_file:188kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1706.109831][T24229] Node 0 DMA free:15352kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1706.109956][T24229] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1706.110126][T24229] Node 0 DMA32 free:1148852kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12408kB inactive_anon:106684kB active_file:105436kB inactive_file:65636kB unevictable:0kB writepending:296kB zspages:200kB present:3129332kB managed:2559048kB mlocked:0kB bounce:0kB free_pcp:18524kB local_pcp:13916kB free_cma:0kB [ 1706.110251][T24229] lowmem_reserve[]: 0 0 1 1 1 [ 1706.110622][T24229] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1706.110818][T24229] lowmem_reserve[]: 0 0 0 0 0 [ 1706.111071][T24229] Node 1 Normal free:3940676kB boost:2048kB min:8416kB low:12524kB high:16632kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:188kB inactive_file:68kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:68kB free_cma:0kB [ 1706.111266][T24229] lowmem_reserve[]: 0 0 0 0 0 [ 1706.111789][T24229] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15352kB [ 1706.112932][T24229] Node 0 DMA32: 1339*4kB (UME) 1650*8kB (UME) 1200*16kB (UME) 802*32kB (UE) 793*64kB (UE) 649*128kB (UME) 437*256kB (UME) 246*512kB (UME) 155*1024kB (UME) 7*2048kB (UME) 132*4096kB (UM) = 1148796kB [ 1706.115792][T24229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1706.116580][T24229] Node 1 Normal: 5*4kB (U) 10*8kB (UM) 10*16kB (U) 20*32kB (U) 17*64kB (U) 15*128kB (UM) 12*256kB (UM) 7*512kB (UM) 10*1024kB (UM) 10*2048kB (UM) 952*4096kB (U) = 3940676kB [ 1706.118071][T24229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1706.118145][T24229] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1706.118461][T24229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1706.118524][T24229] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1706.119521][T24229] 66079 total pagecache pages [ 1706.119585][T24229] 2 pages in swap cache [ 1706.119594][T24229] Free swap = 124916kB [ 1706.119651][T24229] Total swap = 124996kB [ 1706.119714][T24229] 2097051 pages RAM [ 1706.119773][T24229] 0 pages HighMem/MovableOnly [ 1706.119783][T24229] 425221 pages reserved [ 1706.119876][T24229] 0 pages cma reserved [ 1709.602645][T24342] fuse: fd is not a fuse device [ 1709.722700][T24345] overlayfs: failed to clone upperpath [ 1709.767883][ T5598] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1710.831537][T17990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1710.938380][T17990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1711.007424][T17990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1711.013274][T17990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1711.055993][T17990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1711.603870][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1711.769966][T24410] overlayfs: failed to clone lowerpath [ 1711.803857][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1711.804610][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1711.805681][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.805705][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1711.805751][ T43] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1711.805774][ T43] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1711.805797][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1711.805812][ T43] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1711.807939][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.807964][ T43] usb 3-1: Product: syz [ 1711.807974][ T43] usb 3-1: Manufacturer: syz [ 1711.807982][ T43] usb 3-1: SerialNumber: syz [ 1712.238253][T17990] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1712.441345][T24393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.445027][T24393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.550827][T24393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1712.550860][T24393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1712.551729][T24393] vhci_hcd vhci_hcd.0: Device attached [ 1712.570078][T24393] vhci_hcd vhci_hcd.0: port 0 already used [ 1712.676902][T24428] vhci_hcd: connection closed [ 1712.683474][ T1804] vhci_hcd vhci_hcd.2: stop threads [ 1712.683507][ T1804] vhci_hcd vhci_hcd.2: release socket [ 1712.683547][ T1804] vhci_hcd vhci_hcd.2: disconnect device [ 1712.926211][ T43] usb 3-1: selecting invalid altsetting 0 [ 1712.926946][ T43] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1712.927476][ T43] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1713.211517][ T43] usb 3-1: USB disconnect, device number 30 [ 1713.214201][T17990] Bluetooth: hci4: command tx timeout [ 1713.583993][T24456] udevd[24456]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.904253][T24467] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1713.904284][T24467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1713.904382][T24467] vhci_hcd vhci_hcd.0: Device attached [ 1713.913663][T24467] vhci_hcd vhci_hcd.0: port 0 already used [ 1713.941566][T24473] vhci_hcd: connection closed [ 1713.942519][T12904] vhci_hcd vhci_hcd.7: stop threads [ 1713.942547][T12904] vhci_hcd vhci_hcd.7: release socket [ 1713.942585][T12904] vhci_hcd vhci_hcd.7: disconnect device [ 1714.099796][T24379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.099914][T24379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.101615][T24379] bridge_slave_0: entered allmulticast mode [ 1714.117823][T24379] bridge_slave_0: entered promiscuous mode [ 1714.131142][T24379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.131498][T24379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.131659][T24379] bridge_slave_1: entered allmulticast mode [ 1714.137857][T24379] bridge_slave_1: entered promiscuous mode [ 1714.306285][T24379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.315342][T24379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.707233][T24379] team0: Port device team_slave_0 added [ 1714.718068][T24379] team0: Port device team_slave_1 added [ 1714.807879][T17990] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1714.887276][T24379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.887294][T24379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.887322][T24379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.889958][T24379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.889973][T24379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.889999][T24379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.029669][T24379] hsr_slave_0: entered promiscuous mode [ 1715.031170][T24379] hsr_slave_1: entered promiscuous mode [ 1715.032861][T24379] debugfs: 'hsr0' already exists in 'hsr' [ 1715.032887][T24379] Cannot create hsr debugfs directory [ 1715.082588][T24507] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1715.186228][T24509] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1715.186258][T24509] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1715.186622][T24509] vhci_hcd vhci_hcd.0: Device attached [ 1715.192105][T24509] vhci_hcd vhci_hcd.0: port 0 already used [ 1715.222715][T24510] vhci_hcd: connection closed [ 1715.226608][T18039] vhci_hcd vhci_hcd.7: stop threads [ 1715.226636][T18039] vhci_hcd vhci_hcd.7: release socket [ 1715.226674][T18039] vhci_hcd vhci_hcd.7: disconnect device [ 1715.293936][T17990] Bluetooth: hci4: command tx timeout [ 1716.603415][T24379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.665284][T17539] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1716.831832][T17539] usb 3-1: Using ep0 maxpacket: 32 [ 