last executing test programs: 19m53.218965269s ago: executing program 3 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0xf5, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 19m51.572506648s ago: executing program 3 (id=139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r2, &(0x7f0000000080)='4', 0x1) 19m42.41703618s ago: executing program 3 (id=149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, &(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x5400, 0x3f00) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000300)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xe2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) syslog(0x3, &(0x7f00000001c0)=""/119, 0x77) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2, 0x1}, 0x10) 19m40.185712289s ago: executing program 3 (id=152): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000019640)={0x1, 0x0, 0x0, &(0x7f0000019680)='\x00'/72, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000198c0)=0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000019340)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000019380)={0x0, 0x6, 0x1}, 0x8) 19m32.986003321s ago: executing program 3 (id=165): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e23, 0x8, @local}, {0xa, 0x2, 0x0, @private1}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0xc93, @local}, {0xa, 0x4e1f, 0x0, @mcast1, 0xfffffffd}, 0x1, {[0x8000, 0x0, 0x2, 0xfffffffd, 0x0, 0x221a, 0xfffffffe]}}, 0x5c) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mbind(&(0x7f0000f8b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 19m30.078859389s ago: executing program 3 (id=169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) readv(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r3, &(0x7f0000000080)='4', 0x1) socket$inet(0xa, 0x801, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 19m14.263257118s ago: executing program 32 (id=169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) readv(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r3, &(0x7f0000000080)='4', 0x1) socket$inet(0xa, 0x801, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 17m18.895439835s ago: executing program 2 (id=363): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="379500000000000003e7720000000800", @ANYRES32=r4], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='Mid', 0x3) 17m18.281576429s ago: executing program 2 (id=366): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, &(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x5400, 0x3f00) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000300)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xe2002, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) rseq(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syslog(0x3, &(0x7f00000001c0)=""/119, 0x77) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2, 0x1}, 0x10) 17m15.120640746s ago: executing program 2 (id=370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_set$pid(0x1, 0x0, 0x2007) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="7ba9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m11.012882639s ago: executing program 2 (id=376): r0 = socket$inet(0x2, 0x800, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, &(0x7f0000000500)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x41}, 0x4008) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000a27000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x521e0640998a09c5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x4, 0x6, 0x6, 0x1000000002}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000001440)={0x0, &(0x7f0000000040)}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000014c0)={0x15, 0x0, [{0x4, 0xeb88, 0x6, 0x1, 0xfff, 0x3, 0x9}, {0x7, 0x2, 0x4, 0x4, 0x4, 0x4, 0x4}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r10 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r9) r11 = add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000001680)="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", 0x55d, r10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000bc0)='asymmetric\x00', &(0x7f0000000c00)=@keyring={'key_or_keyring:', r10}) keyctl$revoke(0x3, r11) add_key(&(0x7f0000000c40)='asymmetric\x00', 0x0, &(0x7f0000000c80)="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", 0x559, r9) setsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) 17m9.738135652s ago: executing program 2 (id=380): openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0xb3, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e01002f3d63"], 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x109a8, 0x3}, 0x30, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1830000001000000000000000300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) landlock_restrict_self(r2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04050400c900", @ANYRES8=r3], 0x7) 17m6.039376465s ago: executing program 2 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r2, &(0x7f0000000080)='4', 0x1) 16m49.562720983s ago: executing program 33 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r2, &(0x7f0000000080)='4', 0x1) 11m12.744769761s ago: executing program 1 (id=1138): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008100"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008008000b7040000000000008500000033000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000d80)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x28, 0x89, 0x0, @remote, @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@generic={0x4c, 0x18, "88a907735e847404fa694301d44ab0de5d057765e174db3c"}]}]}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x1, 0x1c26}, &(0x7f00000000c0)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x138, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x100, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xf0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0xcc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "0933014ae3e062734abe194e42fb133438de648cb5f34db0f8aa365b5c5869875ccf5ba0a879b9db3bc05b46a0d70916a18d34294549fec71ec5f494f33d2faf96cd4e3ff4aefbeeef5a26b6fb12c647b464f6824624a090010dadb4b9af0c8f2634dadb058ad306441b911459059cfa89b51d68034720ef06a430b1cb41"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1bc}}, 0x0) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r6, 0x84, 0x82, &(0x7f0000000400)={r7, 0xd}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b72400000001000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="14000280060001008500000006"], 0x2c}}, 0x0) 11m8.169241956s ago: executing program 1 (id=1147): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m7.408731765s ago: executing program 1 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 11m6.546459612s ago: executing program 1 (id=1154): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m6.100434102s ago: executing program 1 (id=1157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500"], &(0x7f0000000680)='GPL\x00', 0xa, 0xde, &(0x7f00000006c0)=""/222, 0x0, 0x8}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000a00)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f0000019a00)='./cgroup/../file0\x00', 0x0) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019a80)={0x2, 0x4e23, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x4004000) 11m3.730728235s ago: executing program 1 (id=1159): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x890) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m48.143685744s ago: executing program 34 (id=1159): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x890) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m4.279361284s ago: executing program 5 (id=1341): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, 0x0, &(0x7f0000000a80)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d00)=""/195, 0xc3}], 0x1}, 0x2000) 9m2.182994921s ago: executing program 5 (id=1346): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 8m57.386219052s ago: executing program 5 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f00000001c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000003c0)={0x33, 0x7, 0xfffffffb}) 8m57.03006156s ago: executing program 5 (id=1358): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) write(r0, 0x0, 0x49) 8m56.909874234s ago: executing program 5 (id=1359): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x8) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xb5f0, 0x23, 0x83, "00020000000000000000ffff1000"}) r3 = dup3(0xffffffffffffffff, r2, 0x0) read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f000001a300)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f000001a380)={0x0, 0x3938700}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) socket(0x28, 0x801, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000192c0)={0x18, {"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", 0x1000}}, 0x1006) 8m56.136672518s ago: executing program 5 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./dev\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc0504e47, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x60040000) 8m39.898145985s ago: executing program 35 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./dev\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc0504e47, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x60040000) 3m15.606713709s ago: executing program 8 (id=2325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000880)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000900)='ip6gretap0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="8f", 0x1}], 0x1}}], 0x1, 0xfc1749c223031dc4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m15.30355736s ago: executing program 8 (id=2327): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x48) mlockall(0x7) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r0, &(0x7f0000000b40)="3540a7a6ccdd", 0x6) 3m15.047186467s ago: executing program 7 (id=2329): socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) pipe(&(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000008c0)=0x2, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r1, 0x0, 0x0) acct(&(0x7f0000000a00)='./file1\x00') acct(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004802) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0x1}, {0x2, 0x10000}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50d0}, 0x0) poll(0x0, 0x0, 0x9) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) 3m14.65872672s ago: executing program 7 (id=2331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0x1, 0x0, 0x55) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0xfffffff4, 0x4) 3m14.638767706s ago: executing program 0 (id=2332): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$packet(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3m14.637393329s ago: executing program 6 (id=2333): ioprio_get$pid(0x2, 0x0) 3m14.379557404s ago: executing program 8 (id=2334): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x48) mlockall(0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r0, &(0x7f0000000b40)="3540a7a6ccdd", 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000800)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x1, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0x0, 0x6, 0x4, 0x80, 0x2, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000005c0)=0xffff, 0x8) 3m14.307963851s ago: executing program 7 (id=2336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m14.257514486s ago: executing program 6 (id=2337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000880)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="8f", 0x1}], 0x1}}], 0x1, 0xfc1749c223031dc4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m14.077834439s ago: executing program 0 (id=2338): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m13.91237455s ago: executing program 6 (id=2339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) 3m13.904412721s ago: executing program 4 (id=2340): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 3m13.772488379s ago: executing program 0 (id=2341): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x61, 0x30, 0x30, 0x30, 0x61, 0x55, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f00000001c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000002c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x34]}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x3b, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r0) 3m13.752660342s ago: executing program 7 (id=2342): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000340)="fc", 0xfffffdd8, 0x7) 3m13.524390059s ago: executing program 4 (id=2343): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, 0x0, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x50) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000009c0)='27', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030020010000"], 0x48}}, 0x0) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x1, 0x0, 0x410, 0x0, 0x0, @by_dev={r0}, [@multipath={0x0, 0x1048, 0x0, 0xb0, 'multipath\x00', {'0', 0x20, '1 emc', 0x20, 0x1, 0x20, 0x1, [{0x20, 'service-time 0', 0x20, 0x2, 0x20, '2', [{0x20, @ram_num={'1:', 0x0}, ' 1000 100'}, {0x20, @ram={'/dev/ram', 0x1}, ' 1'}]}]}}]}) 3m13.496677655s ago: executing program 8 (id=2344): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r0, &(0x7f0000000b40)="3540a7a6ccdd", 0x6) 3m13.348530087s ago: executing program 0 (id=2345): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 3m13.240602385s ago: executing program 7 (id=2346): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000cc0)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000a00)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) prlimit64(0x0, 0x7, &(0x7f0000000800)={0x0, 0x3}, 0x0) fcntl$addseals(r1, 0x409, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000c40)={r1, 0x0, 0x0, 0x2000}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000f40)={0xaa, 0x100}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000f80)={&(0x7f0000000000/0x800000)=nil, 0x800000}) write$vhost_msg_v2(r2, &(0x7f0000000d40)={0x2, 0x0, {&(0x7f0000000dc0)=""/86, 0x56, 0x0, 0x3, 0x3}}, 0x24) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0xe7) set_mempolicy(0x8006, &(0x7f0000000700)=0xfff, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3m13.164273753s ago: executing program 4 (id=2347): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x408, 0x103) 3m12.935498003s ago: executing program 0 (id=2348): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$packet(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3m12.803757328s ago: executing program 4 (id=2349): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000880)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="8f", 0x1}], 0x1}}], 0x1, 0xfc1749c223031dc4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m12.592277319s ago: executing program 6 (id=2350): prlimit64(0x0, 0x7, &(0x7f0000000800)={0x0, 0x3}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) 3m12.40473869s ago: executing program 8 (id=2351): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m12.376610016s ago: executing program 6 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m12.353719598s ago: executing program 4 (id=2353): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = fsopen(&(0x7f0000001e00)='configfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000001e40)='.\x00', 0x0, &(0x7f0000001e80)={0xf, 0xf3}, 0x20) 3m12.163489708s ago: executing program 0 (id=2354): listen(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$md_sysfs(r0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='lock'], 0xa) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) 3m12.111134381s ago: executing program 7 (id=2355): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x61, 0x30, 0x30, 0x30, 0x61, 0x55, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f00000001c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000002c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x34]}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x3b, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r0) 3m12.110285864s ago: executing program 8 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000440)="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", 0x2000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000024c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) ppoll(&(0x7f0000006fc0)=[{0xffffffffffffffff, 0xe483}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002480)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000005d40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000005d80)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 3m12.028391662s ago: executing program 4 (id=2357): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) 3m11.964537512s ago: executing program 6 (id=2358): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 1m27.584669823s ago: executing program 36 (id=2354): listen(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$md_sysfs(r0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='lock'], 0xa) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) 0s ago: executing program 37 (id=2355): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x61, 0x30, 0x30, 0x30, 0x61, 0x55, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f00000001c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000002c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x34]}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x3b, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r0) kernel console output (not intermixed with test programs): -1: selecting invalid altsetting 7 [ 837.156064][ T5372] cxusb: set interface failed [ 837.156077][ T5372] dvb-usb: bulk message failed: -22 (1/0) [ 837.290288][ T5372] DVB: Unable to find symbol lgdt330x_attach() [ 837.290394][ T5372] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 837.614946][ T5372] rc_core: IR keymap rc-dvico-portable not found [ 837.614970][ T5372] Registered IR keymap rc-empty [ 837.648364][ T5372] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 837.665726][ T5372] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input11 [ 837.747975][ T5372] dvb-usb: schedule remote query interval to 100 msecs. [ 837.748002][ T5372] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 837.778335][ T5372] usb 6-1: USB disconnect, device number 40 [ 838.621413][ T5372] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 838.756700][T11308] hsr_slave_0: entered promiscuous mode [ 838.758146][T11308] hsr_slave_1: entered promiscuous mode [ 838.759552][T11308] debugfs: 'hsr0' already exists in 'hsr' [ 838.759573][T11308] Cannot create hsr debugfs directory [ 842.038235][ T3167] bridge_slave_1: left allmulticast mode [ 842.038277][ T3167] bridge_slave_1: left promiscuous mode [ 842.038543][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.675860][ T3167] bridge_slave_0: left allmulticast mode [ 842.675887][ T3167] bridge_slave_0: left promiscuous mode [ 842.676070][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.447144][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.590138][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.708424][ T3167] bond0 (unregistering): Released all slaves [ 851.019377][T11588] FAULT_INJECTION: forcing a failure. [ 851.019377][T11588] name failslab, interval 1, probability 0, space 0, times 0 [ 851.019419][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 851.019445][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 851.019459][T11588] Call Trace: [ 851.019467][T11588] [ 851.019477][T11588] dump_stack_lvl+0xe8/0x150 [ 851.019520][T11588] should_fail_ex+0x447/0x5e0 [ 851.019554][T11588] should_failslab+0xa8/0x100 [ 851.019583][T11588] __kvmalloc_node_noprof+0x171/0x880 [ 851.019609][T11588] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 851.019635][T11588] ? io_alloc_cache_init+0x42/0x140 [ 851.019661][T11588] ? io_alloc_cache_init+0x42/0x140 [ 851.019694][T11588] io_alloc_cache_init+0x42/0x140 [ 851.019722][T11588] io_ring_ctx_alloc+0x537/0xba0 [ 851.019753][T11588] io_uring_create+0x50/0x980 [ 851.019780][T11588] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 851.019813][T11588] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 851.019857][T11588] ? rcu_is_watching+0x16/0xb0 [ 851.019891][T11588] do_syscall_64+0x16a/0x530 [ 851.019917][T11588] ? trace_irq_disable+0x3b/0x140 [ 851.019949][T11588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.019969][T11588] ? clear_bhb_loop+0x70/0xc0 [ 851.019994][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.020015][T11588] RIP: 0033:0x7febb0668f19 [ 851.020035][T11588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.020053][T11588] RSP: 002b:00007febae8ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 851.020077][T11588] RAX: ffffffffffffffda RBX: 00007febb08e5fa0 RCX: 00007febb0668f19 [ 851.020092][T11588] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 00000000000023bb [ 851.020105][T11588] RBP: 00007febb06f7f6d R08: 0000000000000000 R09: 0000000000000000 [ 851.020119][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.020132][T11588] R13: 00007febb08e6038 R14: 00007febb08e5fa0 R15: 00007ffe42fce748 [ 851.020171][T11588] [ 852.149601][ T3167] hsr_slave_0: left promiscuous mode [ 852.208422][ T3167] hsr_slave_1: left promiscuous mode [ 852.209637][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.245923][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.355147][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 852.511251][ T10] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 852.525482][ T10] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 852.525521][ T10] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 852.525545][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.529290][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 852.529318][ T10] usb 5-1: Product: syz [ 852.529333][ T10] usb 5-1: Manufacturer: syz [ 852.529355][ T10] usb 5-1: SerialNumber: syz [ 852.611226][ T10] usb 5-1: config 0 descriptor?? [ 852.626368][ T10] usb 5-1: selecting invalid altsetting 0 [ 852.870733][ T10] usb 5-1: USB disconnect, device number 60 [ 853.103703][T11627] udevd[11627]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.146969][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 857.225571][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 866.205014][ T5301] 8021q: adding VLAN 0 to HW filter on device eth13 [ 867.962147][T11732] FAULT_INJECTION: forcing a failure. [ 867.962147][T11732] name failslab, interval 1, probability 0, space 0, times 0 [ 867.962183][T11732] CPU: 1 UID: 0 PID: 11732 Comm: syz.6.1368 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 867.962208][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 867.962231][T11732] Call Trace: [ 867.962239][T11732] [ 867.962248][T11732] dump_stack_lvl+0xe8/0x150 [ 867.962292][T11732] should_fail_ex+0x447/0x5e0 [ 867.962326][T11732] should_failslab+0xa8/0x100 [ 867.962357][T11732] __kvmalloc_node_noprof+0x171/0x880 [ 867.962382][T11732] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 867.962406][T11732] ? io_alloc_cache_init+0x42/0x140 [ 867.962432][T11732] ? io_alloc_cache_init+0x42/0x140 [ 867.962464][T11732] io_alloc_cache_init+0x42/0x140 [ 867.962494][T11732] io_ring_ctx_alloc+0x57a/0xba0 [ 867.962529][T11732] io_uring_create+0x50/0x980 [ 867.962557][T11732] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 867.962590][T11732] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 867.962632][T11732] ? rcu_is_watching+0x16/0xb0 [ 867.962667][T11732] do_syscall_64+0x16a/0x530 [ 867.962695][T11732] ? trace_irq_disable+0x3b/0x140 [ 867.962718][T11732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.962738][T11732] ? clear_bhb_loop+0x70/0xc0 [ 867.962765][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.962785][T11732] RIP: 0033:0x7ffa7e0e8f19 [ 867.962805][T11732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.962824][T11732] RSP: 002b:00007ffa7c32e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 867.962846][T11732] RAX: ffffffffffffffda RBX: 00007ffa7e365fa0 RCX: 00007ffa7e0e8f19 [ 867.962861][T11732] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 00000000000023bb [ 867.962876][T11732] RBP: 00007ffa7e177f6d R08: 0000000000000000 R09: 0000000000000000 [ 867.962890][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.962903][T11732] R13: 00007ffa7e366038 R14: 00007ffa7e365fa0 R15: 00007fffdc596078 [ 867.962937][T11732] [ 869.387759][T11726] rxe_eth0 speed is unknown, defaulting to 1000 [ 869.655136][T11719] device-mapper: ioctl: device has been removed from the dev hash table. [ 869.834175][ T5656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.044149][ T5656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.063031][ T5656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.073055][ T5656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.082515][ T5656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.518371][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.518445][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.610413][T11760] FAULT_INJECTION: forcing a failure. [ 870.610413][T11760] name failslab, interval 1, probability 0, space 0, times 0 [ 870.610469][T11760] CPU: 0 UID: 0 PID: 11760 Comm: syz.4.1381 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 870.610494][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 870.610507][T11760] Call Trace: [ 870.610515][T11760] [ 870.610525][T11760] dump_stack_lvl+0xe8/0x150 [ 870.610666][T11760] should_fail_ex+0x447/0x5e0 [ 870.610700][T11760] should_failslab+0xa8/0x100 [ 870.610726][T11760] __kmalloc_cache_noprof+0x9c/0x670 [ 870.610751][T11760] ? io_wq_create+0x6b/0x7b0 [ 870.610777][T11760] ? io_wq_create+0x6b/0x7b0 [ 870.610811][T11760] io_wq_create+0x6b/0x7b0 [ 870.610842][T11760] io_uring_alloc_task_context+0x271/0x6c0 [ 870.610871][T11760] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 870.610903][T11760] ? alloc_file_pseudo+0x151/0x1e0 [ 870.610933][T11760] __io_uring_add_tctx_node+0x499/0x640 [ 870.610967][T11760] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 870.611016][T11760] ? __anon_inode_getfile+0x16c/0x210 [ 870.611049][T11760] io_uring_create+0x591/0x980 [ 870.611076][T11760] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 870.611107][T11760] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 870.611150][T11760] ? rcu_is_watching+0x16/0xb0 [ 870.611186][T11760] do_syscall_64+0x16a/0x530 [ 870.611211][T11760] ? trace_irq_disable+0x3b/0x140 [ 870.611238][T11760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.611259][T11760] ? clear_bhb_loop+0x70/0xc0 [ 870.611283][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.611299][T11760] RIP: 0033:0x7febb0668f19 [ 870.611320][T11760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.611340][T11760] RSP: 002b:00007febae8ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 870.611364][T11760] RAX: ffffffffffffffda RBX: 00007febb08e5fa0 RCX: 00007febb0668f19 [ 870.611381][T11760] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 00000000000023bb [ 870.611394][T11760] RBP: 00007febb06f7f6d R08: 0000000000000000 R09: 0000000000000000 [ 870.611406][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.611418][T11760] R13: 00007febb08e6038 R14: 00007febb08e5fa0 R15: 00007ffe42fce748 [ 870.611448][T11760] [ 872.265016][T10874] Bluetooth: hci4: command tx timeout [ 874.355057][T10874] Bluetooth: hci4: command tx timeout [ 874.851027][ T5656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 874.903793][ T5656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 874.918744][ T5656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 874.934120][ T5656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 874.939061][ T5656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 876.404178][T11740] rxe_eth0 speed is unknown, defaulting to 1000 [ 876.429231][ T5656] Bluetooth: hci4: command tx timeout [ 877.069137][ T5656] Bluetooth: hci6: command tx timeout [ 878.515060][ T5656] Bluetooth: hci4: command tx timeout [ 880.951390][ T5656] Bluetooth: hci6: command tx timeout [ 881.743176][ T3167] bridge_slave_1: left allmulticast mode [ 881.743215][ T3167] bridge_slave_1: left promiscuous mode [ 881.743468][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.893987][ T3167] bridge_slave_0: left allmulticast mode [ 881.894027][ T3167] bridge_slave_0: left promiscuous mode [ 881.894292][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.733949][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.846798][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.909356][ T3167] bond0 (unregistering): Released all slaves [ 884.269778][T10874] Bluetooth: hci6: command tx timeout [ 884.397079][T11790] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.395048][T10874] Bluetooth: hci6: command tx timeout [ 895.205488][ T3167] hsr_slave_0: left promiscuous mode [ 895.415205][ T3167] hsr_slave_1: left promiscuous mode [ 895.416292][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.459915][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.255631][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 896.325741][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 896.780490][T11956] program syz.6.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 901.520326][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.520622][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.520813][T11740] bridge_slave_0: entered allmulticast mode [ 901.559643][T11740] bridge_slave_0: entered promiscuous mode [ 901.681081][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.681230][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.681436][T11740] bridge_slave_1: entered allmulticast mode [ 901.710678][T11740] bridge_slave_1: entered promiscuous mode [ 901.892583][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.951764][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.092522][T11740] team0: Port device team_slave_0 added [ 902.099845][T11740] team0: Port device team_slave_1 added [ 902.260498][T12001] program syz.6.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 902.874932][T11996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 902.875263][T11996] block device autoloading is deprecated and will be removed. [ 902.949039][ T3167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.170232][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.170255][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.170283][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.235473][T12016] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 905.457781][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.457816][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.457846][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.602960][T12016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 905.897225][T12018] bond1: (slave dummy0): making interface the new active one [ 905.903073][T12018] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 908.433159][ T3167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.693151][ T5929] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 909.796005][T12042] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 909.867297][ T5929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 909.867929][ T5929] usb 7-1: not running at top speed; connect to a high speed hub [ 909.867965][ T5929] usb 7-1: New USB device found: idVendor=15ca, idProduct=0101, bcdDevice=0.40 [ 909.869169][ T5929] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 909.872429][ T5929] usb 7-1: string descriptor 0 read error: -22 [ 909.872570][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.900635][T12038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 909.950371][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 909.950432][ T5929] usb 7-1: MIDIStreaming interface descriptor not found [ 909.955272][T12042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 910.281857][T12050] program syz.4.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.338890][ T3167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.409155][T12046] bond2: (slave dummy0): Removing an active aggregator [ 910.424103][T12046] bond2: (slave dummy0): Releasing backup interface [ 910.454645][T12046] bond3: (slave dummy0): making interface the new active one [ 910.465000][T12046] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 910.502030][T11740] hsr_slave_0: entered promiscuous mode [ 910.503650][T11740] hsr_slave_1: entered promiscuous mode [ 910.544503][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.544686][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.559679][T11790] bridge_slave_0: entered allmulticast mode [ 910.563540][T11790] bridge_slave_0: entered promiscuous mode [ 912.276010][ T1012] usb 7-1: USB disconnect, device number 32 [ 913.210498][T12064] netlink: 'syz.6.1444': attribute type 1 has an invalid length. [ 913.240521][ T3167] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.349840][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.349975][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.350320][T11790] bridge_slave_1: entered allmulticast mode [ 913.386662][T11790] bridge_slave_1: entered promiscuous mode [ 913.603321][T12064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 913.636803][T12065] bond2: (slave dummy0): making interface the new active one [ 913.638780][T12065] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 913.895402][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.942383][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.236111][T11790] team0: Port device team_slave_0 added [ 914.310699][T11790] team0: Port device team_slave_1 added [ 916.426737][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.426758][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.426787][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.550088][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.550109][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.550136][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.672491][T12085] netlink: 'syz.4.1449': attribute type 1 has an invalid length. [ 917.159372][T12085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 919.102272][T12088] bond2: (slave veth5): Enslaving as an active interface with a down link [ 919.164942][ T1244] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 919.353647][ T1244] usb 7-1: unable to get BOS descriptor or descriptor too short [ 919.354270][ T1244] usb 7-1: not running at top speed; connect to a high speed hub [ 919.354312][ T1244] usb 7-1: New USB device found: idVendor=15ca, idProduct=0101, bcdDevice=0.40 [ 919.355939][ T1244] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 919.359592][ T1244] usb 7-1: string descriptor 0 read error: -22 [ 919.359736][ T1244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.461086][T12098] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 919.482771][T12105] netlink: 'syz.0.1454': attribute type 1 has an invalid length. [ 919.545707][ T1244] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.545744][ T1244] usb 7-1: MIDIStreaming interface descriptor not found [ 920.176691][T12105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 920.469459][T12107] bond3: (slave dummy0): Releasing active interface [ 920.735955][ T1244] usb 7-1: USB disconnect, device number 33 [ 920.818626][T12107] bond4: (slave dummy0): making interface the new active one [ 920.819431][T12107] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 923.767863][T11790] hsr_slave_0: entered promiscuous mode [ 923.833213][T11790] hsr_slave_1: entered promiscuous mode [ 923.839816][T11790] debugfs: 'hsr0' already exists in 'hsr' [ 923.839840][T11790] Cannot create hsr debugfs directory [ 925.322604][ T3167] bridge_slave_1: left allmulticast mode [ 925.322631][ T3167] bridge_slave_1: left promiscuous mode [ 925.322805][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.500570][ T3167] bridge_slave_0: left allmulticast mode [ 925.500598][ T3167] bridge_slave_0: left promiscuous mode [ 925.500776][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.018169][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.098707][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.184427][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 929.267837][ T3167] bond0 (unregistering): Released all slaves [ 929.285645][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 929.298947][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 929.303906][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 929.308051][ T5656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.673403][T10874] Bluetooth: hci0: command tx timeout [ 931.957008][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.957054][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.704962][T10874] Bluetooth: hci0: command tx timeout [ 935.785024][T10874] Bluetooth: hci0: command tx timeout [ 935.937458][ T5656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.965273][T12224] netlink: 'syz.6.1486': attribute type 1 has an invalid length. [ 935.990187][ T5656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 936.006150][ T5656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 936.007443][ T5656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 936.008876][ T5656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 936.352272][ T5301] 8021q: adding VLAN 0 to HW filter on device eth13 [ 936.550605][T12224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.754886][ T5907] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 937.844623][T12151] rxe_eth0 speed is unknown, defaulting to 1000 [ 937.866494][ T5656] Bluetooth: hci0: