last executing test programs: 9m33.365108972s ago: executing program 4 (id=1230): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_ep_write(r0, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 9m30.252280274s ago: executing program 4 (id=1252): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9m29.741459543s ago: executing program 4 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) write(r0, &(0x7f00000003c0)='3', 0x1) 9m29.468919447s ago: executing program 4 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 9m28.425913168s ago: executing program 4 (id=1267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) write(r0, &(0x7f00000007c0)="c64d028c42", 0x5) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000000)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) 9m26.320048111s ago: executing program 4 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0xf6, 0x0, 0x1, 0x2, 0x6, @random}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 9m25.841932111s ago: executing program 32 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0xf6, 0x0, 0x1, 0x2, 0x6, @random}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 7m31.305454949s ago: executing program 2 (id=1698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7m31.273751935s ago: executing program 2 (id=1699): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, &(0x7f00000000c0)) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_disconnect(r0) 7m29.383235787s ago: executing program 2 (id=1701): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x60042, 0x1) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x5) r2 = socket(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x14c98, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 7m28.416582652s ago: executing program 2 (id=1705): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 7m28.218446654s ago: executing program 2 (id=1707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0xc, 0x8, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xaf}, @ra={0x5, 0x2, 0x7fff}, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0xf3ec, [0x5, 0x5bd]}}, @pad1, @generic={0xe, 0x17, "32f65c05d6bf24d01dae8df4b893bea3b651bd7e8ef00a"}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0xb4}}}], 0x90}}], 0x2, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 7m26.953900487s ago: executing program 2 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x3d, 0x3, "ed02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f"}]}], {0x14}}, 0xa8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 7m26.393401944s ago: executing program 33 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x3d, 0x3, "ed02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f"}]}], {0x14}}, 0xa8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 5m25.152703184s ago: executing program 5 (id=2276): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000011000000630a04ff000000004400000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000400000500c094060000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) 5m24.785829364s ago: executing program 5 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x5, 0xb68, 0x739, &(0x7f0000000400)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 5m23.00360502s ago: executing program 5 (id=2286): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, &(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="32c0aa43755c", 0x6}], 0x1}, 0x4040014) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}, {&(0x7f0000000040)={0x10, 0x3d, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x2}, 0x200488d4) 5m22.637433944s ago: executing program 5 (id=2289): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x2, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x67, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) syz_ublk_setup_queues(r1, r6, &(0x7f0000000380)={0x0, 0xef64, 0x0, 0x1, 0x34b, 0x0, r2}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea6, 0x8, 0x1, 0x15c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bc3, 0x40, 0x1, 0x3d8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c24, 0x0, 0x0, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674d, 0x80, 0x3, 0x1e7}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2e5, 0x0, 0x0}}, 0x0) 5m21.49393769s ago: executing program 5 (id=2298): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5m19.220841062s ago: executing program 5 (id=2313): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='task\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000000740)=""/163, 0xba974ed140df4995) getdents64(r2, 0x0, 0x0) 4m33.641069864s ago: executing program 3 (id=2537): socket$unix(0x1, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5058, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4m32.29368491s ago: executing program 3 (id=2544): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) lseek(r2, 0x3, 0x0) 4m31.693100227s ago: executing program 3 (id=2546): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0), 0x40, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000740)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x200) 4m31.355901817s ago: executing program 3 (id=2548): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x28c897, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 4m30.845607801s ago: executing program 3 (id=2553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0xa, 0x4, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x5e21, @local}}, 0x0, 0x0, 0x3f, 0x0, "a30b7b68af4d2f246a016542dae700000000000005000000fc0100f41e4de625610938366441b5462d398273c3ef2fa788000e00000033de5551502f07b4001a00000000008000"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 4m29.173463391s ago: executing program 3 (id=2559): r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f00000002c0)='.\x00', 0x100000, 0x0) flock(r2, 0x1) close(0x3) 4m28.279762757s ago: executing program 34 (id=2559): r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f00000002c0)='.