1716.836575][T17539] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1716.843642][T17539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.843668][T17539] usb 3-1: Product: syz [ 1716.843683][T17539] usb 3-1: Manufacturer: syz [ 1716.843698][T17539] usb 3-1: SerialNumber: syz [ 1716.872874][T17539] usb 3-1: config 0 descriptor?? [ 1716.893593][T17539] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1716.893701][T17539] dvb-usb: bulk message failed: -22 (4/0) [ 1716.896498][T17539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1716.896647][T17539] dvb-usb: bulk message failed: -22 (5/0) [ 1716.896662][T17539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1716.934634][T17539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1716.937752][T17539] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1716.937808][T17539] usb 3-1: media controller created [ 1716.967507][T17539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1717.022597][T17539] usb 3-1: selecting invalid altsetting 3 [ 1717.022643][T17539] ttusb2: set interface to alts=3 failed [ 1717.169117][T17539] DVB: Unable to find symbol tda10086_attach() [ 1717.169130][T17539] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1717.173579][T17539] dvb-usb: bulk message failed: -22 (4/0) [ 1717.173636][T17539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1717.174515][T17539] dvb-usb: bulk message failed: -22 (5/0) [ 1717.174574][T17539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1717.174685][T17539] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1717.376269][T17990] Bluetooth: hci4: command tx timeout [ 1717.502906][T24379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.688551][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5336'. [ 1717.755484][T24581] vlan2: entered promiscuous mode [ 1717.755501][T24581] erspan0: entered promiscuous mode [ 1718.188542][T24379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.515193][T24379] bridge0: port 3(netdevsim0) entered disabled state [ 1718.828091][T24379] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1718.828136][T24379] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1718.868164][T24379] bridge0: port 3(netdevsim0) entered disabled state [ 1719.162444][T24379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.417497][ T43] usb 3-1: USB disconnect, device number 31 [ 1719.454350][T17990] Bluetooth: hci4: command tx timeout [ 1719.524863][ T43] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1720.360137][T24631] fuse: Bad value for 'fd' [ 1721.021156][T24379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1721.066449][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1721.088720][T24379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1721.170454][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1721.190692][T24379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1721.239254][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1721.259158][T24379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1721.297077][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1721.575411][T24379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.595370][T24379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.630015][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.630221][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.004536][T24671] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1724.259328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.560954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.273390][T24379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.379740][T24379] veth0_vlan: entered promiscuous mode [ 1726.398178][T24379] veth1_vlan: entered promiscuous mode [ 1726.502798][T24379] veth0_macvtap: entered promiscuous mode [ 1726.544471][T24379] veth1_macvtap: entered promiscuous mode [ 1726.573391][T24379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.616486][T24379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.746281][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.746569][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.928247][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.966900][T12903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.788409][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.788430][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.986403][T24742] netlink: 'syz.6.5395': attribute type 1 has an invalid length. [ 1727.986989][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5395'. [ 1729.148611][T24742] ifb1: entered promiscuous mode [ 1729.425707][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.425728][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.092296][T24784] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[24785] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[24784] [ 1730.203888][T11842] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1730.354484][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.354541][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.486427][T11842] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1730.489906][T11842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.497595][T11842] usb 4-1: config 0 descriptor?? [ 1730.723773][T11842] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1731.052264][T11842] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1731.052292][T11842] [drm] Initialized udl on minor 1 [ 1731.308670][T11842] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1731.309128][T11842] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1731.310155][T17338] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1731.316626][T17338] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1731.316840][T17338] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1731.338963][T11842] usb 4-1: USB disconnect, device number 55 [ 1731.830619][T24819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.833362][T24819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.016996][T24825] fuse: fd is not a fuse device [ 1732.147652][T24819] bridge_slave_0: left allmulticast mode [ 1732.147688][T24819] bridge_slave_0: left promiscuous mode [ 1732.148124][T24819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.354129][T24819] bridge_slave_1: left allmulticast mode [ 1732.354167][T24819] bridge_slave_1: left promiscuous mode [ 1732.354413][T24819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.500818][T17990] Bluetooth: hci0: command 0x0406 tx timeout [ 1732.754839][T24819] bond0: (slave bond_slave_0): Releasing backup interface [ 1732.835910][T24819] bond0: (slave bond_slave_1): Releasing backup interface [ 1733.007970][T24819] team0: Port device team_slave_0 removed [ 1733.085796][T24819] team0: Port device team_slave_1 removed [ 1733.104868][T24819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.112235][T24819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.222623][T24819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.240799][T24819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.391288][T24819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1733.818713][T24843] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1735.841709][T24878] fuse: fd is not a fuse device [ 1737.144849][T24895] batadv_slave_0: entered promiscuous mode [ 1737.155054][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'. [ 1737.155206][T24895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.485580][T24895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1738.424848][T24922] FAULT_INJECTION: forcing a failure. [ 1738.424848][T24922] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1738.424887][T24922] CPU: 