command tx timeout [ 937.928035][ T5907] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 937.930191][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.930252][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 937.930275][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 937.930300][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.930343][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.104913][ T5656] Bluetooth: hci1: command tx timeout [ 938.273731][ T5907] rtsx_usb 1-1:1.0: probe with driver rtsx_usb failed with error -90 [ 939.246704][ T3167] hsr_slave_0: left promiscuous mode [ 939.368048][ T3167] hsr_slave_1: left promiscuous mode [ 939.562613][ T3167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.562753][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.730359][ T3167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.730390][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.171110][ T3167] veth1_macvtap: left promiscuous mode [ 940.171227][ T3167] veth0_macvtap: left promiscuous mode [ 940.173528][ T3167] veth1_vlan: left promiscuous mode [ 940.173761][ T3167] veth0_vlan: left promiscuous mode [ 940.194931][ T5656] Bluetooth: hci1: command tx timeout [ 941.598605][T12302] md: invalid raid superblock magic on ram9 [ 941.598626][T12302] md: ram9 does not have a valid v0.0 superblock, not importing! [ 941.598833][T12302] md: md_import_device returned -22 [ 941.747712][ T1244] usb 1-1: USB disconnect, device number 48 [ 942.264888][ T5656] Bluetooth: hci1: command tx timeout [ 944.654793][ T5656] Bluetooth: hci1: command tx timeout [ 950.507371][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 950.585636][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 951.110035][T12221] rxe_eth0 speed is unknown, defaulting to 1000 [ 951.112351][ T5301] 8021q: adding VLAN 0 to HW filter on device eth14 [ 951.236014][T12353] bond1: (slave dummy0): Releasing active interface [ 951.409766][T12360] FAULT_INJECTION: forcing a failure. [ 951.409766][T12360] name fail_futex, interval 1, probability 0, space 0, times 0 [ 951.409796][T12360] CPU: 0 UID: 0 PID: 12360 Comm: syz.0.1522 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 951.409815][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 951.409825][T12360] Call Trace: [ 951.409832][T12360] [ 951.409840][T12360] dump_stack_lvl+0xe8/0x150 [ 951.409876][T12360] should_fail_ex+0x447/0x5e0 [ 951.409905][T12360] get_futex_key+0x1ab/0x1410 [ 951.409927][T12360] ? __pfx_futex_wake_mark+0x10/0x10 [ 951.409957][T12360] ? lock_acquire+0x115/0x350 [ 951.409984][T12360] ? __pfx_get_futex_key+0x10/0x10 [ 951.410010][T12360] futex_wake+0x119/0x600 [ 951.410038][T12360] ? __pfx_futex_wake+0x10/0x10 [ 951.410059][T12360] ? __sys_bpf+0xbf7/0xe00 [ 951.410088][T12360] ? __pfx___sys_bpf+0x10/0x10 [ 951.410110][T12360] do_futex+0x458/0x4e0 [ 951.410135][T12360] ? __pfx_do_futex+0x10/0x10 [ 951.410165][T12360] __se_sys_futex+0x3a8/0x450 [ 951.410195][T12360] ? __pfx___se_sys_futex+0x10/0x10 [ 951.410223][T12360] ? rcu_is_watching+0x16/0xb0 [ 951.410251][T12360] ? __x64_sys_futex+0x21/0xf0 [ 951.410275][T12360] do_syscall_64+0x16a/0x530 [ 951.410299][T12360] ? trace_irq_disable+0x3b/0x140 [ 951.410318][T12360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.410336][T12360] ? clear_bhb_loop+0x70/0xc0 [ 951.410358][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.410377][T12360] RIP: 0033:0x7f23b4618f19 [ 951.410395][T12360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.410411][T12360] RSP: 002b:00007f23b285e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 951.410432][T12360] RAX: ffffffffffffffda RBX: 00007f23b4895fa8 RCX: 00007f23b4618f19 [ 951.410447][T12360] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23b4895fac [ 951.410459][T12360] RBP: 00007f23b4895fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 951.410473][T12360] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 951.410486][T12360] R13: 00007f23b4896038 R14: 00007ffe7e31eb00 R15: 00007ffe7e31ebe8 [ 951.410516][T12360] [ 951.844235][T12363] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 952.061395][T12363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 952.223891][T12369] bond5: (slave veth7): Enslaving as an active interface with a down link [ 953.242277][T12398] netlink: 'syz.6.1532': attribute type 1 has an invalid length. [ 953.518921][T12398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 953.686990][T12402] bond4: (slave veth7): Enslaving as an active interface with a down link [ 957.484109][T12428] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 957.690618][T12428] 8021q: adding VLAN 0 to HW filter on device bond6 [ 957.952276][T12430] bond6: (slave veth9): Enslaving as an active interface with a down link [ 957.979248][ T5301] 8021q: adding VLAN 0 to HW filter on device eth15 [ 958.220395][T12437] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 958.762849][T12437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 959.244962][T12438] bond7: (slave veth11): Enslaving as an active interface with a down link [ 964.437249][T12151] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.437325][T12151] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.437473][T12151] bridge_slave_0: entered allmulticast mode [ 964.444336][T12151] bridge_slave_0: entered promiscuous mode [ 964.537153][T12151] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.537244][T12151] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.537372][T12151] bridge_slave_1: entered allmulticast mode [ 964.543067][T12151] bridge_slave_1: entered promiscuous mode [ 964.565315][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.579168][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.579330][T12221] bridge_slave_0: entered allmulticast mode [ 964.613419][T12221] bridge_slave_0: entered promiscuous mode [ 967.629058][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.629191][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.629386][T12221] bridge_slave_1: entered allmulticast mode [ 967.631793][T12221] bridge_slave_1: entered promiscuous mode [ 967.731014][T12151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.843908][T12151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.049516][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.228445][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.488861][T12151] team0: Port device team_slave_0 added [ 968.628836][T12151] team0: Port device team_slave_1 added [ 968.638409][T12221] team0: Port device team_slave_0 added [ 970.113980][T12221] team0: Port device team_slave_1 added [ 970.620451][T12151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.620470][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.620496][T12151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.727070][T12151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.727089][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.727107][T12151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.935362][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.935380][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.935405][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.009568][ T5301] 8021q: adding VLAN 0 to HW filter on device eth16 [ 972.037952][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.037969][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.037995][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.439841][T12151] hsr_slave_0: entered promiscuous mode [ 974.445530][T12151] hsr_slave_1: entered promiscuous mode [ 974.448223][T12151] debugfs: 'hsr0' already exists in 'hsr' [ 974.448243][T12151] Cannot create hsr debugfs directory [ 974.932184][T12221] hsr_slave_0: entered promiscuous mode [ 974.948255][T12221] hsr_slave_1: entered promiscuous mode [ 974.949195][T12221] debugfs: 'hsr0' already exists in 'hsr' [ 974.949216][T12221] Cannot create hsr debugfs directory [ 975.316522][ T3167] bridge_slave_1: left allmulticast mode [ 975.316566][ T3167] bridge_slave_1: left promiscuous mode [ 975.316884][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.832245][ T3167] bridge_slave_0: left allmulticast mode [ 976.832286][ T3167] bridge_slave_0: left promiscuous mode [ 976.832573][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.745211][T12544] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 979.257135][ T3167] bridge_slave_1: left allmulticast mode [ 979.257175][ T3167] bridge_slave_1: left promiscuous mode [ 979.257367][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.819903][ T3167] bridge_slave_0: left allmulticast mode [ 980.819952][ T3167] bridge_slave_0: left promiscuous mode [ 980.820224][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.716945][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.847327][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.928047][ T3167] bond0 (unregistering): Released all slaves [ 982.586252][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.848681][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.227565][ T3167] bond0 (unregistering): Released all slaves [ 984.813275][T12544] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 991.317139][T10874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.371673][T10874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.405284][T10874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.422960][T10874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.438762][T10874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 992.230892][T12611] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 993.418343][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.418416][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.679630][ T5656] Bluetooth: hci4: command tx timeout [ 993.716752][T12596] device-mapper: ioctl: device has been removed from the dev hash table. [ 993.870887][T12611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 994.225560][T12616] bond8: (slave veth13): Enslaving as an active interface with a down link [ 994.636305][ T5301] 8021q: adding VLAN 0 to HW filter on device eth17 [ 995.537818][ T3167] hsr_slave_0: left promiscuous mode [ 995.693674][ T3167] hsr_slave_1: left promiscuous mode [ 995.696004][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.706235][ T5656] Bluetooth: hci4: command tx timeout [ 995.747392][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.938562][ T5656] Bluetooth: hci4: command tx timeout [ 998.641779][T10874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.728399][T10874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.733980][T10874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.740144][T10874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.747915][T10874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.847848][ T3167] hsr_slave_0: left promiscuous mode [ 998.886221][ T3167] hsr_slave_1: left promiscuous mode [ 998.887521][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.936194][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.118919][T10874] Bluetooth: hci4: command tx timeout [ 1000.848554][T10874] Bluetooth: hci0: command tx timeout [ 1002.415794][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 1002.496109][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 1003.769950][T10874] Bluetooth: hci0: command tx timeout [ 1004.057291][T12669] uprobe: syz.6.1583:12669 failed to unregister, leaking uprobe [ 1005.789428][ T5656] Bluetooth: hci0: command tx timeout [ 1006.042144][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 1006.246677][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 1007.964113][ T5656] Bluetooth: hci0: command tx timeout [ 1012.810469][ T2976] bond4: (slave dummy0): link status definitely down, disabling slave [ 1012.971910][ T2976] bond4: now running without any active interface! [ 1016.456119][T12594] rxe_eth0 speed is unknown, defaulting to 1000 [ 1020.563793][T12657] rxe_eth0 speed is unknown, defaulting to 1000 [ 1023.516510][ T5301] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1030.771167][T12845] FAULT_INJECTION: forcing a failure. [ 1030.771167][T12845] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.771206][T12845] CPU: 1 UID: 0 PID: 12845 Comm: syz.6.1624 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1030.771233][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1030.771248][T12845] Call Trace: [ 1030.771256][T12845] [ 1030.771265][T12845] dump_stack_lvl+0xe8/0x150 [ 1030.771307][T12845] should_fail_ex+0x447/0x5e0 [ 1030.771338][T12845] ? __d_alloc+0x37/0x830 [ 1030.771360][T12845] should_failslab+0xa8/0x100 [ 1030.771392][T12845] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 1030.771417][T12845] ? __d_alloc+0x37/0x830 [ 1030.771442][T12845] __d_alloc+0x37/0x830 [ 1030.771465][T12845] d_alloc_pseudo+0x21/0xc0 [ 1030.771487][T12845] alloc_path_pseudo+0x107/0x220 [ 1030.771519][T12845] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1030.771558][T12845] alloc_file_pseudo+0xa8/0x1e0 [ 1030.771587][T12845] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1030.771627][T12845] __anon_inode_getfile+0x129/0x210 [ 1030.771658][T12845] io_uring_create+0x57a/0x980 [ 1030.771684][T12845] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1030.771717][T12845] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1030.771767][T12845] ? rcu_is_watching+0x16/0xb0 [ 1030.771806][T12845] do_syscall_64+0x16a/0x530 [ 1030.771836][T12845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.771857][T12845] ? clear_bhb_loop+0x70/0xc0 [ 1030.771884][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.771905][T12845] RIP: 0033:0x7ffa7e0e8f19 [ 1030.771925][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.771944][T12845] RSP: 002b:00007ffa7c32e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1030.771967][T12845] RAX: ffffffffffffffda RBX: 00007ffa7e365fa0 RCX: 00007ffa7e0e8f19 [ 1030.771983][T12845] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 00000000000023bb [ 1030.771996][T12845] RBP: 00007ffa7e177f6d R08: 0000000000000000 R09: 0000000000000000 [ 1030.772010][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.772023][T12845] R13: 00007ffa7e366038 R14: 00007ffa7e365fa0 R15: 00007fffdc596078 [ 1030.772056][T12845] [ 1032.723453][ T5301] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1035.964531][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.964658][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.965647][T12594] bridge_slave_0: entered allmulticast mode [ 1035.972351][T12594] bridge_slave_0: entered promiscuous mode [ 1036.057566][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.057778][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.058026][T12594] bridge_slave_1: entered allmulticast mode [ 1036.071861][T12594] bridge_slave_1: entered promiscuous mode [ 1037.946367][T12594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.054686][T12594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.438442][T12915] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 1041.446658][T12657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.446828][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.447042][T12657] bridge_slave_0: entered allmulticast mode [ 1041.476680][T12657] bridge_slave_0: entered promiscuous mode [ 1041.587892][T12915] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1043.069665][T12917] bond9: (slave veth15): Enslaving as an active interface with a down link [ 1043.419637][T12657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.419783][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.420005][T12657] bridge_slave_1: entered allmulticast mode [ 1043.563152][T12657] bridge_slave_1: entered promiscuous mode [ 1043.641198][T12594] team0: Port device team_slave_0 added [ 1043.967362][T12594] team0: Port device team_slave_1 added [ 1048.158196][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.463388][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.688392][T12972] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 1048.701776][T12594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.701794][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.701826][T12594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.877426][T12972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1048.885917][T12594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.885934][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.885960][T12594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.043837][T12973] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1049.164675][ T5301] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1049.193591][T12657] team0: Port device team_slave_0 added [ 1049.310977][T12657] team0: Port device team_slave_1 added [ 1052.204176][T10874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1052.270057][T10874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1052.292251][T10874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1052.306133][T10874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1052.306979][T10874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.585316][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.585336][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.585363][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.825195][ T3167] bridge_slave_1: left allmulticast mode [ 1052.825243][ T3167] bridge_slave_1: left promiscuous mode [ 1052.825512][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.006784][ T3167] bridge_slave_0: left allmulticast mode [ 1053.006828][ T3167] bridge_slave_0: left promiscuous mode [ 1053.007123][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.057113][ T3167] bridge_slave_1: left allmulticast mode [ 1054.057141][ T3167] bridge_slave_1: left promiscuous mode [ 1054.057307][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.166884][ T3167] bridge_slave_0: left allmulticast mode [ 1054.166915][ T3167] bridge_slave_0: left promiscuous mode [ 1054.167083][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.507916][ T5656] Bluetooth: hci1: command tx timeout [ 1054.615969][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.695616][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.757027][ T3167] bond0 (unregistering): Released all slaves [ 1054.828602][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.843109][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.047542][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.126093][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.187268][ T3167] bond0 (unregistering): Released all slaves [ 1055.216181][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.216196][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.216213][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.375036][T13028] FAULT_INJECTION: forcing a failure. [ 1056.375036][T13028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.375081][T13028] CPU: 