1 UID: 0 PID: 24922 Comm: syz.7.5459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1738.424915][T24922] Tainted: [L]=SOFTLOCKUP [ 1738.424922][T24922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1738.424935][T24922] Call Trace: [ 1738.424944][T24922] [ 1738.424954][T24922] dump_stack_lvl+0xe8/0x150 [ 1738.424994][T24922] should_fail_ex+0x46b/0x600 [ 1738.425029][T24922] get_futex_key+0x1b4/0x1580 [ 1738.425064][T24922] ? __pfx_futex_wake_mark+0x10/0x10 [ 1738.425095][T24922] ? __pfx_get_futex_key+0x10/0x10 [ 1738.425136][T24922] futex_wake+0x119/0x600 [ 1738.425174][T24922] ? __pfx_futex_wake+0x10/0x10 [ 1738.425204][T24922] ? __sys_sendmmsg+0x36e/0x4d0 [ 1738.425237][T24922] do_futex+0x458/0x4e0 [ 1738.425263][T24922] ? __pfx_do_futex+0x10/0x10 [ 1738.425293][T24922] __se_sys_futex+0x3a8/0x450 [ 1738.425315][T24922] ? __fget_files+0x2a/0x420 [ 1738.425337][T24922] ? __pfx___se_sys_futex+0x10/0x10 [ 1738.425356][T24922] ? __fget_files+0x2a/0x420 [ 1738.425376][T24922] ? rcu_is_watching+0x16/0xb0 [ 1738.425412][T24922] ? __x64_sys_futex+0x21/0xf0 [ 1738.425435][T24922] do_syscall_64+0x166/0x520 [ 1738.425457][T24922] ? trace_irq_disable+0x3b/0x140 [ 1738.425485][T24922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.425507][T24922] ? clear_bhb_loop+0x70/0xc0 [ 1738.425532][T24922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.425553][T24922] RIP: 0033:0x7f30ea81e159 [ 1738.425574][T24922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.425593][T24922] RSP: 002b:00007f30e8a760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1738.425616][T24922] RAX: ffffffffffffffda RBX: 00007f30eaaa5fa8 RCX: 00007f30ea81e159 [ 1738.425633][T24922] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30eaaa5fac [ 1738.425649][T24922] RBP: 00007f30eaaa5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1738.425663][T24922] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1738.425678][T24922] R13: 00007f30eaaa6038 R14: 00007ffe10d2f400 R15: 00007ffe10d2f4e8 [ 1738.425711][T24922] [ 1739.323868][T21410] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1739.494802][T21410] usb 4-1: Using ep0 maxpacket: 32 [ 1739.495750][T21410] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1739.497380][T21410] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.497406][T21410] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1739.497469][T21410] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1739.497510][T21410] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1739.497561][T21410] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1739.497584][T21410] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1739.502798][T21410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.502823][T21410] usb 4-1: Product: syz [ 1739.502837][T21410] usb 4-1: Manufacturer: syz [ 1739.502852][T21410] usb 4-1: SerialNumber: syz [ 1739.619666][T24943] fuse: fd is not a fuse device [ 1740.144343][T24939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.144925][T24939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.263299][T24939] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 1740.263329][T24939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1740.263429][T24939] vhci_hcd vhci_hcd.0: Device attached [ 1740.280889][T24939] vhci_hcd vhci_hcd.0: port 0 already used [ 1740.296564][T24963] vhci_hcd: connection closed [ 1740.307068][T18035] vhci_hcd vhci_hcd.3: stop threads [ 1740.307100][T18035] vhci_hcd vhci_hcd.3: release socket [ 1740.307140][T18035] vhci_hcd vhci_hcd.3: disconnect device [ 1740.600162][T21410] usb 4-1: selecting invalid altsetting 0 [ 1740.612503][T21410] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 1740.612999][T21410] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1740.963915][T21410] usb 4-1: USB disconnect, device number 56 [ 1741.272222][T24987] udevd[24987]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1746.692617][T25061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1748.888579][ T5598] Bluetooth: hci6: unexpected event for opcode 0x1408 [ 1753.122424][T25129] fuse: fd is not a fuse device [ 1753.909530][T25143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5525'. [ 1754.597411][ T5598] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1755.731560][T25179] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1755.851715][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 1755.851735][ T36] audit: type=1326 audit(1790338440.584:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1755.851776][ T36] audit: type=1326 audit(1790338440.584:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1755.852393][ T36] audit: type=1326 audit(1790338440.584:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1755.904883][ T36] audit: type=1326 audit(1790338440.584:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1755.995588][ T36] audit: type=1326 audit(1790338440.724:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1755.995646][ T36] audit: type=1326 audit(1790338440.724:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1755.995686][ T36] audit: type=1326 audit(1790338440.724:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1756.017545][ T36] audit: type=1326 audit(1790338440.754:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1756.027651][ T36] audit: type=1326 audit(1790338440.764:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1756.027700][ T36] audit: type=1326 audit(1790338440.764:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25178 comm="syz.3.5536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x7ffc0000 [ 1758.172334][T25222] FAULT_INJECTION: forcing a failure. [ 1758.172334][T25222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1758.172382][T25222] CPU: 1 UID: 0 PID: 25222 Comm: syz.7.5554 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1758.172411][T25222] Tainted: [L]=SOFTLOCKUP [ 1758.172420][T25222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1758.172433][T25222] Call Trace: [ 1758.172442][T25222] [ 1758.172452][T25222] dump_stack_lvl+0xe8/0x150 [ 1758.172489][T25222] should_fail_ex+0x46b/0x600 [ 1758.172523][T25222] prepare_alloc_pages+0x223/0x650 [ 1758.172561][T25222] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 1758.172595][T25222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1758.172629][T25222] ? __pfx_policy_nodemask+0x10/0x10 [ 1758.172649][T25222] ? reacquire_held_locks+0x117/0x1a0 [ 1758.172677][T25222] ? rt_spin_lock+0x1e2/0x400 [ 1758.172712][T25222] alloc_pages_mpol+0xd4/0x280 [ 1758.172737][T25222] alloc_pages_noprof+0xd2/0x2f0 [ 1758.172760][T25222] __pmd_alloc+0x3a/0x5e0 [ 1758.172789][T25222] handle_mm_fault+0x2198/0x28c0 [ 1758.172857][T25222] ? handle_mm_fault+0xeb/0x28c0 [ 1758.172877][T25222] ? mt_find+0x186/0x630 [ 1758.172898][T25222] ? __pfx_mt_find+0x10/0x10 [ 1758.172926][T25222] ? __pfx_handle_mm_fault+0x10/0x10 [ 1758.172949][T25222] ? __lock_acquire+0x747/0x2de0 [ 1758.173000][T25222] __get_user_pages+0x1676/0x2650 [ 1758.173056][T25222] get_user_pages_remote+0x307/0xb10 [ 1758.173081][T25222] ? __pfx_down_read+0x10/0x10 [ 1758.173105][T25222] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1758.173125][T25222] ? create_init_stack_vma+0x89c/0xa10 [ 1758.173150][T25222] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 1758.173182][T25222] copy_string_kernel+0x2f9/0x5f0 [ 1758.173217][T25222] ? __pfx_copy_string_kernel+0x10/0x10 [ 1758.173240][T25222] ? rt_spin_unlock+0x165/0x200 [ 1758.173267][T25222] ? alloc_bprm+0x588/0x640 [ 1758.173292][T25222] do_execveat_common+0x373/0x670 [ 1758.173323][T25222] __x64_sys_execveat+0xc7/0xf0 [ 1758.173351][T25222] do_syscall_64+0x166/0x520 [ 1758.173388][T25222] ? trace_irq_disable+0x3b/0x140 [ 1758.173419][T25222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.173440][T25222] ? clear_bhb_loop+0x70/0xc0 [ 1758.173466][T25222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.173486][T25222] RIP: 0033:0x7f30ea81e159 [ 1758.173505][T25222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.173523][T25222] RSP: 002b:00007f30e8a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1758.173546][T25222] RAX: ffffffffffffffda RBX: 00007f30eaaa5fa0 RCX: 00007f30ea81e159 [ 1758.173561][T25222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1758.173575][T25222] RBP: 00007f30ea8b506b R08: 0000000000001000 R09: 0000000000000000 [ 1758.173588][T25222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1758.173601][T25222] R13: 00007f30eaaa6038 R14: 00007f30eaaa5fa0 R15: 00007ffe10d2f4e8 [ 1758.173635][T25222] [ 1758.595196][T25230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1759.103045][T25243] trusted_key: encrypted_key: insufficient parameters specified [ 1760.774373][T25286] fuse: Bad value for 'fd' [ 1762.122626][T25315] fuse: Bad value for 'fd' [ 1763.244612][T25336] overlayfs: failed to clone upperpath [ 1763.624381][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 1763.624401][ T36] audit: type=1326 audit(1790338448.364:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25344 comm="syz.6.5604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f287972e159 code=0x0 [ 1763.896077][T25349] fuse: Bad value for 'fd' [ 1765.177325][T25351] uprobe: syz.2.5606:25351 failed to unregister, leaking uprobe [ 1765.218363][T25363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5611'. [ 1766.179374][T25380] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5618'. [ 1766.275364][T25380] ip6gre1: entered promiscuous mode [ 1766.275392][T25380] ip6gre1: entered allmulticast mode [ 1766.291877][T25386] overlayfs: failed to clone upperpath [ 1769.393266][T25439] fuse: fd is not a fuse device [ 1770.152441][T25466] fuse: fd is not a fuse device [ 1770.683250][T25477] fuse: Bad value for 'fd' [ 1771.383539][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1771.807964][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1775.841343][T25626] FAULT_INJECTION: forcing a failure. [ 1775.841343][T25626] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.841387][T25626] CPU: 1 UID: 0 PID: 25626 Comm: syz.7.5729 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1775.841418][T25626] Tainted: [L]=SOFTLOCKUP [ 1775.841426][T25626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1775.841438][T25626] Call Trace: [ 1775.841447][T25626] [ 1775.841457][T25626] dump_stack_lvl+0xe8/0x150 [ 1775.841495][T25626] should_fail_ex+0x46b/0x600 [ 1775.841528][T25626] should_failslab+0xa8/0x100 [ 1775.841562][T25626] ? create_new_namespaces+0x33/0x6b0 [ 1775.841595][T25626] kmem_cache_alloc_noprof+0x9e/0x690 [ 1775.841623][T25626] ? create_new_namespaces+0x33/0x6b0 [ 1775.841655][T25626] create_new_namespaces+0x33/0x6b0 [ 1775.841691][T25626] __se_sys_setns+0x2b2/0x1b80 [ 1775.841717][T25626] ? __se_sys_futex+0x3a8/0x450 [ 1775.841744][T25626] ? __pfx___se_sys_setns+0x10/0x10 [ 1775.841787][T25626] do_syscall_64+0x166/0x520 [ 1775.841808][T25626] ? trace_irq_disable+0x3b/0x140 [ 1775.841834][T25626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.841856][T25626] ? clear_bhb_loop+0x70/0xc0 [ 1775.841881][T25626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.841902][T25626] RIP: 0033:0x7f30ea81e159 [ 1775.841922][T25626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.841940][T25626] RSP: 002b:00007f30e8a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1775.841963][T25626] RAX: ffffffffffffffda RBX: 00007f30eaaa5fa0 RCX: 00007f30ea81e159 [ 1775.841979][T25626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 1775.841992][T25626] RBP: 00007f30ea8b506b R08: 0000000000000000 R09: 0000000000000000 [ 1775.842014][T25626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.842028][T25626] R13: 00007f30eaaa6038 R14: 00007f30eaaa5fa0 R15: 00007ffe10d2f4e8 [ 1775.842061][T25626] [ 1776.647861][T25642] bridge_slave_0: default FDB implementation only supports local addresses [ 1777.329073][T25666] fuse: Bad value for 'fd' [ 1779.553868][T25694] fuse: Bad value for 'fd' [ 1782.063294][T25724] fuse: Bad value for 'fd' [ 1783.244845][T25761] overlayfs: failed to clone upperpath [ 1788.594331][T25892] fuse: fd is not a fuse device [ 1789.251316][ T36] audit: type=1326 audit(1790338473.984:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.251445][ T36] audit: type=1326 audit(1790338473.984:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.318673][ T36] audit: type=1326 audit(1790338474.044:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.318720][ T36] audit: type=1326 audit(1790338474.054:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.328865][ T36] audit: type=1326 audit(1790338474.064:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.328915][ T36] audit: type=1326 audit(1790338474.064:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.328953][ T36] audit: type=1326 audit(1790338474.064:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.336035][ T36] audit: type=1326 audit(1790338474.074:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25912 comm="syz.7.5852" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30ea81e159 code=0x0 [ 1789.340206][ T36] audit: type=1326 audit(1790338474.074:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.340254][ T36] audit: type=1326 audit(1790338474.074:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25916 comm="syz.6.5853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287972e159 code=0x7ffc0000 [ 1789.498594][T25924] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 1789.786571][T25924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1789.871615][T25928] vlan0: entered allmulticast mode [ 1789.871637][T25928] bond3: entered allmulticast mode [ 1789.927170][T25934] bond3: (slave gretap1): making interface the new active one [ 1789.927199][T25934] gretap1: entered allmulticast mode [ 1789.996209][T25934] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1790.040082][T25937] erspan1: entered promiscuous mode [ 1792.027804][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.028726][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.025549][T26082] overlayfs: failed to clone upperpath [ 1799.916027][T26093] fuse: fd is not a fuse device [ 1800.048961][T26099] 9p: Bad value for 'wfdno' [ 1802.911057][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 1802.911076][ T36] audit: type=1326 audit(1790338487.644:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26124 comm="syz.3.5928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x0 [ 1803.563061][T26136] fuse: Bad value for 'fd' [ 1810.306607][T26211] fuse: fd is not a fuse device [ 1811.034493][T26241] fuse: fd is not a fuse device [ 1812.199425][T26251] syz_tun: entered allmulticast mode [ 1812.403857][ T36] audit: type=1400 audit(1790338496.934:1361): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=26250 comm="syz.2.5975" daddr=224.0.3.0 netif=wpan0 [ 1812.404913][T26251] mroute: pending queue full, dropping entries [ 1812.405049][ T36] audit: type=1400 audit(1790338497.144:1362): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=26250 comm="syz.2.5975" daddr=224.0.3.0 netif=wpan0 [ 1812.405101][ T36] audit: type=1400 audit(1790338497.144:1363): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=26250 comm="syz.2.5975" daddr=224.0.3.0 [ 