1 UID: 0 PID: 13028 Comm: syz.6.1666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1056.375107][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1056.375120][T13028] Call Trace: [ 1056.375129][T13028] [ 1056.375138][T13028] dump_stack_lvl+0xe8/0x150 [ 1056.375180][T13028] should_fail_ex+0x447/0x5e0 [ 1056.375215][T13028] _copy_to_user+0x31/0xb0 [ 1056.375247][T13028] copy_siginfo_to_user+0x22/0xc0 [ 1056.375278][T13028] x64_setup_rt_frame+0x765/0xc50 [ 1056.375301][T13028] ? rt_spin_unlock+0x159/0x200 [ 1056.375347][T13028] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1056.375380][T13028] arch_do_signal_or_restart+0x45b/0x860 [ 1056.375409][T13028] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1056.375447][T13028] exit_to_user_mode_loop+0x10e/0x770 [ 1056.375469][T13028] ? rcu_is_watching+0x16/0xb0 [ 1056.375497][T13028] do_syscall_64+0x32c/0x530 [ 1056.375524][T13028] ? trace_irq_disable+0x3b/0x140 [ 1056.375545][T13028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.375566][T13028] ? clear_bhb_loop+0x70/0xc0 [ 1056.375591][T13028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.375611][T13028] RIP: 0033:0x7ffa7e0e8f19 [ 1056.375631][T13028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.375649][T13028] RSP: 002b:00007ffa7c32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 1056.375671][T13028] RAX: 0000000000000000 RBX: 00007ffa7e365fa0 RCX: 00007ffa7e0e8f19 [ 1056.375684][T13028] RDX: 00002000000003c0 RSI: 0000000000000021 RDI: 0000000000000394 [ 1056.375698][T13028] RBP: 00007ffa7e177f6d R08: 0000000000000000 R09: 0000000000000000 [ 1056.375710][T13028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.375722][T13028] R13: 00007ffa7e366038 R14: 00007ffa7e365fa0 R15: 00007fffdc596078 [ 1056.375754][T13028] [ 1056.585204][ T5656] Bluetooth: hci1: command tx timeout [ 1056.951968][T12995] rxe_eth0 speed is unknown, defaulting to 1000 [ 1057.031592][T10874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1057.076522][T10874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1057.123934][T10874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1057.140292][T10874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1057.165866][T10874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1058.835311][ T5656] Bluetooth: hci1: command tx timeout [ 1059.088576][T13059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1059.088641][T13059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1059.234560][T10874] Bluetooth: hci4: command tx timeout [ 1060.905639][T10874] Bluetooth: hci1: command tx timeout [ 1061.304946][T10874] Bluetooth: hci4: command tx timeout [ 1063.199628][ T5301] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1063.395496][T10874] Bluetooth: hci4: command tx timeout [ 1064.284822][T13032] rxe_eth0 speed is unknown, defaulting to 1000 [ 1067.644598][T10874] Bluetooth: hci4: command tx timeout [ 1068.572696][ T3167] hsr_slave_0: left promiscuous mode [ 1068.607065][ T3167] hsr_slave_1: left promiscuous mode [ 1068.608360][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.665023][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.797128][ T3167] hsr_slave_0: left promiscuous mode [ 1068.842537][ T3167] hsr_slave_1: left promiscuous mode [ 1068.843311][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.888040][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.911488][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 1069.986255][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 1071.198538][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 1071.275772][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 1077.970187][T13169] rxe_eth0 speed is unknown, defaulting to 1000 [ 1081.193805][T13207] overlayfs: failed to resolve './file1/file0': -2 [ 1081.275732][ T5301] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1081.603516][T12995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.603649][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.603907][T12995] bridge_slave_0: entered allmulticast mode [ 1081.607270][T12995] bridge_slave_0: entered promiscuous mode [ 1081.807797][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.808031][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.808220][T12995] bridge_slave_1: entered allmulticast mode [ 1081.810796][T12995] bridge_slave_1: entered promiscuous mode [ 1082.345240][ T3167] bridge_slave_1: left allmulticast mode [ 1082.345278][ T3167] bridge_slave_1: left promiscuous mode [ 1082.345546][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.516985][ T3167] bridge_slave_0: left allmulticast mode [ 1082.517023][ T3167] bridge_slave_0: left promiscuous mode [ 1082.517275][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.736736][ T3167] bridge_slave_1: left allmulticast mode [ 1082.736763][ T3167] bridge_slave_1: left promiscuous mode [ 1082.736924][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.922571][ T3167] bridge_slave_0: left allmulticast mode [ 1082.922613][ T3167] bridge_slave_0: left promiscuous mode [ 1082.922878][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.996559][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.114455][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.211105][ T3167] bond0 (unregistering): Released all slaves [ 1086.339334][T13251] overlayfs: failed to resolve './file1/file0': -2 [ 1086.645830][ T3167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.766538][ T3167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.848291][ T3167] bond0 (unregistering): Released all slaves [ 1087.057920][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.058050][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.058239][T13032] bridge_slave_0: entered allmulticast mode [ 1087.125254][T13032] bridge_slave_0: entered promiscuous mode [ 1087.236312][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.254740][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.254864][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.255047][T13032] bridge_slave_1: entered allmulticast mode [ 1087.351371][T13032] bridge_slave_1: entered promiscuous mode [ 1087.465163][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.235382][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.243409][T12995] team0: Port device team_slave_0 added [ 1088.311290][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.313112][T12995] team0: Port device team_slave_1 added [ 1090.145832][T13271] overlayfs: failed to resolve './file1/file0': -2 [ 1090.179498][T13273] FAULT_INJECTION: forcing a failure. [ 1090.179498][T13273] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.179539][T13273] CPU: 1 UID: 0 PID: 13273 Comm: syz.6.1720 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1090.179564][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1090.179579][T13273] Call Trace: [ 1090.179589][T13273] [ 1090.179598][T13273] dump_stack_lvl+0xe8/0x150 [ 1090.179646][T13273] should_fail_ex+0x447/0x5e0 [ 1090.179683][T13273] should_failslab+0xa8/0x100 [ 1090.179714][T13273] __kmalloc_noprof+0xf6/0x790 [ 1090.179738][T13273] ? fib6_info_alloc+0x30/0xf0 [ 1090.179772][T13273] ? fib6_info_alloc+0x30/0xf0 [ 1090.179813][T13273] fib6_info_alloc+0x30/0xf0 [ 1090.179848][T13273] ip6_route_info_create+0x149/0x890 [ 1090.179880][T13273] addrconf_f6i_alloc+0x38b/0x630 [ 1090.179908][T13273] ? addrconf_f6i_alloc+0xfd/0x630 [ 1090.179942][T13273] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 1090.179965][T13273] ? rwbase_write_lock+0x5b8/0x7f0 [ 1090.180019][T13273] ? __ipv6_dev_ac_inc+0x36/0xbf0 [ 1090.180051][T13273] __ipv6_dev_ac_inc+0x37b/0xbf0 [ 1090.180080][T13273] ? ipv6_chk_prefix+0x2b/0x510 [ 1090.180114][T13273] ipv6_sock_ac_join+0x665/0x820 [ 1090.180169][T13273] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 1090.180199][T13273] ? _copy_from_user+0x94/0xb0 [ 1090.180229][T13273] do_ipv6_setsockopt+0x1f56/0x2960 [ 1090.180262][T13273] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1090.180292][T13273] ? futex_wait+0x2a2/0x390 [ 1090.180328][T13273] ? __lock_acquire+0x747/0x2de0 [ 1090.180368][T13273] ? security_file_alloc+0x34/0x310 [ 1090.180408][T13273] ? do_futex+0x3e7/0x4e0 [ 1090.180439][T13273] ? __asan_memcpy+0x40/0x70 [ 1090.180465][T13273] ? lock_acquire+0x115/0x350 [ 1090.180509][T13273] ? __fget_files+0x2a/0x420 [ 1090.180545][T13273] ipv6_setsockopt+0x59/0x170 [ 1090.180570][T13273] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1090.180607][T13273] do_sock_setsockopt+0x17c/0x1b0 [ 1090.180636][T13273] __x64_sys_setsockopt+0x143/0x1b0 [ 1090.180667][T13273] do_syscall_64+0x16a/0x530 [ 1090.180695][T13273] ? trace_irq_disable+0x3b/0x140 [ 1090.180719][T13273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.180743][T13273] ? clear_bhb_loop+0x70/0xc0 [ 1090.180771][T13273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.180791][T13273] RIP: 0033:0x7ffa7e0e8f19 [ 1090.180813][T13273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.180832][T13273] RSP: 002b:00007ffa7c32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1090.180856][T13273] RAX: ffffffffffffffda RBX: 00007ffa7e365fa0 RCX: 00007ffa7e0e8f19 [ 1090.180872][T13273] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 1090.180886][T13273] RBP: 00007ffa7e177f6d R08: 0000000000000014 R09: 0000000000000000 [ 1090.180900][T13273] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1090.180925][T13273] R13: 00007ffa7e366038 R14: 00007ffa7e365fa0 R15: 00007fffdc596078 [ 1090.180966][T13273] [ 1090.303380][T13032] team0: Port device team_slave_0 added [ 1090.321730][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.321750][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.321778][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.361079][T13032] team0: Port device team_slave_1 added [ 1091.024558][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.024577][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.024605][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.471074][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.471093][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.471117][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.706563][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.706582][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.706610][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.741004][T13287] rxe_eth0 speed is unknown, defaulting to 1000 [ 1091.745214][ T5301] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1091.953376][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.988280][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.048465][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.117759][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.420465][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 1092.617440][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 1094.715347][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 1095.733063][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 1095.961603][T12995] hsr_slave_0: entered promiscuous mode [ 1095.977211][T12995] hsr_slave_1: entered promiscuous mode [ 1098.612728][T13032] hsr_slave_0: entered promiscuous mode [ 1098.633346][T13032] hsr_slave_1: entered promiscuous mode [ 1098.634350][T13032] debugfs: 'hsr0' already exists in 'hsr' [ 1098.634372][T13032] Cannot create hsr debugfs directory [ 1105.496513][ T5301] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1112.099604][T10874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.165303][T10874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.174637][T10874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.186966][T10874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.190259][T10874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.756206][T12824] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1112.918290][T12824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1112.919322][T12824] usb 1-1: not running at top speed; connect to a high speed hub [ 1112.919363][T12824] usb 1-1: New USB device found: idVendor=15ca, idProduct=0101, bcdDevice=0.40 [ 1112.922274][T12824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1112.926989][T12824] usb 1-1: string descriptor 0 read error: -22 [ 1112.927128][T12824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.955505][T13430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1112.990021][T12824] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1112.990149][T12824] usb 1-1: MIDIStreaming interface descriptor not found [ 1114.432526][ T5656] Bluetooth: hci0: command tx timeout [ 1114.985567][T12824] usb 1-1: USB disconnect, device number 49 [ 1116.275795][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.275868][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.505049][ T5656] Bluetooth: hci0: command tx timeout [ 1116.636783][T12865] bridge_slave_1: left allmulticast mode [ 1116.636822][T12865] bridge_slave_1: left promiscuous mode [ 1116.637097][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.788634][T12865] bridge_slave_0: left allmulticast mode [ 1116.788672][T12865] bridge_slave_0: left promiscuous mode [ 1116.788912][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.584833][ T5656] Bluetooth: hci0: command tx timeout [ 1120.664968][ T5656] Bluetooth: hci0: command tx timeout [ 1121.309201][T10874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1121.322479][T12824] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1121.360217][T10874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1121.361701][T10874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1121.362835][T10874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1121.365901][T10874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.491190][T12824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1121.497148][T12824] usb 5-1: not running at top speed; connect to a high speed hub [ 1121.497187][T12824] usb 5-1: New USB device found: idVendor=15ca, idProduct=0101, bcdDevice=0.40 [ 1121.502781][T12824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1121.539992][T12824] usb 5-1: string descriptor 0 read error: -22 [ 1121.540138][T12824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.633258][T13510] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1121.648210][T12824] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.648261][T12824] usb 5-1: MIDIStreaming interface descriptor not found [ 1121.906388][T12865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.005783][T12865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.087802][T12865] bond0 (unregistering): Released all slaves [ 1124.906135][ T5656] Bluetooth: hci1: command tx timeout [ 1124.925204][ T10] usb 5-1: USB disconnect, device number 61 [ 1126.256977][T13421] rxe_eth0 speed is unknown, defaulting to 1000 [ 1126.546627][T12865] hsr_slave_0: left promiscuous mode [ 1126.579689][T12865] hsr_slave_1: left promiscuous mode [ 1126.592708][T12865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.616735][T12865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.041726][ T5656] Bluetooth: hci1: command tx timeout [ 1130.104897][ T5656] Bluetooth: hci1: command tx timeout [ 1132.185640][ T5656] Bluetooth: hci1: command tx timeout [ 1133.652157][T12865] team0 (unregistering): Port device team_slave_1 removed [ 1133.715572][T12865] team0 (unregistering): Port device team_slave_0 removed [ 1134.238926][T13511] rxe_eth0 speed is unknown, defaulting to 1000 [ 1135.942618][T13653] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 1138.602254][T13668] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1138.602317][T13668] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1138.715820][T13653] bond4: (slave dummy0): Releasing active interface [ 1141.676717][T12865] bridge_slave_1: left allmulticast mode [ 1141.676759][T12865] bridge_slave_1: left promiscuous mode [ 1141.677030][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.839981][T12865] bridge_slave_0: left allmulticast mode [ 1141.840138][T12865] bridge_slave_0: left promiscuous mode [ 1141.840422][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.925052][T13698] kvm [13697]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x187) = 0x800 [ 1142.695087][T13714] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1142.695148][T13714] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1142.838364][T12865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.955784][T12865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.111324][T12865] bond0 (unregistering): Released all slaves [ 1145.047681][ T37] audit: type=1326 audit(1794294455.806:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.047747][ T37] audit: type=1326 audit(1794294455.806:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.065203][ T37] audit: type=1326 audit(1794294455.826:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.065264][ T37] audit: type=1326 audit(1794294455.826:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.065305][ T37] audit: type=1326 audit(1794294455.826:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.065344][ T37] audit: type=1326 audit(1794294455.826:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.065383][ T37] audit: type=1326 audit(1794294455.826:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.065422][ T37] audit: type=1326 audit(1794294455.826:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.080951][ T37] audit: type=1326 audit(1794294455.846:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.090458][ T37] audit: type=1326 audit(1794294455.856:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4618f19 code=0x7ffc0000 [ 1145.433140][T13746] FAULT_INJECTION: forcing a failure. [ 1145.433140][T13746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.433183][T13746] CPU: 1 UID: 0 PID: 13746 Comm: syz.6.1810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1145.433211][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1145.433225][T13746] Call Trace: [ 1145.433233][T13746] [ 1145.433244][T13746] dump_stack_lvl+0xe8/0x150 [ 1145.433290][T13746] should_fail_ex+0x447/0x5e0 [ 1145.433327][T13746] _copy_from_user+0x2d/0xb0 [ 1145.433361][T13746] __sys_bpf+0x2e7/0xe00 [ 1145.433399][T13746] ? __pfx___sys_bpf+0x10/0x10 [ 1145.433431][T13746] ? do_futex+0x3e7/0x4e0 [ 1145.433502][T13746] ? rcu_is_watching+0x16/0xb0 [ 1145.433537][T13746] __x64_sys_bpf+0xba/0xd0 [ 1145.433566][T13746] do_syscall_64+0x16a/0x530 [ 1145.433597][T13746] ? trace_irq_disable+0x3b/0x140 [ 1145.433620][T13746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.433643][T13746] ? clear_bhb_loop+0x70/0xc0 [ 1145.433672][T13746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.433693][T13746] RIP: 0033:0x7ffa7e0e8f19 [ 1145.433715][T13746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.433734][T13746] RSP: 002b:00007ffa7c32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1145.433759][T13746] RAX: ffffffffffffffda RBX: 00007ffa7e365fa0 RCX: 00007ffa7e0e8f19 [ 1145.433775][T13746] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1145.433789][T13746] RBP: 00007ffa7e177f6d R08: 0000000000000000 R09: 0000000000000000 [ 1145.433802][T13746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.433816][T13746] R13: 00007ffa7e366038 R14: 00007ffa7e365fa0 R15: 00007fffdc596078 [ 1145.433849][T13746] [ 1145.879446][T13750] team0: No ports can be present during mode change [ 1145.886319][T13421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.886489][T13421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.886754][T13421] bridge_slave_0: entered allmulticast mode [ 1145.969488][T13421] bridge_slave_0: entered promiscuous mode [ 1146.111444][T13421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.111578][T13421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.111770][T13421] bridge_slave_1: entered allmulticast mode [ 1146.147313][T13421] bridge_slave_1: entered promiscuous mode [ 1146.563725][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1818'. [ 1146.596578][T12865] hsr_slave_0: left promiscuous mode [ 1146.635727][T12865] hsr_slave_1: left promiscuous mode [ 1146.638043][T12865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.695727][T12865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.455560][T12865] team0 (unregistering): Port device team_slave_1 removed [ 1147.593937][T12865] team0 (unregistering): Port device team_slave_0 removed [ 1147.791235][T13780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1148.179444][T13421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.393210][T13421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.036566][T13421] team0: Port device team_slave_0 added [ 1149.103987][T13421] team0: Port device team_slave_1 added [ 1149.375743][T13421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.375761][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.375782][T13421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.586527][T13421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.586557][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.586585][T13421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.728662][T13829] FAULT_INJECTION: forcing a failure. [ 1149.728662][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.728698][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.0.1836 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1149.728724][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1149.728736][T13829] Call Trace: [ 1149.728744][T13829] [ 1149.728754][T13829] dump_stack_lvl+0xe8/0x150 [ 1149.728795][T13829] should_fail_ex+0x447/0x5e0 [ 1149.728832][T13829] should_failslab+0xa8/0x100 [ 1149.728860][T13829] ? mas_alloc_nodes+0x291/0x350 [ 1149.728890][T13829] kmem_cache_alloc_noprof+0x99/0x680 [ 1149.728913][T13829] ? mas_alloc_nodes+0x291/0x350 [ 1149.728949][T13829] mas_alloc_nodes+0x291/0x350 [ 1149.728982][T13829] mas_preallocate+0x42d/0x840 [ 1149.729020][T13829] ? __pfx_mas_preallocate+0x10/0x10 [ 1149.729070][T13829] ? __mas_set_range+0x11a/0x3a0 [ 1149.729103][T13829] __split_vma+0x403/0x860 [ 1149.729137][T13829] ? __pfx___split_vma+0x10/0x10 [ 1149.729172][T13829] ? mas_find+0x6d9/0xcb0 [ 1149.729203][T13829] vms_gather_munmap_vmas+0x4e3/0x1370 [ 1149.729246][T13829] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1149.729274][T13829] ? reacquire_held_locks+0x117/0x1a0 [ 1149.729298][T13829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1149.729338][T13829] do_vmi_align_munmap+0x2c7/0x4d0 [ 1149.729385][T13829] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1149.729444][T13829] ? mas_walk+0x381/0x490 [ 1149.729474][T13829] ? mas_find+0x645/0xcb0 [ 1149.729507][T13829] do_vmi_munmap+0x252/0x2d0 [ 1149.729541][T13829] move_vma+0x158f/0x1ce0 [ 1149.729590][T13829] ? __pfx_move_vma+0x10/0x10 [ 1149.729622][T13829] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 1149.729648][T13829] ? mtree_load+0x12a/0x780 [ 1149.729682][T13829] ? mtree_load+0x12a/0x780 [ 1149.729714][T13829] ? __futex_wait+0x3c9/0x480 [ 1149.729749][T13829] ? cap_mmap_addr+0xaa/0xf0 [ 1149.729781][T13829] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1149.729804][T13829] ? security_mmap_addr+0x71/0x240 [ 1149.729846][T13829] mremap_to+0x851/0x950 [ 1149.729872][T13829] ? may_expand_vm+0x24d/0x390 [ 1149.729897][T13829] ? check_prep_vma+0xa4c/0xcc0 [ 1149.729923][T13829] ? __pfx_mremap_to+0x10/0x10 [ 1149.729959][T13829] ? __pfx_check_prep_vma+0x10/0x10 [ 1149.729998][T13829] __se_sys_mremap+0xeb1/0x1260 [ 1149.730062][T13829] ? do_futex+0x3e7/0x4e0 [ 1149.730102][T13829] ? __pfx___se_sys_mremap+0x10/0x10 [ 1149.730134][T13829] ? __se_sys_futex+0x3a8/0x450 [ 1149.730183][T13829] ? __x64_sys_mremap+0x20/0xc0 [ 1149.730213][T13829] do_syscall_64+0x16a/0x530 [ 1149.730240][T13829] ? trace_irq_disable+0x3b/0x140 [ 1149.730264][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.730286][T13829] ? clear_bhb_loop+0x70/0xc0 [ 1149.730313][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.730334][T13829] RIP: 0033:0x7f23b4618f19 [ 1149.730354][T13829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.730373][T13829] RSP: 002b:00007f23b285e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1149.730396][T13829] RAX: ffffffffffffffda RBX: 00007f23b4895fa0 RCX: 00007f23b4618f19 [ 1149.730412][T13829] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 0000200000097000 [ 1149.730426][T13829] RBP: 00007f23b46a7f6d R08: 0000200000bff000 R09: 0000000000000000 [ 1149.730442][T13829] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1149.730455][T13829] R13: 00007f23b4896038 R14: 00007f23b4895fa0 R15: 00007ffe7e31ebe8 [ 1149.730490][T13829] [ 1149.836432][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.843198][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.844453][T13511] bridge_slave_0: entered allmulticast mode [ 1149.849095][T13511] bridge_slave_0: entered promiscuous mode [ 1149.913034][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.913212][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.913353][T13511] bridge_slave_1: entered allmulticast mode [ 1149.937579][T13511] bridge_slave_1: entered promiscuous mode [ 1150.069229][T13421] hsr_slave_0: entered promiscuous mode [ 1150.070482][T13421] hsr_slave_1: entered promiscuous mode [ 1150.219501][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.258985][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.558395][T13834] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 1150.558502][T13834] device-mapper: table: 248:0: multipath: invalid initial priority group (-EINVAL) [ 1150.558515][T13834] device-mapper: ioctl: error adding target to table [ 1150.678957][T13511] team0: Port device team_slave_0 added [ 1150.706446][T13511] team0: Port device team_slave_1 added [ 1150.762513][T13841] FAULT_INJECTION: forcing a failure. [ 1150.762513][T13841] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.762550][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.6.1843 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1150.762576][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1150.762596][T13841] Call Trace: [ 1150.762605][T13841] [ 1150.762614][T13841] dump_stack_lvl+0xe8/0x150 [ 1150.762656][T13841] should_fail_ex+0x447/0x5e0 [ 1150.762691][T13841] should_failslab+0xa8/0x100 [ 1150.762720][T13841] kmem_cache_alloc_node_noprof+0xa7/0x660 [ 1150.762743][T13841] ? zswap_store+0xb4b/0x2200 [ 1150.762772][T13841] ? zswap_store+0xb4b/0x2200 [ 1150.762808][T13841] zswap_store+0xb4b/0x2200 [ 1150.762838][T13841] ? zswap_store+0x53d/0x2200 [ 1150.762884][T13841] ? __pfx_zswap_store+0x10/0x10 [ 1150.762919][T13841] ? rt_spin_unlock+0x159/0x200 [ 1150.762947][T13841] ? rt_spin_unlock+0x165/0x200 [ 1150.762971][T13841] swap_writeout+0x9a3/0x1550 [ 1150.763010][T13841] ? try_to_unmap_flush_dirty+0x74/0x100 [ 1150.763034][T13841] shrink_folio_list+0x3080/0x4bd0 [ 1150.763101][T13841] ? __pfx_shrink_folio_list+0x10/0x10 [ 1150.763174][T13841] ? __lock_acquire+0x747/0x2de0 [ 1150.763234][T13841] reclaim_folio_list+0x100/0x430 [ 1150.763265][T13841] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1150.763300][T13841] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1150.763330][T13841] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1150.763359][T13841] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1150.763385][T13841] reclaim_pages+0x452/0x530 [ 1150.763414][T13841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1150.763445][T13841] ? __pfx_reclaim_pages+0x10/0x10 [ 1150.763477][T13841] ? madvise_cold_or_pageout_pte_range+0x1712/0x1980 [ 1150.763510][T13841] madvise_cold_or_pageout_pte_range+0x1737/0x1980 [ 1150.763560][T13841] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1150.763598][T13841] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1150.763638][T13841] walk_pgd_range+0xf90/0x1c30 [ 1150.763705][T13841] ? __pfx_walk_pgd_range+0x10/0x10 [ 1150.763736][T13841] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1150.763764][T13841] __walk_page_range+0x16d/0x730 [ 1150.763797][T13841] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1150.763827][T13841] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1150.763864][T13841] walk_page_range_vma_unsafe+0x309/0x410 [ 1150.763902][T13841] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1150.763930][T13841] ? rt_spin_unlock+0x159/0x200 [ 1150.763958][T13841] ? rt_spin_unlock+0x165/0x200 [ 1150.763984][T13841] ? walk_page_range_vma+0x6b/0x90 [ 1150.764015][T13841] madvise_vma_behavior+0x2af1/0x4a00 [ 1150.764054][T13841] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1150.764085][T13841] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1150.764117][T13841] ? rcu_is_watching+0x16/0xb0 [ 1150.764142][T13841] ? trace_hrtimer_start+0x82/0x200 [ 1150.764178][T13841] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1150.764205][T13841] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1150.764239][T13841] ? finish_task_switch+0x40e/0xc60 [ 1150.764269][T13841] ? lockdep_hardirqs_on+0x7b/0x110 [ 1150.764300][T13841] ? rcu_is_watching+0x16/0xb0 [ 1150.764325][T13841] ? trace_sched_exit_tp+0x3a/0x130 [ 1150.764359][T13841] ? __lock_acquire+0x747/0x2de0 [ 1150.764416][T13841] ? mas_prev_slot+0xb79/0xc00 [ 1150.764464][T13841] ? find_vma_prev+0x123/0x1b0 [ 1150.764499][T13841] ? __pfx_find_vma_prev+0x10/0x10 [ 1150.764541][T13841] ? __lock_acquire+0x747/0x2de0 [ 1150.764581][T13841] madvise_walk_vmas+0x57d/0xb70 [ 1150.764631][T13841] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1150.764661][T13841] ? blk_start_plug+0x6e/0x1b0 [ 1150.764690][T13841] madvise_do_behavior+0x385/0x540 [ 1150.764719][T13841] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1150.764741][T13841] ? down_read+0x151/0x200 [ 1150.764789][T13841] do_madvise+0x26f/0x330 [ 1150.764822][T13841] ? __pfx_do_madvise+0x10/0x10 [ 1150.764856][T13841] ? rcu_is_watching+0x16/0xb0 [ 1150.764888][T13841] __x64_sys_madvise+0xa6/0xc0 [ 1150.764914][T13841] do_syscall_64+0x16a/0x530 [ 1150.764939][T13841] ? trace_irq_disable+0x3b/0x140 [ 1150.764962][T13841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.764983][T13841] ? clear_bhb_loop+0x70/0xc0 [ 1150.765008][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.765028][T13841] RIP: 0033:0x7ffa7e0e8f19 [ 1150.765047][T13841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.765066][T13841] RSP: 002b:00007ffa7c32e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1150.765087][T13841] RAX: ffffffffffffffda RBX: 00007ffa7e365fa0 RCX: 00007ffa7e0e8f19 [ 1150.765104][T13841] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 1150.765118][T13841] RBP: 00007ffa7e177f6d R08: 0000000000000000 R09: 0000000000000000 [ 1150.765131][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.765144][T13841] R13: 00007ffa7e366038 R14: 00007ffa7e365fa0 R15: 00007fffdc596078 [ 1150.765178][T13841] [ 1151.182686][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.182704][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.182729][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.245339][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.245358][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.245386][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.578488][T13511] hsr_slave_0: entered promiscuous mode [ 1151.581441][T13511] hsr_slave_1: entered promiscuous mode [ 1151.583780][T13511] debugfs: 'hsr0' already exists in 'hsr' [ 1151.583803][T13511] Cannot create hsr debugfs directory [ 1152.130199][T13863] FAULT_INJECTION: forcing a failure. [ 1152.130199][T13863] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.130236][T13863] CPU: 1 UID: 0 PID: 13863 Comm: syz.0.1850 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1152.130262][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1152.130276][T13863] Call Trace: [ 1152.130284][T13863] [ 1152.130293][T13863] dump_stack_lvl+0xe8/0x150 [ 1152.130420][T13863] should_fail_ex+0x447/0x5e0 [ 1152.130455][T13863] should_failslab+0xa8/0x100 [ 1152.130485][T13863] __kvmalloc_node_noprof+0x171/0x880 [ 1152.130510][T13863] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1152.130532][T13863] ? dm_table_create+0x130/0x340 [ 1152.130558][T13863] ? dm_table_create+0x130/0x340 [ 1152.130590][T13863] dm_table_create+0x130/0x340 [ 1152.130620][T13863] table_load+0x18e/0x8a0 [ 1152.130646][T13863] ? lock_acquire+0x115/0x350 [ 1152.130687][T13863] ? __pfx_table_load+0x10/0x10 [ 1152.130728][T13863] dm_ctl_ioctl+0x9ec/0xe10 [ 1152.130762][T13863] ? __pfx_table_load+0x10/0x10 [ 1152.130785][T13863] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1152.130858][T13863] ? __fget_files+0x2a/0x420 [ 1152.130895][T13863] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1152.130923][T13863] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1152.130946][T13863] __se_sys_ioctl+0xff/0x170 [ 1152.130973][T13863] do_syscall_64+0x16a/0x530 [ 1152.131001][T13863] ? trace_irq_disable+0x3b/0x140 [ 1152.131024][T13863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.131044][T13863] ? clear_bhb_loop+0x70/0xc0 [ 1152.131067][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.131087][T13863] RIP: 0033:0x7f23b4618f19 [ 1152.131106][T13863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.131134][T13863] RSP: 002b:00007f23b285e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.131156][T13863] RAX: ffffffffffffffda RBX: 00007f23b4895fa0 RCX: 00007f23b4618f19 [ 1152.131170][T13863] RDX: 0000200000000480 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1152.131181][T13863] RBP: 00007f23b46a7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1152.131193][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.131204][T13863] R13: 00007f23b4896038 R14: 00007f23b4895fa0 R15: 00007ffe7e31ebe8 [ 1152.131233][T13863] [ 1152.412590][T13863] program syz.0.1850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.635620][T13875] FAULT_INJECTION: forcing a failure. [ 1152.635620][T13875] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.635654][T13875] CPU: 1 UID: 0 PID: 13875 Comm: syz.0.1854 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1152.635676][T13875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1152.635687][T13875] Call Trace: [ 1152.635694][T13875] [ 1152.635712][T13875] dump_stack_lvl+0xe8/0x150 [ 1152.635758][T13875] should_fail_ex+0x447/0x5e0 [ 1152.635792][T13875] should_failslab+0xa8/0x100 [ 1152.635818][T13875] __kmalloc_cache_noprof+0x9c/0x670 [ 1152.635838][T13875] ? alloc_fs_context+0x9b2/0xd00 [ 1152.635858][T13875] ? __se_sys_fsopen+0x19f/0x370 [ 1152.635880][T13875] ? __se_sys_fsopen+0x19f/0x370 [ 1152.635909][T13875] __se_sys_fsopen+0x19f/0x370 [ 1152.635937][T13875] do_syscall_64+0x16a/0x530 [ 1152.635967][T13875] ? trace_irq_disable+0x3b/0x140 [ 1152.635989][T13875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.636011][T13875] ? clear_bhb_loop+0x70/0xc0 [ 1152.636035][T13875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.636056][T13875] RIP: 0033:0x7f23b4618f19 [ 1152.636076][T13875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.636095][T13875] RSP: 002b:00007f23b285e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1152.636117][T13875] RAX: ffffffffffffffda RBX: 00007f23b4895fa0 RCX: 00007f23b4618f19 [ 1152.636132][T13875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 1152.636147][T13875] RBP: 00007f23b46a7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1152.636161][T13875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.636173][T13875] R13: 00007f23b4896038 R14: 00007f23b4895fa0 R15: 00007ffe7e31ebe8 [ 1152.636204][T13875] [ 1153.250046][T13870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.250679][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.686942][T13870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.737259][T13870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.819429][ T37] kauditd_printk_skb: 63 callbacks suppressed [ 1153.819452][ T37] audit: type=1326 audit(1794294464.576:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.820603][ T37] audit: type=1326 audit(1794294464.596:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.821771][ T37] audit: type=1326 audit(1794294464.596:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.821943][ T37] audit: type=1326 audit(1794294464.596:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.822141][ T37] audit: type=1326 audit(1794294464.596:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.822302][ T37] audit: type=1326 audit(1794294464.596:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.822460][ T37] audit: type=1326 audit(1794294464.596:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.822884][ T37] audit: type=1326 audit(1794294464.596:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.823017][ T37] audit: type=1326 audit(1794294464.596:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1153.825388][ T37] audit: type=1326 audit(1794294464.596:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.6.