1813.759668][T26271] fuse: fd is not a fuse device [ 1815.969334][T26289] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1816.490273][T26308] fuse: fd is not a fuse device [ 1816.509320][T26309] tipc: Enabling of bearer rejected, failed to enable media [ 1817.403244][T26326] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1818.490301][T26334] netlink: 'syz.7.6005': attribute type 1 has an invalid length. [ 1818.570588][T26337] trusted_key: encrypted_key: insufficient parameters specified [ 1818.697840][T26334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1818.766372][T26340] bond5: (slave gretap1): making interface the new active one [ 1818.791069][T26340] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1820.274865][T26354] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1820.792848][T26373] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1821.066231][T26385] trusted_key: encrypted_key: insufficient parameters specified [ 1824.091971][T26416] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1824.315408][T26430] fuse: fd is not a fuse device [ 1824.501713][T26435] trusted_key: encrypted_key: insufficient parameters specified [ 1824.630368][T26439] bridge_slave_0: left allmulticast mode [ 1824.630405][T26439] bridge_slave_0: left promiscuous mode [ 1824.630650][T26439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.779260][T26439] bridge_slave_1: left allmulticast mode [ 1824.779295][T26439] bridge_slave_1: left promiscuous mode [ 1824.779762][T26439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.005539][T26439] bond0: (slave bond_slave_0): Releasing backup interface [ 1825.195772][T26439] bond0: (slave bond_slave_1): Releasing backup interface [ 1825.330037][T26439] team0: Port device team_slave_0 removed [ 1825.408234][T26439] team0: Port device team_slave_1 removed [ 1825.408935][T26439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.408953][T26439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.440325][T26439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1825.763294][T26440] team0: Mode changed to "loadbalance" [ 1827.933242][T26497] netlink: 'syz.7.6068': attribute type 1 has an invalid length. [ 1828.002996][T26497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1828.050443][T26497] vlan2: entered allmulticast mode [ 1828.050467][T26497] bond6: entered allmulticast mode [ 1830.413193][ T5598] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1830.413226][ T5598] CPU: 0 UID: 0 PID: 5598 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1830.413257][ T5598] Tainted: [L]=SOFTLOCKUP [ 1830.413266][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1830.413281][ T5598] Workqueue: hci6 hci_rx_work [ 1830.413394][ T5598] Call Trace: [ 1830.413402][ T5598] [ 1830.413412][ T5598] dump_stack_lvl+0xe8/0x150 [ 1830.413449][ T5598] sysfs_create_dir_ns+0x271/0x2a0 [ 1830.413479][ T5598] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1830.413510][ T5598] ? rt_spin_unlock+0x165/0x200 [ 1830.413542][ T5598] kobject_add_internal+0x62c/0xce0 [ 1830.413612][ T5598] kobject_add+0x163/0x240 [ 1830.413635][ T5598] ? rt_spin_unlock+0x159/0x200 [ 1830.413667][ T5598] ? __pfx_kobject_add+0x10/0x10 [ 1830.413703][ T5598] ? get_device_parent+0x370/0x3a0 [ 1830.413767][ T5598] device_add+0x3fa/0xb80 [ 1830.413801][ T5598] hci_conn_add_sysfs+0xd5/0x210 [ 1830.413925][ T5598] le_conn_complete_evt+0xfe3/0x16d0 [ 1830.414011][ T5598] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1830.414045][ T5598] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1830.414067][ T5598] ? rt_mutex_slowunlock+0x219/0x460 [ 1830.414096][ T5598] ? skb_pull_data+0xf0/0x200 [ 1830.414127][ T5598] hci_le_conn_complete_evt+0x187/0x470 [ 1830.414166][ T5598] hci_event_packet+0x67a/0xf10 [ 1830.414220][ T5598] ? reacquire_held_locks+0x117/0x1a0 [ 1830.414256][ T5598] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1830.414285][ T5598] ? __pfx_hci_event_packet+0x10/0x10 [ 1830.414310][ T5598] ? rt_spin_unlock+0x159/0x200 [ 1830.414347][ T5598] ? hci_send_to_monitor+0xe2/0x590 [ 1830.414372][ T5598] hci_rx_work+0x3ee/0x1020 [ 1830.414407][ T5598] ? process_scheduled_works+0x97a/0x1630 [ 1830.414437][ T5598] process_scheduled_works+0xc3d/0x1630 [ 1830.414497][ T5598] ? __pfx_process_scheduled_works+0x10/0x10 [ 1830.414533][ T5598] ? assign_work+0x3cf/0x5d0 [ 1830.414566][ T5598] worker_thread+0xa47/0xfb0 [ 1830.414625][ T5598] kthread+0x38b/0x470 [ 1830.414648][ T5598] ? __pfx_worker_thread+0x10/0x10 [ 1830.414674][ T5598] ? __pfx_kthread+0x10/0x10 [ 1830.414705][ T5598] ret_from_fork+0x514/0xb70 [ 1830.414731][ T5598] ? __pfx_ret_from_fork+0x10/0x10 [ 1830.414753][ T5598] ? __switch_to+0xc89/0x1420 [ 1830.414787][ T5598] ? __pfx_kthread+0x10/0x10 [ 1830.414810][ T5598] ret_from_fork_asm+0x1a/0x30 [ 1830.414849][ T5598] [ 1830.419912][ T5598] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1830.419959][ T5598] Bluetooth: hci6: failed to register connection device [ 1831.219821][T26546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6086'. [ 1831.443204][T26557] netlink: 'syz.7.6092': attribute type 1 has an invalid length. [ 1831.546441][T26557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1833.639648][ T36] audit: type=1326 audit(1790338518.374:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26568 comm="syz.7.6095" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30ea81e159 code=0x0 [ 1834.646011][T26583] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6099'. [ 1834.758419][T26586] netlink: 'syz.7.6102': attribute type 1 has an invalid length. [ 1834.860493][T26586] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1835.102285][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1835.102309][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1835.919645][T22615] Bluetooth: hci4: command 0x0406 tx timeout [ 1836.485246][ T36] audit: type=1326 audit(1790338521.214:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26616 comm="syz.3.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c35f7e159 code=0x0 [ 1853.271222][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.271293][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.844909][T17990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1853.892036][T17990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1853.955023][T17990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1853.961446][T17990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1853.977950][T17990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1854.557280][T22616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1854.650013][T22616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1854.670032][T22616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1854.682290][T22616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1854.701755][T22616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1855.134925][T18043] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1855.221574][T18043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1855.236216][T18043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1855.237889][T18043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1855.242470][T18043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1856.060422][T26653] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1856.118368][T26653] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1856.134542][T26653] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1856.179933][T26653] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1856.182824][T26653] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1856.772492][T26649] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1856.840186][T26649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1856.850874][T26649] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1856.862495][T26649] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1856.879652][T26649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1911.687196][T22616] Bluetooth: hci5: command tx timeout [ 1913.693924][ T5598] Bluetooth: hci1: command tx timeout [ 1913.783805][ T5598] Bluetooth: hci5: command tx timeout [ 1914.674384][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.674455][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.973937][ T5598] Bluetooth: hci7: command tx timeout [ 1915.064260][T26649] Bluetooth: hci9: command tx timeout [ 1915.065381][ T5598] Bluetooth: hci8: command tx timeout [ 1915.775295][ T5598] Bluetooth: hci1: command tx timeout [ 1915.853724][ T5598] Bluetooth: hci5: command tx timeout [ 1917.053742][ T5598] Bluetooth: hci7: command tx timeout [ 1917.134142][ T5598] Bluetooth: hci8: command tx timeout [ 1917.134177][ T5598] Bluetooth: hci9: command tx timeout [ 1917.853742][T26649] Bluetooth: hci1: command tx timeout [ 1917.944164][T26649] Bluetooth: hci5: command tx timeout [ 1918.341548][ T5598] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1918.441293][ T5598] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1918.459967][ T5598] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1918.483837][ T5598] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1918.484784][ T5598] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1918.581544][T26649] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1918.706736][T18043] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1918.711510][T18043] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1918.730056][T18043] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1918.756434][T18043] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1919.145180][ T5598] Bluetooth: hci7: command tx timeout [ 1919.214229][ T5598] Bluetooth: hci9: command tx timeout [ 1919.214264][ T5598] Bluetooth: hci8: command tx timeout [ 1919.934067][T18043] Bluetooth: hci1: command tx timeout [ 1920.733726][T26649] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1920.904142][T26649] Bluetooth: hci10: command tx timeout [ 1921.134321][T26649] Bluetooth: hci11: command tx timeout [ 1921.213821][T26649] Bluetooth: hci7: command tx timeout [ 1921.293965][T18043] Bluetooth: hci9: command tx timeout [ 1921.294019][T26649] Bluetooth: hci8: command tx timeout [ 1922.974201][T26649] Bluetooth: hci10: command tx timeout [ 1923.214758][T26649] Bluetooth: hci11: command tx timeout [ 1925.053721][T26649] Bluetooth: hci10: command tx timeout [ 1925.298879][T26649] Bluetooth: hci11: command tx timeout [ 1927.133917][T26649] Bluetooth: hci10: command tx timeout [ 1927.375005][T26649] Bluetooth: hci11: command tx timeout [ 1976.106805][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.106879][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1985.053958][ T37] INFO: task syz.2.6107:26602 blocked for more than 143 seconds. [ 1985.053987][ T37] Tainted: G L syzkaller #0 [ 1985.053998][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1985.054009][ T37] task:syz.2.6107 state:D stack:26048 pid:26602 tgid:26599 ppid:21523 task_flags:0x400140 flags:0x00080002 [ 1985.054062][ T37] Call Trace: [ 1985.054070][ T37] [ 1985.054086][ T37] __schedule+0x16d9/0x5700 [ 1985.054159][ T37] ? __pfx___schedule+0x10/0x10 [ 1985.054202][ T37] rt_mutex_schedule+0x76/0xf0 [ 1985.054230][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1985.054264][ T37] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1985.054291][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1985.054318][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1985.054342][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1985.054385][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1985.054536][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1985.054561][ T37] mutex_lock_nested+0x168/0x1d0 [ 1985.054584][ T37] ? rtnl_nets_add+0x16c/0x300 [ 1985.054608][ T37] rtnl_newlink+0xc10/0x1c30 [ 1985.054644][ T37] ? netlink_unicast+0x7b8/0x990 [ 1985.054699][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1985.054725][ T37] ? do_syscall_64+0x166/0x520 [ 1985.054770][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.054817][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.054850][ T37] ? kasan_quarantine_put+0xbb/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1985.054876][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 1985.054899][ T37] ? nlmon_xmit+0xb0/0x100 [ 1985.055000][ T37] ? kmem_cache_free+0x187/0x6d0 [ 1985.055027][ T37] ? nlmon_xmit+0xb0/0x100 [ 1985.055061][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.055092][ T37] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1985.055127][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 1985.055157][ T37] ? __dev_queue_xmit+0x294/0x3880 [ 1985.055255][ T37] ? __dev_queue_xmit+0x1ee9/0x3880 [ 1985.055284][ T37] ? lock_acquire+0x115/0x350 [ 1985.055323][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1985.055349][ T37] rtnetlink_rcv_msg+0x802/0xc00 [ 1985.055380][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1985.055406][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1985.055431][ T37] ? ref_tracker_free+0x668/0x820 [ 1985.055461][ T37] ? __pfx_ref_tracker_free+0x10/0x10 [ 1985.055497][ T37] netlink_rcv_skb+0x226/0x4a0 [ 1985.055522][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1985.055551][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1985.055588][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.055610][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.055639][ T37] netlink_unicast+0x7f5/0x990 [ 1985.055672][ T37] netlink_sendmsg+0x813/0xb40 [ 1985.055705][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.055730][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1985.055769][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.055791][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 1985.055872][ T37] ____sys_sendmsg+0x565/0x870 [ 1985.055903][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1985.055934][ T37] ? import_iovec+0x73/0xa0 [ 1985.055965][ T37] ___sys_sendmsg+0x2a5/0x360 [ 1985.055986][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.056012][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 1985.056037][ T37] ? futex_wait+0x2a2/0x390 [ 1985.056090][ T37] ? __fget_files+0x2a/0x420 [ 1985.056118][ T37] ? __fget_files+0x3a8/0x420 [ 1985.056149][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 1985.056174][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1985.056218][ T37] do_syscall_64+0x166/0x520 [ 1985.056238][ T37] ? trace_irq_disable+0x3b/0x140 [ 1985.056261][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.056281][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1985.056305][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.056325][ T37] RIP: 0033:0x7ffbee6ce159 [ 1985.056345][ T37] RSP: 002b:00007ffbec926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1985.056394][ T37] RAX: ffffffffffffffda RBX: 00007ffbee955fa0 RCX: 00007ffbee6ce159 [ 1985.056409][ T37] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1985.056422][ T37] RBP: 00007ffbee76506b R08: 0000000000000000 R09: 0000000000000000 [ 1985.056435][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.056448][ T37] R13: 00007ffbee956038 R14: 00007ffbee955fa0 R15: 00007ffdc594fc98 [ 1985.056480][ T37] [ 1985.056491][ T37] INFO: task syz.7.6108:26607 