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e0e8f19 code=0x7ffc0000 [ 1154.453734][T13906] FAULT_INJECTION: forcing a failure. [ 1154.453734][T13906] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.453761][T13906] CPU: 1 UID: 0 PID: 13906 Comm: syz.0.1866 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1154.453776][T13906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1154.453784][T13906] Call Trace: [ 1154.453789][T13906] [ 1154.453797][T13906] dump_stack_lvl+0xe8/0x150 [ 1154.453828][T13906] should_fail_ex+0x447/0x5e0 [ 1154.453849][T13906] should_failslab+0xa8/0x100 [ 1154.453869][T13906] __kmalloc_noprof+0xf6/0x790 [ 1154.453882][T13906] ? tomoyo_encode+0x2ad/0x570 [ 1154.453895][T13906] ? tomoyo_encode+0x2ad/0x570 [ 1154.453911][T13906] tomoyo_encode+0x2ad/0x570 [ 1154.453928][T13906] tomoyo_realpath_from_path+0x5fd/0x640 [ 1154.453948][T13906] tomoyo_check_open_permission+0x229/0x470 [ 1154.453968][T13906] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1154.453986][T13906] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1154.454005][T13906] ? __asan_memset+0x22/0x50 [ 1154.454034][T13906] ? __pfx_smack_inode_permission+0x10/0x10 [ 1154.454056][T13906] security_file_open+0xa9/0x240 [ 1154.454075][T13906] do_dentry_open+0x4b3/0x1410 [ 1154.454098][T13906] vfs_open_consume+0x4a/0x360 [ 1154.454112][T13906] ? path_openat+0x16e6/0x2100 [ 1154.454128][T13906] path_openat+0x1701/0x2100 [ 1154.454151][T13906] do_file_open+0x23e/0x4a0 [ 1154.454181][T13906] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1154.454201][T13906] ? __pfx_do_file_open+0x10/0x10 [ 1154.454235][T13906] ? alloc_fd+0x6b2/0x760 [ 1154.454261][T13906] do_sys_openat2+0x115/0x200 [ 1154.454278][T13906] ? __se_sys_futex+0x3a8/0x450 [ 1154.454302][T13906] ? __pfx_do_sys_openat2+0x10/0x10 [ 1154.454321][T13906] ? __pfx___se_sys_futex+0x10/0x10 [ 1154.454337][T13906] ? __se_sys_mknodat+0xcf/0x150 [ 1154.454349][T13906] ? kmem_cache_free+0x187/0x6d0 [ 1154.454366][T13906] __x64_sys_openat+0x138/0x170 [ 1154.454387][T13906] do_syscall_64+0x16a/0x530 [ 1154.454404][T13906] ? trace_irq_disable+0x3b/0x140 [ 1154.454417][T13906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.454429][T13906] ? clear_bhb_loop+0x70/0xc0 [ 1154.454444][T13906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.454456][T13906] RIP: 0033:0x7f23b4618f19 [ 1154.454469][T13906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.454479][T13906] RSP: 002b:00007f23b285e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1154.454494][T13906] RAX: ffffffffffffffda RBX: 00007f23b4895fa0 RCX: 00007f23b4618f19 [ 1154.454502][T13906] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1154.454510][T13906] RBP: 00007f23b46a7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1154.454518][T13906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.454525][T13906] R13: 00007f23b4896038 R14: 00007f23b4895fa0 R15: 00007ffe7e31ebe8 [ 1154.454544][T13906] [ 1154.574846][T13906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1154.734487][T13906] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1154.738901][T13906] block device autoloading is deprecated and will be removed. [ 1157.342927][T13932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1157.342955][T13932] block device autoloading is deprecated and will be removed. [ 1157.475519][T13932] md: md6 stopped. [ 1157.984360][T13421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1158.059188][T13421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.060399][T13421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1158.209171][T13421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.210659][T13421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1158.293722][T13421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.313293][T13421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1158.489957][T13421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.615569][ T8345] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.996959][T12865] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.997141][T12865] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.036734][T13511] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1159.080773][T13511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1159.088987][T13511] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1159.173570][T13511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1159.238703][T13511] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1159.305702][T13511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1159.487806][T13975] team0 (unregistering): Port device team_slave_0 removed [ 1159.528592][T13975] team0 (unregistering): Port device team_slave_1 removed [ 1159.576103][T13511] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1159.667701][T13511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1159.890744][T13421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.935633][T12865] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.993741][T13421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.046970][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.047126][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.092250][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.092357][ T3167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.311366][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.409199][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.452263][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.454116][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.479830][ T2072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.480171][ T2072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.098054][ T37] kauditd_printk_skb: 332 callbacks suppressed [ 1161.098077][ T37] audit: type=1800 audit(1794294471.856:417): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1900" name=08 dev="sda1" ino=2064 res=0 errno=-22 [ 1161.955009][T13421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.540724][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.029037][T13421] veth0_vlan: entered promiscuous mode [ 1163.123654][T13421] veth1_vlan: entered promiscuous mode [ 1163.316777][T13421] veth0_macvtap: entered promiscuous mode [ 1163.351547][T13421] veth1_macvtap: entered promiscuous mode [ 1163.514227][T13421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.660790][T14072] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1163.871069][T13421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.922773][T13511] veth0_vlan: entered promiscuous mode [ 1163.991420][T13511] veth1_vlan: entered promiscuous mode [ 1164.560705][ T3167] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.770085][T13511] veth0_macvtap: entered promiscuous mode [ 1164.954347][T13511] veth1_macvtap: entered promiscuous mode [ 1164.974320][T12840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.974344][T12840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.071633][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.189256][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.511705][T13152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.511729][T13152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.395455][ T3167] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.411864][ T3167] bond6: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1166.412851][ T3167] bond6: (slave veth9): making interface the new active one [ 1166.974107][ T3167] bond6: active interface up! [ 1167.136503][ T2069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.176074][ T2069] bond9: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1167.180209][ T2069] bond9: (slave veth15): making interface the new active one [ 1167.233492][ T2069] bond9: active interface up! [ 1167.345346][T12865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.505244][ T8345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.505268][ T8345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.861446][ T8345] bond8: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 1167.862144][ T8345] bond8: (slave veth13): making interface the new active one [ 1168.029871][ T8345] bond8: active interface up! [ 1168.069214][ T2072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.069237][ T2072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.099304][T14140] FAULT_INJECTION: forcing a failure. [ 1168.099304][T14140] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.099340][T14140] CPU: 0 UID: 0 PID: 14140 Comm: syz.4.1931 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1168.099365][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1168.099378][T14140] Call Trace: [ 1168.099386][T14140] [ 1168.099396][T14140] dump_stack_lvl+0xe8/0x150 [ 1168.099440][T14140] should_fail_ex+0x447/0x5e0 [ 1168.099473][T14140] should_failslab+0xa8/0x100 [ 1168.099500][T14140] ? ptlock_alloc+0x20/0x70 [ 1168.099522][T14140] kmem_cache_alloc_noprof+0x99/0x680 [ 1168.099545][T14140] ? ptlock_alloc+0x20/0x70 [ 1168.099573][T14140] ptlock_alloc+0x20/0x70 [ 1168.099593][T14140] pte_alloc_one+0x7e/0x380 [ 1168.099629][T14140] __pte_alloc+0x25/0x1a0 [ 1168.099658][T14140] do_pte_missing+0x1ba0/0x2970 [ 1168.099691][T14140] ? __pmd_alloc+0x41b/0x5e0 [ 1168.099729][T14140] handle_mm_fault+0xd42/0x2130 [ 1168.099765][T14140] ? mt_find+0x186/0x630 [ 1168.099799][T14140] ? handle_mm_fault+0xe8/0x2130 [ 1168.099846][T14140] ? __pfx_handle_mm_fault+0x10/0x10 [ 1168.099894][T14140] ? __lock_acquire+0x747/0x2de0 [ 1168.099928][T14140] ? lock_mm_and_find_vma+0xa7/0x340 [ 1168.099966][T14140] do_user_addr_fault+0x7f6/0x1480 [ 1168.100010][T14140] exc_page_fault+0x6a/0xc0 [ 1168.100038][T14140] asm_exc_page_fault+0x26/0x30 [ 1168.100060][T14140] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 1168.100084][T14140] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 4e 05 00 66 2e [ 1168.100108][T14140] RSP: 0018:ffffc900049f7cb8 EFLAGS: 00050202 [ 1168.100130][T14140] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1168.100145][T14140] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900049f7d60 [ 1168.100159][T14140] RBP: ffffc900049f7e68 R08: 0000000000000003 R09: 0000000000000004 [ 1168.100174][T14140] R10: dffffc0000000000 R11: fffff5200093efac R12: dffffc0000000000 [ 1168.100191][T14140] R13: 0000000000000000 R14: ffffc900049f7d60 R15: 0000000000000000 [ 1168.100236][T14140] _copy_from_user+0x7a/0xb0 [ 1168.100269][T14140] do_sock_getsockopt+0x1fa/0x640 [ 1168.100310][T14140] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1168.100353][T14140] ? __fget_files+0x3a8/0x420 [ 1168.100386][T14140] ? __fget_files+0x2a/0x420 [ 1168.100436][T14140] __x64_sys_getsockopt+0x1aa/0x250 [ 1168.100477][T14140] do_syscall_64+0x16a/0x530 [ 1168.100505][T14140] ? trace_irq_disable+0x3b/0x140 [ 1168.100528][T14140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.100550][T14140] ? clear_bhb_loop+0x70/0xc0 [ 1168.100578][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.100599][T14140] RIP: 0033:0x7febb0668f19 [ 1168.100619][T14140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.100640][T14140] RSP: 002b:00007febae8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1168.100663][T14140] RAX: ffffffffffffffda RBX: 00007febb08e5fa0 RCX: 00007febb0668f19 [ 1168.100679][T14140] RDX: 000000001600bd7e RSI: 0000000000000029 RDI: 0000000000000003 [ 1168.100692][T14140] RBP: 00007febb06f7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1168.100706][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.100720][T14140] R13: 00007febb08e6038 R14: 00007febb08e5fa0 R15: 00007ffe42fce748 [ 1168.100757][T14140] [ 1168.138829][ T2970] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1168.225064][ T2970] bond5: (slave veth7): making interface the new active one [ 1168.541600][ T2970] bond5: active interface up! [ 1168.668688][ T2072] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.778438][ T2970] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.986544][ T2078] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.232504][T12865] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1169.232693][T12865] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1169.302188][T12865] bond2: active interface up! [ 1169.340829][ T8345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.572073][ T2078] bond7: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 1169.580312][ T2078] bond7: (slave veth11): making interface the new active one [ 1169.589660][ T2078] bond7: active interface up! [ 1170.090932][ T8345] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1170.091122][ T8345] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1170.243405][ T8345] bond1: active interface up! [ 1170.628434][T14197] team0 (unregistering): Port device team_slave_0 removed [ 1170.723715][T14197] team0 (unregistering): Port device team_slave_1 removed [ 1170.995484][T14219] veth0: entered promiscuous mode [ 1170.997806][T14218] veth0: left promiscuous mode [ 1172.048155][T14250] team0 (unregistering): Port device team_slave_0 removed [ 1172.146086][T14250] team0 (unregistering): Port device team_slave_1 removed [ 1172.343405][T14248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1172.752432][ T37] audit: type=1326 audit(1794294483.526:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.752482][ T37] audit: type=1326 audit(1794294483.526:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.814616][ T37] audit: type=1326 audit(1794294483.576:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.814770][ T37] audit: type=1326 audit(1794294483.576:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.822625][ T37] audit: type=1326 audit(1794294483.586:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.822676][ T37] audit: type=1326 audit(1794294483.586:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.839938][ T37] audit: type=1326 audit(1794294483.606:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.841918][ T37] audit: type=1326 audit(1794294483.606:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.842659][ T37] audit: type=1326 audit(1794294483.586:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1172.842704][ T37] audit: type=1326 audit(1794294483.606:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14276 comm="syz.8.1985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1173.623227][T14297] Process accounting resumed [ 1174.135099][T14318] syz.0.2002 (14318) used greatest stack depth: 19008 bytes left [ 1174.761252][T14345] FAULT_INJECTION: forcing a failure. [ 1174.761252][T14345] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.761291][T14345] CPU: 1 UID: 0 PID: 14345 Comm: syz.0.2014 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1174.761317][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1174.761336][T14345] Call Trace: [ 1174.761344][T14345] [ 1174.761354][T14345] dump_stack_lvl+0xe8/0x150 [ 1174.761398][T14345] should_fail_ex+0x447/0x5e0 [ 1174.761434][T14345] should_failslab+0xa8/0x100 [ 1174.761462][T14345] ? prepare_creds+0x30/0x820 [ 1174.761491][T14345] kmem_cache_alloc_noprof+0x99/0x680 [ 1174.761515][T14345] ? prepare_creds+0x30/0x820 [ 1174.761550][T14345] prepare_creds+0x30/0x820 [ 1174.761583][T14345] cap_task_prctl+0x379/0xa40 [ 1174.761621][T14345] security_task_prctl+0xf6/0x190 [ 1174.761653][T14345] __se_sys_prctl+0xbf/0x1900 [ 1174.761685][T14345] ? __pfx___se_sys_prctl+0x10/0x10 [ 1174.761717][T14345] ? __x64_sys_prctl+0x20/0xc0 [ 1174.761744][T14345] do_syscall_64+0x16a/0x530 [ 1174.761770][T14345] ? trace_irq_disable+0x3b/0x140 [ 1174.761798][T14345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.761819][T14345] ? clear_bhb_loop+0x70/0xc0 [ 1174.761843][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.761863][T14345] RIP: 0033:0x7f23b4618f19 [ 1174.761884][T14345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.761905][T14345] RSP: 002b:00007f23b285e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1174.761926][T14345] RAX: ffffffffffffffda RBX: 00007f23b4895fa0 RCX: 00007f23b4618f19 [ 1174.761941][T14345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1174.761952][T14345] RBP: 00007f23b46a7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1174.761965][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.761975][T14345] R13: 00007f23b4896038 R14: 00007f23b4895fa0 R15: 00007ffe7e31ebe8 [ 1174.762006][T14345] [ 1175.089988][ T9014] Process accounting resumed [ 1175.793025][T14378] loop3: detected capacity change from 0 to 7 [ 1175.819003][T14376] team0 (unregistering): Port device team_slave_0 removed [ 1175.989490][T14376] team0 (unregistering): Port device team_slave_1 removed [ 1176.160760][ T5772] Process accounting resumed [ 1176.313092][T14378] Dev loop3: unable to read RDB block 7 [ 1176.313171][T14378] loop3: unable to read partition table [ 1176.313389][T14378] loop3: partition table beyond EOD, truncated [ 1176.313465][T14378] loop_reread_partitions: partition scan of loop3 (Cj̖B=ý?) failed (rc=-5) [ 1176.638753][T14382] Invalid logical block size (768) [ 1177.070316][T14393] block device autoloading is deprecated and will be removed. [ 1177.081041][T14393] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead [ 1177.082313][T14393] device-mapper: table: 248:2: multipath: not enough path parameters (-EINVAL) [ 1177.082341][T14393] device-mapper: ioctl: error adding target to table [ 1177.563442][T14423] netlink: 'syz.4.2044': attribute type 4 has an invalid length. [ 1177.707857][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.707929][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.292689][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1178.292710][ T37] audit: type=1326 audit(1794294745.060:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.293379][ T37] audit: type=1326 audit(1794294745.060:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.293416][ T37] audit: type=1326 audit(1794294745.060:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.294256][ T37] audit: type=1326 audit(1794294745.060:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.294294][ T37] audit: type=1326 audit(1794294745.060:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.367777][ T37] audit: type=1326 audit(1794294745.060:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.458791][ T37] audit: type=1326 audit(1794294745.230:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.458825][ T37] audit: type=1326 audit(1794294745.230:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.458849][ T37] audit: type=1326 audit(1794294745.230:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1178.458872][ T37] audit: type=1326 audit(1794294745.230:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14450 comm="syz.8.2059" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a8e8f19 code=0x7ffc0000 [ 1179.308511][T14486] sctp: [Deprecated]: syz.8.2071 (pid 14486) Use of int in max_burst socket option. [ 1179.308511][T14486] Use struct sctp_assoc_value instead [ 1179.674557][T14497] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead [ 1179.691598][T14497] device-mapper: table: 248:3: multipath: not enough path parameters (-EINVAL) [ 1179.691619][T14497] device-mapper: ioctl: error adding target to table [ 1179.898292][ T9293] Process accounting resumed [ 1180.523200][T14532] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead [ 1180.523464][T14532] device-mapper: table: 248:4: multipath: not enough path parameters (-EINVAL) [ 1180.523484][T14532] device-mapper: ioctl: error adding target to table [ 1181.960590][T14586] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 1183.249080][T14614] overlayfs: statfs failed on './file0' [ 1183.524344][ T37] kauditd_printk_skb: 117 callbacks suppressed [ 1183.524362][ T37] audit: type=1326 audit(1794294750.290:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14633 comm="syz.4.2127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febb0668f19 code=0x0 [ 1184.137270][ T37] audit: type=1326 audit(1794294750.910:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.137323][ T37] audit: type=1326 audit(1794294750.910:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.142529][ T37] audit: type=1326 audit(1794294750.910:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.143081][ T37] audit: type=1326 audit(1794294750.910:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.143129][ T37] audit: type=1326 audit(1794294750.910:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.143824][ T37] audit: type=1326 audit(1794294750.910:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.144188][ T37] audit: type=1326 audit(1794294750.910:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.167169][ T37] audit: type=1326 audit(1794294750.910:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.167221][ T37] audit: type=1326 audit(1794294750.910:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14665 comm="syz.4.2138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febb0668f19 code=0x7ffc0000 [ 1184.674122][T14682] syzkaller1: entered promiscuous mode [ 1184.674151][T14682] syzkaller1: entered allmulticast mode [ 1185.770645][T14731] program syz.0.2167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1185.996748][T14740] FAULT_INJECTION: forcing a failure. [ 1185.996748][T14740] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1185.996790][T14740] CPU: 1 UID: 0 PID: 14740 Comm: syz.0.2172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1185.996849][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1185.996880][T14740] Call Trace: [ 1185.996898][T14740] [ 1185.996914][T14740] dump_stack_lvl+0xe8/0x150 [ 1185.996957][T14740] should_fail_ex+0x447/0x5e0 [ 1185.996993][T14740] get_futex_key+0x1ab/0x1410 [ 1185.997019][T14740] ? __pfx_futex_wake_mark+0x10/0x10 [ 1185.997059][T14740] ? __pfx_get_futex_key+0x10/0x10 [ 1185.997096][T14740] futex_wake+0x119/0x600 [ 1185.997130][T14740] ? __pfx_futex_wait+0x10/0x10 [ 1185.997162][T14740] ? __pfx_futex_wake+0x10/0x10 [ 1185.997213][T14740] do_futex+0x458/0x4e0 [ 1185.997247][T14740] ? __pfx_do_futex+0x10/0x10 [ 1185.997284][T14740] __se_sys_futex+0x3a8/0x450 [ 1185.997320][T14740] ? __pfx___se_sys_futex+0x10/0x10 [ 1185.997347][T14740] ? rcu_is_watching+0x16/0xb0 [ 1185.997379][T14740] ? __x64_sys_futex+0x21/0xf0 [ 1185.997422][T14740] do_syscall_64+0x16a/0x530 [ 1185.997451][T14740] ? trace_irq_disable+0x3b/0x140 [ 1185.997473][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.997496][T14740] ? clear_bhb_loop+0x70/0xc0 [ 1185.997522][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.997543][T14740] RIP: 0033:0x7f23b4618f19 [ 1185.997563][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.997582][T14740] RSP: 002b:00007f23b285e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1185.997606][T14740] RAX: ffffffffffffffda RBX: 00007f23b4895fa8 RCX: 00007f23b4618f19 [ 1185.997622][T14740] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23b4895fac [ 1185.997636][T14740] RBP: 00007f23b4895fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1185.997651][T14740] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1185.997666][T14740] R13: 00007f23b4896038 R14: 00007ffe7e31eb00 R15: 00007ffe7e31ebe8 [ 1185.997701][T14740] [ 1186.677060][T14770] 9p: Bad value for 'wfdno' [ 1187.182422][T14768] overlayfs: statfs failed on './file0' [ 1187.829608][T14797] 9p: Bad value for 'wfdno' [ 1189.774388][T14869] 9p: Bad value for 'wfdno' [ 1191.225622][ T37] kauditd_printk_skb: 133 callbacks suppressed [ 1191.225641][ T37] audit: type=1326 audit(1794294758.000:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14927 comm="syz.0.2252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b4618f19 code=0x0 [ 1191.846719][ T37] audit: type=1326 audit(1794294758.610:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.846775][ T37] audit: type=1326 audit(1794294758.610:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.860141][ T37] audit: type=1326 audit(1794294758.630:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.863246][ T37] audit: type=1326 audit(1794294758.630:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.863932][ T37] audit: type=1326 audit(1794294758.630:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.863981][ T37] audit: type=1326 audit(1794294758.630:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.864020][ T37] audit: type=1326 audit(1794294758.630:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.870071][ T37] audit: type=1326 audit(1794294758.640:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1191.871490][ T37] audit: type=1326 audit(1794294758.640:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.7.2256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1193.025710][ T5772] Process accounting resumed [ 1194.272591][ T5772] Process accounting resumed [ 1196.342502][ T5907] Process accounting resumed [ 1197.243504][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1197.243525][ T37] audit: type=1326 audit(1794294764.010:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1197.243569][ T37] audit: type=1326 audit(1794294764.010:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1197.273595][ T37] audit: type=1326 audit(1794294764.040:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1197.273739][ T37] audit: type=1326 audit(1794294764.040:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1197.344837][ T37] audit: type=1326 audit(1794294764.090:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1197.344886][ T37] audit: type=1326 audit(1794294764.090:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f468cf38c82 code=0x7ffc0000 [ 1197.344925][ T37] audit: type=1326 audit(1794294764.100:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f468cf38f19 code=0x7ffc0000 [ 1197.344961][ T37] audit: type=1326 audit(1794294764.100:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f468cf38d17 code=0x7ffc0000 [ 1197.344996][ T37] audit: type=1326 audit(1794294764.110:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f468cef5c11 code=0x7ffc0000 [ 1197.345035][ T37] audit: type=1326 audit(1794294764.110:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.7.2310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f468cf39d09 code=0x7ffc0000 [ 1197.894279][ T5772] Process accounting resumed [ 1199.228272][ T5907] Process accounting resumed [ 1239.781483][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.972794][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1395.999525][ T39] INFO: task kworker/u9:6:5656 blocked for more than 143 seconds. [ 1395.999594][ T39] Not tainted syzkaller #0 [ 1395.999642][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1395.999693][ T39] task:kworker/u9:6 state:D stack:23600 pid:5656 tgid:5656 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1395.999878][ T39] Workqueue: hci0 hci_cmd_sync_work [ 1396.000100][ T39] Call Trace: [ 1396.000165][ T39] [ 1396.000767][ T39] __schedule+0x1768/0x5780 [ 1396.002530][ T39] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1396.003690][ T39] ? __pfx___schedule+0x10/0x10 [ 1396.003878][ T39] ? lock_acquire+0x115/0x350 [ 1396.004079][ T39] ? schedule+0x90/0x2b0 [ 1396.222117][ T39] ? schedule+0x90/0x2b0 [ 1396.222887][ T39] schedule+0x164/0x2b0 [ 1396.223618][ T39] schedule_timeout+0xc0/0x2c0 [ 1396.223766][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1396.224099][ T39] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1396.347389][ T39] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1396.347790][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1396.348026][ T39] ? wait_for_completion+0x26d/0x5d0 [ 1396.348337][ T39] wait_for_completion+0x2c5/0x5d0 [ 1396.349329][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1396.531300][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1396.531668][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1396.532402][ T39] synchronize_rcu_normal+0x2a4/0x380 [ 1396.532495][ T39] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 1396.532552][ T39] ? trace_event_raw_event_lock+0x1c7/0x280 [ 1396.642783][ T39] ? trace_event_buffer_commit+0x258/0x7a0 [ 1396.644072][ T39] ? trace_event_raw_event_lock+0x1c7/0x280 [ 1396.833450][ T39] synchronize_rcu_expedited+0x155/0x760 [ 1396.833819][ T39] ? rt_spin_unlock+0x159/0x200 [ 1396.834367][ T39] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1396.869626][ T39] ? rt_spin_unlock+0x159/0x200 [ 1396.870262][ T39] ? rt_spin_unlock+0x165/0x200 [ 1397.030682][ T39] hci_chan_del+0x114/0x1d0 [ 1397.031155][ T39] l2cap_conn_del+0x497/0x630 [ 1397.032441][ T39] l2cap_connect_cfm+0x12a/0x1610 [ 1397.032549][ T39] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1397.262287][ T39] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1397.262946][ T39] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1397.263236][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1397.263967][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1397.264074][ T39] ? mutex_lock_nested+0x14d/0x1d0 [ 1397.264192][ T39] ? hci_conn_failed+0x17f/0x370 [ 1397.264421][ T39] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1397.429715][ T39] hci_conn_failed+0x1e8/0x370 [ 1397.430127][ T39] ? hci_abort_conn_sync+0xa42/0x1170 [ 1397.430434][ T39] hci_abort_conn_sync+0xda7/0x1170 [ 1397.431385][ T39] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1397.661232][ T39] ? abort_conn_sync+0x26/0x210 [ 1397.662110][ T39] ? abort_conn_sync+0x26/0x210 [ 1397.662158][ T39] ? abort_conn_sync+0x19c/0x210 [ 1397.662251][ T39] ? __pfx_abort_conn_sync+0x10/0x10 [ 1397.662619][ T39] hci_cmd_sync_work+0x280/0x430 [ 1397.791517][ T39] ? process_scheduled_works+0x97a/0x1630 [ 1397.791824][ T39] process_scheduled_works+0xc3d/0x1630 [ 1398.099428][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.100720][ T39] ? assign_work+0x3cf/0x5d0 [ 1398.160360][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1398.167386][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16/5:b..l.. P13151/1:b..l.. [ 1398.173745][ T39] worker_thread+0xa47/0xfb0 [ 1398.186720][ C1] rcu: (detected by 1, t=10502 jiffies, g=84821, q=2654 ncpus=2) [ 1398.191854][ T39] ? __kthread_parkme+0x71/0x1f0 [ 1398.193234][ T39] kthread+0x38b/0x470 [ 1398.193450][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1398.193549][ T39] ? __pfx_kthread+0x10/0x10 [ 1398.213203][ C1] task:kworker/u8:6 state:D stack:18776 pid:13151 tgid:13151 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1398.225311][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1398.231696][ C1] Call Trace: [ 1398.235011][ C1] [ 1398.238369][ C1] __schedule+0x1768/0x5780 [ 1398.243133][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 1398.249758][ C1] ? __pfx___schedule+0x10/0x10 [ 1398.255279][ C1] schedule_rtlock+0x30/0x70 [ 1398.259919][ C1] rtlock_slowlock_locked+0x35c9/0x3c20 [ 1398.265518][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 1398.271856][ C1] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 1398.277518][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 1398.284893][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1398.291303][ C1] ? rcu_is_watching+0x16/0xb0 [ 1398.296274][ C1] rt_spin_lock+0x165/0x400 [ 1398.301057][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1398.306117][ C1] ? trace_event_raw_event_lock+0x1c7/0x280 [ 1398.312020][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1398.317646][ C1] tasklet_action_common+0xc5/0x600 [ 1398.323097][ C1] ? workqueue_softirq_action+0xd1/0x150 [ 1398.328854][ C1] handle_softirqs+0x1d4/0x6c0 [ 1398.334080][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 1398.339316][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1398.345802][ C1] cfg80211_inform_single_bss_data+0x135d/0x1bf0 [ 1398.352189][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1398.358949][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1398.366588][ C1] ? cfg80211_inform_bss_data+0x248/0x3be0 [ 1398.372549][ C1] cfg80211_inform_bss_data+0x25b/0x3be0 [ 1398.378604][ C1] ? check_buffer+0x257/0x860 [ 1398.383302][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 1398.389066][ C1] ? __rb_reserve_next+0x79f/0xdd0 [ 1398.394396][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1398.400753][ C1] ? rb_commit+0x787/0x7e0 [ 1398.405594][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 1398.411748][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 1398.418093][ C1] ? ring_buffer_event_data+0x94/0x100 [ 1398.423691][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 1398.430054][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1398.436725][ C1] cfg80211_inform_bss_frame_data+0x51a/0xae0 [ 1398.443282][ C1] ieee80211_bss_info_update+0x772/0xa30 [ 1398.449215][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1398.455814][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40 [ 1398.462325][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce1/0x2c40 [ 1398.468833][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 1398.475408][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40 [ 1398.481775][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1398.488587][ C1] ? trace_event_raw_event_lock+0x1c7/0x280 [ 1398.494512][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1398.500356][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1398.506910][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 1398.512425][ C1] ? rt_spin_unlock+0x159/0x200 [ 1398.517762][ C1] ? rt_spin_unlock+0x165/0x200 [ 1398.522831][ C1] ieee80211_iface_work+0x769/0xfa0 [ 1398.528412][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 1398.533674][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1398.539546][ C1] process_scheduled_works+0xc3d/0x1630 [ 1398.546090][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.552330][ C1] ? assign_work+0x3cf/0x5d0 [ 1398.557245][ C1] worker_thread+0xa47/0xfb0 [ 1398.562688][ C1] kthread+0x38b/0x470 [ 1398.566914][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1398.572081][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.576816][ C1] ret_from_fork+0x514/0xb70 [ 1398.581510][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.586712][ C1] ? __switch_to+0xc78/0x1410 [ 1398.591649][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.596286][ C1] ret_from_fork_asm+0x1a/0x30 [ 1398.601622][ C1] [ 1398.604634][ C1] task:ksoftirqd/0 state:R running task stack:19976 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1398.618213][ C1] Call Trace: [ 1398.621485][ C1] [ 1398.624613][ C1] __schedule+0x1768/0x5780 [ 1398.630002][ C1] ? __pfx___schedule+0x10/0x10 [ 1398.635023][ C1] ? trace_event_raw_event_lock+0x1c7/0x280 [ 1398.641164][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 1398.647549][ C1] ? ring_buffer_event_data+0x94/0x100 [ 1398.653357][ C1] preempt_schedule_notrace+0x56/0x90 [ 1398.658875][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 1398.664824][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 1398.670746][ C1] trace_event_raw_event_lock+0x241/0x280 [ 1398.676559][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1398.682506][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1398.688978][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 1398.694417][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1398.700212][ C1] ? rt_spin_unlock+0x159/0x200 [ 1398.705148][ C1] ? rt_spin_unlock+0x159/0x200 [ 1398.710003][ C1] lock_release+0x396/0x3c0 [ 1398.714580][ C1] ? cfg80211_put_bss+0x20e/0x270 [ 1398.719958][ C1] rt_spin_unlock+0x165/0x200 [ 1398.724936][ C1] cfg80211_put_bss+0x20e/0x270 [ 1398.729800][ C1] ? cfg80211_put_bss+0x45/0x270 [ 1398.734871][ C1] ieee80211_rx_list+0x4090/0x4c40 [ 1398.740860][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1398.746928][ C1] ? lock_acquire+0x115/0x350 [ 1398.751817][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 1398.757553][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1398.762606][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 1398.767660][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1398.773244][ C1] ? rt_spin_unlock+0x165/0x200 [ 1398.778349][ C1] ? skb_dequeue+0x11a/0x150 [ 1398.783006][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1398.789265][ C1] tasklet_action_common+0x31c/0x600 [ 1398.794787][ C1] handle_softirqs+0x1d4/0x6c0 [ 1398.800032][ C1] run_ksoftirqd+0x53/0x190 [ 1398.804571][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 1398.809679][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 1398.815063][ C1] kthread+0x38b/0x470 [ 1398.819227][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1398.824724][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.829619][ C1] ret_from_fork+0x514/0xb70 [ 1398.834366][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.839545][ C1] ? __switch_to+0xc78/0x1410 [ 1398.844463][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.849265][ C1] ret_from_fork_asm+0x1a/0x30 [ 1398.854608][ C1] [ 1398.975375][ T39] ret_from_fork+0x514/0xb70 [ 1398.975846][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.976257][ T39] ? __switch_to+0xc78/0x1410 [ 1398.977035][ T39] ? __pfx_kthread+0x10/0x10 [ 1398.977308][ T39] ret_from_fork_asm+0x1a/0x30 [ 1399.002684][ T39] [ 1399.002888][ T39] INFO: task kworker/u9:1:10874 blocked for more than 146 seconds. [ 1399.002959][ T39] Not tainted syzkaller #0 [ 1399.003023][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1399.003088][ T39] task:kworker/u9:1 state:D stack:24232 pid:10874 tgid:10874 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1399.003321][ T39] Workqueue: hci0 hci_cmd_work [ 1399.003604][ T39] Call Trace: [ 1399.003678][ T39] [ 1399.003927][ T39] __schedule+0x1768/0x5780 [ 1399.069518][ T39] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1399.070392][ T39] ? __pfx___schedule+0x10/0x10 [ 1399.071180][ T39] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 1399.072357][ T39] rt_mutex_schedule+0x76/0xf0 [ 1399.097731][ T39] rt_mutex_slowlock_block+0x540/0x6a0 [ 1399.098611][ T39] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 1399.099443][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1399.107583][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1399.108110][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1399.108161][ T39] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1399.120733][ T39] ? hci_cmd_work+0xa0/0x850 [ 1399.121528][ T39] ? hci_cmd_work+0xa0/0x850 [ 1399.121709][ T39] mutex_lock_nested+0x163/0x1d0 [ 1399.177827][ T39] hci_cmd_work+0xa0/0x850 [ 