blocked for more than 143 seconds. [ 1985.056509][ T37] Tainted: G L syzkaller #0 [ 1985.056521][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1985.056531][ T37] task:syz.7.6108 state:D stack:27784 pid:26607 tgid:26604 ppid:20654 task_flags:0x400140 flags:0x00080002 [ 1985.056581][ T37] Call Trace: [ 1985.056589][ T37] [ 1985.056601][ T37] __schedule+0x16d9/0x5700 [ 1985.056656][ T37] ? __pfx___schedule+0x10/0x10 [ 1985.056698][ T37] rt_mutex_schedule+0x76/0xf0 [ 1985.056723][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1985.056756][ T37] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1985.056783][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1985.056810][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1985.056835][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1985.056876][ T37] ? nl80211_pre_doit+0x5e/0x890 [ 1985.056985][ T37] ? nl80211_pre_doit+0x5e/0x890 [ 1985.057003][ T37] mutex_lock_nested+0x168/0x1d0 [ 1985.057033][ T37] nl80211_pre_doit+0x5e/0x890 [ 1985.057059][ T37] genl_family_rcv_msg_doit+0x1db/0x340 [ 1985.057094][ T37] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1985.057141][ T37] ? bpf_lsm_capable+0x9/0x20 [ 1985.057172][ T37] ? security_capable+0x7e/0x2c0 [ 1985.057206][ T37] genl_rcv_msg+0x614/0x7a0 [ 1985.057240][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1985.057265][ T37] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1985.057284][ T37] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 1985.057308][ T37] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1985.057342][ T37] netlink_rcv_skb+0x226/0x4a0 [ 1985.057366][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1985.057395][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1985.057431][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.057453][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.057481][ T37] genl_rcv+0x28/0x40 [ 1985.057505][ T37] netlink_unicast+0x7f5/0x990 [ 1985.057538][ T37] netlink_sendmsg+0x813/0xb40 [ 1985.057571][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.057613][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1985.057650][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.057672][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 1985.057700][ T37] ____sys_sendmsg+0x565/0x870 [ 1985.057730][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1985.057761][ T37] ? import_iovec+0x73/0xa0 [ 1985.057791][ T37] ___sys_sendmsg+0x2a5/0x360 [ 1985.057811][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.057840][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 1985.057865][ T37] ? futex_wait+0x2a2/0x390 [ 1985.057917][ T37] ? __fget_files+0x2a/0x420 [ 1985.057937][ T37] ? __fget_files+0x3a8/0x420 [ 1985.057968][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 1985.057992][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1985.058036][ T37] do_syscall_64+0x166/0x520 [ 1985.058054][ T37] ? trace_irq_disable+0x3b/0x140 [ 1985.058078][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.058104][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1985.058128][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.058147][ T37] RIP: 0033:0x7f30ea81e159 [ 1985.058164][ T37] RSP: 002b:00007f30e8a55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1985.058185][ T37] RAX: ffffffffffffffda RBX: 00007f30eaaa6090 RCX: 00007f30ea81e159 [ 1985.058200][ T37] RDX: 0000000000024000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1985.058213][ T37] RBP: 00007f30ea8b506b R08: 0000000000000000 R09: 0000000000000000 [ 1985.058226][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.058239][ T37] R13: 00007f30eaaa6128 R14: 00007f30eaaa6090 R15: 00007ffe10d2f4e8 [ 1985.058271][ T37] [ 1985.058281][ T37] INFO: task syz.6.6113:26619 blocked for more than 143 seconds. [ 1985.058299][ T37] Tainted: G L syzkaller #0 [ 1985.058310][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1985.058320][ T37] task:syz.6.6113 state:D stack:28088 pid:26619 tgid:26618 ppid:22457 task_flags:0x400140 flags:0x00080002 [ 1985.058370][ T37] Call Trace: [ 1985.058377][ T37] [ 1985.058389][ T37] __schedule+0x16d9/0x5700 [ 1985.058444][ T37] ? __pfx___schedule+0x10/0x10 [ 1985.058487][ T37] rt_mutex_schedule+0x76/0xf0 [ 1985.058510][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1985.058549][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1985.058575][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1985.058600][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1985.058642][ T37] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1985.058675][ T37] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1985.058700][ T37] mutex_lock_nested+0x168/0x1d0 [ 1985.058729][ T37] rtnetlink_rcv_msg+0x767/0xc00 [ 1985.058755][ T37] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 1985.058783][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1985.058810][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1985.058839][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.058875][ T37] netlink_rcv_skb+0x226/0x4a0 [ 1985.058899][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1985.058929][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1985.058965][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.058988][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.059016][ T37] netlink_unicast+0x7f5/0x990 [ 1985.059048][ T37] netlink_sendmsg+0x813/0xb40 [ 1985.059082][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.059114][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1985.059149][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.059172][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 1985.059200][ T37] ____sys_sendmsg+0x565/0x870 [ 1985.059229][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1985.059260][ T37] ? import_iovec+0x73/0xa0 [ 1985.059290][ T37] ___sys_sendmsg+0x2a5/0x360 [ 1985.059310][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.059338][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 1985.059364][ T37] ? futex_wait+0x2a2/0x390 [ 1985.059415][ T37] ? __fget_files+0x2a/0x420 [ 1985.059434][ T37] ? __fget_files+0x3a8/0x420 [ 1985.059465][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 1985.059490][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1985.059533][ T37] do_syscall_64+0x166/0x520 [ 1985.059552][ T37] ? trace_irq_disable+0x3b/0x140 [ 1985.059574][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.059594][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1985.059617][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.059636][ T37] RIP: 0033:0x7f287972e159 [ 1985.059653][ T37] RSP: 002b:00007f2877986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1985.059673][ T37] RAX: ffffffffffffffda RBX: 00007f28799b5fa0 RCX: 00007f287972e159 [ 1985.059687][ T37] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1985.059700][ T37] RBP: 00007f28797c506b R08: 0000000000000000 R09: 0000000000000000 [ 1985.059713][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.059725][ T37] R13: 00007f28799b6038 R14: 00007f28799b5fa0 R15: 00007fffc6f90018 [ 1985.059757][ T37] [ 1985.059767][ T37] INFO: task syz.3.6117:26628 blocked for more than 143 seconds. [ 1985.059783][ T37] Tainted: G L syzkaller #0 [ 1985.059794][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1985.059804][ T37] task:syz.3.6117 state:D stack:26608 pid:26628 tgid:26627 ppid:24379 task_flags:0x400140 flags:0x00080002 [ 1985.059852][ T37] Call Trace: [ 1985.059860][ T37] [ 1985.059872][ T37] __schedule+0x16d9/0x5700 [ 1985.059902][ T37] ? kernel_text_address+0xa5/0xe0 [ 1985.059948][ T37] ? __pfx___schedule+0x10/0x10 [ 1985.059990][ T37] rt_mutex_schedule+0x76/0xf0 [ 1985.060014][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1985.060052][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1985.060079][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1985.060109][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1985.060152][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1985.060185][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1985.060210][ T37] mutex_lock_nested+0x168/0x1d0 [ 1985.060232][ T37] ? rtnl_nets_add+0x16c/0x300 [ 1985.060256][ T37] rtnl_newlink+0xc10/0x1c30 [ 1985.060292][ T37] ? netlink_unicast+0x7b8/0x990 [ 1985.060313][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1985.060338][ T37] ? do_syscall_64+0x166/0x520 [ 1985.060355][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.060401][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.060433][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 1985.060458][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 1985.060480][ T37] ? nlmon_xmit+0xb0/0x100 [ 1985.060504][ T37] ? kmem_cache_free+0x187/0x6d0 [ 1985.060528][ T37] ? nlmon_xmit+0xb0/0x100 [ 1985.060562][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.060592][ T37] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1985.060616][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 1985.060636][ T37] ? __dev_queue_xmit+0x294/0x3880 [ 1985.060661][ T37] ? __dev_queue_xmit+0x1ee9/0x3880 [ 1985.060690][ T37] ? lock_acquire+0x115/0x350 [ 1985.060728][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1985.060754][ T37] rtnetlink_rcv_msg+0x802/0xc00 [ 1985.060785][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1985.060812][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1985.060837][ T37] ? ref_tracker_free+0x668/0x820 [ 1985.060866][ T37] ? __pfx_ref_tracker_free+0x10/0x10 [ 1985.060902][ T37] netlink_rcv_skb+0x226/0x4a0 [ 1985.060930][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1985.060960][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1985.060997][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.061019][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1985.061048][ T37] netlink_unicast+0x7f5/0x990 [ 1985.061079][ T37] netlink_sendmsg+0x813/0xb40 [ 1985.061118][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.061143][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1985.061180][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.061203][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 1985.061231][ T37] ____sys_sendmsg+0x565/0x870 [ 1985.061261][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1985.061292][ T37] ? import_iovec+0x73/0xa0 [ 1985.061321][ T37] ___sys_sendmsg+0x2a5/0x360 [ 1985.061341][ T37] ? __lock_acquire+0x747/0x2de0 [ 1985.061369][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 1985.061394][ T37] ? futex_wait+0x2a2/0x390 [ 1985.061446][ T37] ? __fget_files+0x2a/0x420 [ 1985.061466][ T37] ? __fget_files+0x3a8/0x420 [ 1985.061496][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 1985.061520][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1985.061563][ T37] do_syscall_64+0x166/0x520 [ 1985.061583][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.061602][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1985.061626][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.061646][ T37] RIP: 0033:0x7f9c35f7e159 [ 1985.061663][ T37] RSP: 002b:00007f9c341d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1985.061683][ T37] RAX: ffffffffffffffda RBX: 00007f9c36205fa0 RCX: 00007f9c35f7e159 [ 1985.061697][ T37] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1985.061710][ T37] RBP: 00007f9c3601506b R08: 0000000000000000 R09: 0000000000000000 [ 1985.061723][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.061736][ T37] R13: 00007f9c36206038 R14: 00007f9c36205fa0 R15: 00007ffe24de1cf8 [ 1985.061769][ T37] [ 1985.061804][ T37] [ 1985.061804][ T37] Showing all locks held in the system: [ 1985.061820][ T37] locks held by ktimers/1/29: 4, last CPU#1: [ 1985.061909][ T37] #0: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: __local_bh_disable_ip+0x3d/0x420 [ 1985.062027][ T37] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1985.062078][ T37] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: net_tx_action+0x5bb/0xc30 [ 1985.062167][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: net_tx_action+0x69e/0xc30 [ 1985.062220][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 1985.062235][ T37] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1985.062292][ T37] locks held by kworker/1:1/43: 3, on CPU#1: [ 1985.062307][ T37] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062358][ T37] #1: ffffc90000b47c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062408][ T37] #2: ffffffff8f5d58f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1985.062496][ T37] locks held by kworker/u8:2/48: 4, on CPU#0: [ 1985.062511][ T37] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062561][ T37] #1: ffffc90000ba7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062612][ T37] #2: ffffffff8f5c7060 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1985.062681][ T37] #3: ffffffff8f5d58f8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1985.062728][ T37] locks held by kworker/u8:5/68: 3, on CPU#0: [ 1985.062743][ T37] #0: ffff88803285d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062792][ T37] #1: ffffc9000154fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062843][ T37] #2: ffffffff8f5d58f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1985.062929][ T37] locks held by kworker/u8:7/988: 6, last CPU#1: [ 1985.062943][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.062993][ T37] #1: ffffc90005247c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1985.063045][ T37] #2: ffff888063bf8310 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1985.063194][ T37] #3: ffff888032386d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1985.063243][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1985.063292][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1985.063361][ T37] locks held by getty/5338: 2, on CPU#1: [ 1985.063375][ T37] #0: ffff8880366020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1985.063470][ T37] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1985.063554][ T37] locks held by kworker/1:3/5603: 2, last CPU#1: [ 1986.498472][ T37] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.592453][ T37] #1: ffffc90004cb7c40 ((work_completion)(&p->wq)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.592532][ T37] locks held by kworker/1:5/5712: 3, last CPU#1: [ 1986.592547][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.592599][ T37] #1: ffffc900051cfc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.592649][ T37] #2: ffffffff8ed10118 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 1986.592799][ T37] locks held by kworker/0:7/5720: 3, last CPU#0: [ 1986.592814][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.592863][ T37] #1: ffffc90005287c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.592912][ T37] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x18b0 [ 1986.592998][ T37] locks held by kworker/u8:8/12596: 6, on CPU#0: [ 1986.593013][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.593062][ T37] #1: ffffc900055dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1986.593113][ T37] #2: ffff88803dde8310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1986.593167][ T37] #3: ffff8880613fe120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0