1399.178079][ T39] ? process_scheduled_works+0x97a/0x1630 [ 1399.178452][ T39] process_scheduled_works+0xc3d/0x1630 [ 1399.190141][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1399.203315][ T39] ? assign_work+0x3cf/0x5d0 [ 1399.204426][ T39] worker_thread+0xa47/0xfb0 [ 1399.294185][ T39] kthread+0x38b/0x470 [ 1399.295284][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1399.295460][ T39] ? __pfx_kthread+0x10/0x10 [ 1399.393592][ T39] ret_from_fork+0x514/0xb70 [ 1399.394461][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1399.535413][ T39] ? __switch_to+0xc78/0x1410 [ 1399.535903][ T39] ? __pfx_kthread+0x10/0x10 [ 1399.536512][ T39] ret_from_fork_asm+0x1a/0x30 [ 1399.709011][ T39] [ 1399.709148][ T39] [ 1399.709148][ T39] Showing all locks held in the system: [ 1399.709182][ T39] locks held by ksoftirqd/0/16: 7, on CPU#0: [ 1399.709216][ T39] #0: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1399.709472][ T39] #1: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1399.709795][ T39] #2: ffff8880b8424460 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 1399.710208][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1400.142102][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0 [ 1400.142613][ T39] #5: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1400.142862][ T39] #6: ffff888043f70228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 1400.143065][ T39] locks held by pr/ttyS0/38: 3, on CPU#0: [ 1400.143103][ T39] #0: ffffffff8f29afb8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1400.143388][ T39] #1: ffffffff9b163cd8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8d0 [ 1400.143770][ T39] #2: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1400.144226][ T39] locks held by khungtaskd/39: 1, on CPU#1: [ 1400.144296][ T39] #0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1400.182909][ T39] locks held by kworker/0:1H/142: 2, last CPU#0: [ 1400.182956][ T39] #0: ffff8880206dc140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.183300][ T39] #1: ffffc90004167c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.183734][ T39] locks held by aoe_tx0/1337: 2, last CPU#0: [ 1400.183808][ T39] #0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1400.184326][ T39] #1: ffff8880b8424460 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 1400.184485][ T39] locks held by kworker/u8:11/2069: 3, on CPU#1: [ 1400.184513][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.194335][ T39] #1: ffffc9000747fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.505207][ T39] #2: ffff888064010938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1400.505361][ T39] locks held by kworker/u8:12/2070: 6, last CPU#0: [ 1400.505395][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.505646][ T39] #1: ffffc9000749fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.506008][ T39] #2: ffff88803d5e2310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1400.506556][ T39] #3: ffff8880622ecd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1400.506944][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1400.507097][ T39] #5: ffff88813ff13d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 1400.507342][ T39] locks held by kworker/u8:13/2071: 2, on CPU#1: [ 1400.507387][ T39] #0: ffff88813fe3a940 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.507725][ T39] #1: ffffc900074bfc40 ((work_completion)(&(&krcp->monitor_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.508157][ T39] locks held by kworker/u8:17/2075: 6, last CPU#0: [ 1400.508223][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.508747][ T39] #1: ffffc9000753fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.508933][ T39] #2: ffff88803b398310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1400.849443][ T39] #3: ffff888035239d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1400.849691][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1400.849882][ T39] #5: ffff88813ff13d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 1400.850155][ T39] locks held by kworker/u8:20/2078: 6, last CPU#0: [ 1400.850205][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.850569][ T39] #1: ffffc9000759fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.851025][ T39] #2: ffff88806157c310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1400.851511][ T39] #3: ffff8880628f3120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1400.851672][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1400.851898][ T39] #5: ffff88813ff13d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 1400.852222][ T39] locks held by kworker/u8:33/2963: 7, on CPU#1: [ 1400.852273][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1400.852677][ T39] #1: ffffc9000ea5fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.577592][ T39] #2: ffff888043f70938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1401.578111][ T39] #3: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1401.578400][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1401.578586][ T39] #5: ffff888043f70228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 1401.578851][ T39] #6: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1401.773421][ T39] locks held by kworker/u8:39/2969: 3, on CPU#1: [ 1401.773455][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.773689][ T39] #1: ffffc9000eb1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.773985][ T39] #2: ffff88805d140938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1401.774342][ T39] locks held by kworker/u8:40/2970: 6, on CPU#1: [ 1401.774397][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.920339][ T39] #1: ffffc9000eb3fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.920807][ T39] #2: ffff8880642d0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1401.921358][ T39] #3: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1401.921492][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1401.921719][ T39] #5: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1401.922028][ T39] locks held by kworker/u8:41/2971: 6, on CPU#0: [ 1401.922082][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.922493][ T39] #1: ffffc9000eb5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.923003][ T39] #2: ffff88802745c310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1401.923512][ T39] #3: ffff888034186120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1401.924250][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1401.927805][ T39] #5: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1401.928098][ T39] locks held by kworker/u8:46/2976: 3, on CPU#1: [ 1401.928148][ T39] #0: ffff888040e77140 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.928599][ T39] #1: ffffc9000ebffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.929089][ T39] #2: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1401.929575][ T39] locks held by kworker/u8:52/3167: 2, on CPU#1: [ 1401.929622][ T39] #0: ffff888040e77140 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.929989][ T39] #1: ffffc9000e90fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1401.930400][ T39] locks held by syslogd/4988: 1, last CPU#1: [ 1401.930463][ T39] #0: ffff888028397398 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 1401.930967][ T39] locks held by klogd/4995: 3, on CPU#1: [ 1402.051629][ T39] #0: ffff8880b853cd60 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1402.052108][ T39] #1: ffff8880b8524808 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 1402.052521][ T39] #2: ffff8880b8528898 (hrtimer_bases.lock){-...}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3f0 [ 1402.052669][ T39] locks held by udevd/5006: 4, on CPU#1: [ 1402.052701][ T39] #0: ffffffff8fb67558 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1402.052945][ T39] #1: ffffffff8f516f50 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1402.053270][ T39] #2: ffff88813ff13d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xee/0x2c0 [ 1402.053672][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1402.054172][ T39] locks held by dhcpcd/5301: 4, on CPU#0: [ 1402.054247][ T39] #0: ffffffff8f4a34d0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 1402.054475][ T39] #1: ffff88803951d1b8 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 1402.379654][ T39] #2: ffff88803b1d44b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c60 [ 1402.379921][ T39] #3: ffffffff8f4f9e20 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5c/0x680 [ 1402.380248][ T39] locks held by getty/5394: 2, last CPU#1: [ 1402.380304][ T39] #0: ffff8880377040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1402.380741][ T39] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1402.381243][ T39] locks held by kworker/0:4/5646: 5, on CPU#0: [ 1402.381320][ T39] #0: ffff88805fa3b940 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.381471][ T39] #1: ffffc90005307c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.381708][ T39] #2: ffff888061c4a3f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 1402.382006][ T39] #3: ffffffff8f516f50 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1402.578436][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1402.578644][ T39] locks held by kworker/u9:6/5656: 6, last CPU#0: [ 1402.578685][ T39] #0: ffff88803917d140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.578999][ T39] #1: ffffc90005377c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.579410][ T39] #2: ffff88805edf0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1402.579883][ T39] #3: ffff88805edf00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 1402.580261][ T39] #4: ffffffff9098b418 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1402.580422][ T39] #5: ffff88803ee14b70 (_T->lock#4){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 1402.580703][ T39] locks held by kworker/u8:2/8345: 4, last CPU#1: [ 1402.861699][ T39] #0: ffff8880648f3940 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.861859][ T39] #1: ffffc90005287c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.862052][ T39] #2: ffff888054aa97f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1402.862304][ T39] #3: ffff888061c4a3f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1402.862625][ T39] locks held by kworker/u8:3/8920: 5, on CPU#0: [ 1402.862676][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.863073][ T39] #1: ffffc9000678fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.863170][ T39] #2: ffff88803f690310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1402.863348][ T39] #3: ffff88803a323d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1402.863572][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1402.863873][ T39] locks held by kworker/u9:1/10874: 3, last CPU#1: [ 1402.863924][ T39] #0: ffff88803917b940 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1402.864377][ T39] #1: ffffc9000604fc40 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.183608][ T39] #2: ffff88805edf00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_cmd_work+0xa0/0x850 [ 1403.184140][ T39] locks held by kworker/u8:4/12840: 8, on CPU#1: [ 1403.184192][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.184329][ T39] #1: ffffc90004237c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.307956][ T39] #2: ffff888031380938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1403.308263][ T39] #3: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1403.308651][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1403.309119][ T39] #5: ffff888031380228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 1403.309519][ T39] #6: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1403.309664][ T39] #7: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1403.429929][ T39] locks held by kworker/u8:5/12865: 1, on CPU#1: [ 1403.429980][ T39] #0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 1403.430358][ T39] locks held by kworker/u8:6/13151: 5, last CPU#0: [ 1403.430418][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.431020][ T39] #1: ffffc90004777c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.431400][ T39] #2: ffff88806e6e0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1403.431587][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1403.532609][ T39] #4: ffff8880b8424460 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 1403.533092][ T39] locks held by kworker/u8:7/13152: 6, on CPU#1: [ 1403.533166][ T39] #0: ffff88803319d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.533451][ T39] #1: ffffc90004897c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1403.533644][ T39] #2: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1403.533909][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1403.800570][ T39] #4: ffff8880262805d8 (key#19){+...}-{3:3}, at: batadv_bla_purge_backbone_gw+0x14b/0x5f0 [ 1403.800917][ T39] #5: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1403.801302][ T39] locks held by syz-executor/13421: 4, on CPU#0: [ 1403.801363][ T39] #0: ffff88803fdd1db8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1403.801839][ T39] #1: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1403.802014][ T39] #2: ffff888042a51a18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1403.802252][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1403.802541][ T39] locks held by syz.0.2184/14774: 7, on CPU#0: [ 1403.802590][ T39] #0: ffff88802ee610b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1403.802969][ T39] #1: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1403.803450][ T39] #2: ffff888043edc058 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1403.803914][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1403.804131][ T39] #4: ffff88803cbc0058 (&cluster_info[i].lock){+.+.}-{3:3}, at: swap_put_entries_cluster+0x147/0x500 [ 1404.091565][ T39] #5: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1404.091882][ T39] #6: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1404.092297][ T39] locks held by syz.4.2302/15054: 4, on CPU#1: [ 1404.092363][ T39] #0: ffff888064866528 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0 [ 1404.092925][ T39] #1: ffff888033db4710 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 1404.093209][ T39] #2: ffff888033db4848 (&xa->xa_lock#7){+.+.}-{3:3}, at: shmem_add_to_page_cache+0x76f/0xc10 [ 1404.093440][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1404.093728][ T39] locks held by syz.0.2314/15093: 4, on CPU#0: [ 1404.093780][ T39] #0: ffff88803d3451b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1404.094170][ T39] #1: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1404.398822][ T39] #2: ffff88802a005a18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1404.399097][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1404.399410][ T39] locks held by syz.7.2342/15164: 3, on CPU#1: [ 1404.399464][ T39] #0: ffff88803c4a2528 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0 [ 1404.399938][ T39] #1: ffff88806e7e4710 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 1404.400529][ T39] #2: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 1404.400785][ T39] locks held by syz.8.2356/15190: 1, last CPU#0: [ 1404.400812][ T39] #0: ffffffff8f3c7af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1404.401017][ T39] locks held by kworker/u8:15/15206: 6, last CPU#0: [ 1404.401062][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1404.401359][ T39] #1: ffffc90006cffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1404.401742][ T39] #2: ffff888026f86310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1404.402294][ T39] #3: ffff888022f71520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1404.652580][ T39] #4: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1404.652775][ T39] #5: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1404.653057][ T39] locks held by kworker/0:6/15208: 5, on CPU#0: [ 1404.653107][ T39] #0: ffff888064f69540 ((wq_completion)wg-crypt-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1404.653539][ T39] #1: ffffc90006cafc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1404.654033][ T39] #2: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1404.654467][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1404.862416][ T39] #4: ffff88806e71d460 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x174/0xd80 [ 1404.862626][ T39] locks held by kworker/u8:18/15210: 4, on CPU#0: [ 1404.862663][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1404.862942][ T39] #1: ffffc90006d2fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1404.863306][ T39] #2: ffff88803a6f0310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1404.863816][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1404.864291][ T39] locks held by kworker/u9:0/15212: 5, last CPU#0: [ 1404.864312][ T39] #0: ffff888060e1d140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.154012][ T39] #1: ffffc90006d4fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.154292][ T39] #2: ffff888062900f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1405.322375][ T39] #3: ffff8880629000b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 1405.322540][ T39] #4: ffffffff9098b418 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1405.322782][ T39] locks held by kworker/u9:2/15215: 3, last CPU#0: [ 1405.322827][ T39] #0: ffff888060e1e940 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.323214][ T39] #1: ffffc90006d7fc40 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.323642][ T39] #2: ffff8880629000b0 (&hdev->lock){+.+.}-{4:4}, at: hci_cmd_work+0xa0/0x850 [ 1405.324151][ T39] locks held by kworker/u8:22/15216: 1, on CPU#0: [ 1405.324228][ T39] #0: ffff88805753c940 ((wq_completion)bond2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.324476][ T39] locks held by kworker/0:10/15219: 3, on CPU#0: [ 1405.324511][ T39] #0: ffff88813ff3e540 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.552913][ T39] #1: ffffc90006cbfc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.553099][ T39] #2: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1405.553364][ T39] locks held by kworker/u8:23/15220: 4, on CPU#1: [ 1405.553411][ T39] #0: ffff88803d84f140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.553823][ T39] #1: ffffc90006dafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.554333][ T39] #2: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1405.758932][ T39] #3: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1405.759336][ T39] locks held by kworker/u8:24/15222: 6, on CPU#1: [ 1405.759406][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.759888][ T39] #1: ffffc90005f1fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1405.760472][ T39] #2: ffff88806d26e310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1405.954296][ T39] #3: ffff888026e19120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0