\x00', 0x100000, 0x0) flock(r2, 0x1) close(0x3) 3m9.653971069s ago: executing program 6 (id=2905): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000004900)={0x0, 0x21, 0x4, @tid=r0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000004940)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000004980)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000049c0)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000004a00)=[{&(0x7f0000004a40)=""/121, 0xfdef}, {0x0, 0x11}], 0x10000000000000fb) 3m9.364416626s ago: executing program 6 (id=2907): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m7.733871467s ago: executing program 6 (id=2917): setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m6.449929972s ago: executing program 6 (id=2921): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 3m6.083723622s ago: executing program 6 (id=2925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 3m4.296323823s ago: executing program 6 (id=2934): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 3m3.50606595s ago: executing program 35 (id=2934): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 2m19.137931405s ago: executing program 7 (id=3126): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 2m18.616110864s ago: executing program 7 (id=3127): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m17.654593752s ago: executing program 7 (id=3132): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) 2m16.801406483s ago: executing program 7 (id=3134): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m16.454650534s ago: executing program 7 (id=3135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r1, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a5050000000009190f36e2da80aae4b2cc1b229a6d0ce5336c10d2e9e3f1487d2638"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000040)}}, 0x10) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m14.085896731s ago: executing program 7 (id=3139): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6\xff\x03\x00\x00\x00\x00\x00\x00vs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\xca\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 2m13.676403469s ago: executing program 36 (id=3139): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6\xff\x03\x00\x00\x00\x00\x00\x00vs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\xca\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 5.424709355s ago: executing program 1 (id=3471): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001380)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r1, 0x2) close(r1) 5.314052204s ago: executing program 1 (id=3472): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.945365682s ago: executing program 0 (id=3476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) 3.594620868s ago: executing program 0 (id=3477): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000b90000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000bd4000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x82) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.236119605s ago: executing program 0 (id=3478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0xe}) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 2.089696176s ago: executing program 1 (id=3479): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) 1.957691432s ago: executing program 0 (id=3480): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0xfffffffe, 0x2, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0xfffffffe, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x3, 0x5, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xe, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x1, 0x1, 0x3, 0x0, 0x7, 0x80000000, 0xffff8000, 0x9, 0x9, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x10001, 0x665195e5, 0xfe3, 0x7, 0x9, 0x8, 0x7, 0x4, 0x800, 0x101, 0x401, 0x2, 0xfe, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2ec, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x4, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0xa1, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0x7, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x2000000, 0x36ae765f, 0x401, 0x9, 0x200000, 0x4, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x9, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x29, 0xfe62, 0xd, 0x40001c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0xfb3, 0xe7, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.217584765s ago: executing program 1 (id=3481): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x33) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) mknodat(r1, &(0x7f00000002c0)='./file0/file0\x00', 0x8910, 0x4) getdents64(r0, &(0x7f0000000500)=""/49, 0x31) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x400, 0x0) renameat2(r2, &(0x7f0000000580)='./file0\x00', r0, &(0x7f00000005c0)='./file7\x00', 0x0) getdents64(r0, 0x0, 0x0) 830.394561ms ago: executing program 1 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 646.426968ms ago: executing program 0 (id=3483): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/257, 0x101}], 0x1, 0x8a7, 0x6) 415.271146ms ago: executing program 0 (id=3484): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 0s ago: executing program 1 (id=3485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 gid=0 ses=4294967295 subj=_ pid=14666 comm="syz.7.2843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 645.665098][ T36] audit: type=1326 audit(1792150140.715:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14666 comm="syz.7.2843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 645.665371][ T36] audit: type=1326 audit(1792150140.715:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14666 comm="syz.7.2843" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 646.649023][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.934598][T14694] batman_adv: batadv0: Adding interface: syzkaller0 [ 646.934622][T14694] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.179384][T14694] batman_adv: batadv0: Interface activated: syzkaller0 [ 647.543978][T14690] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 647.975207][T14690] batman_adv: batadv0: Removing interface: syzkaller0 [ 649.000372][T14713] syzkaller0: entered promiscuous mode [ 649.000407][T14713] syzkaller0: entered allmulticast mode [ 649.817100][T13782] veth0_vlan: entered promiscuous mode [ 649.961205][T13782] veth1_vlan: entered promiscuous mode [ 650.854493][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 650.854529][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 651.592405][T12776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.682555][T12776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.699642][T12776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.702745][T12776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.739056][T12776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.132911][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2877'. [ 652.877019][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 653.026970][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 653.027980][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 653.028799][ T10] usb 2-1: config 0 has no interfaces? [ 653.039751][ T10] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 653.039783][ T10] usb 2-1: Product: syz [ 653.039800][ T10] usb 2-1: Manufacturer: syz [ 653.039816][ T10] usb 2-1: SerialNumber: syz [ 653.099117][ T10] usb 2-1: config 0 descriptor?? [ 653.188761][T14819] loop8: detected capacity change from 0 to 16384 [ 653.196924][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 653.367377][ T9] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 653.368953][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 653.369008][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 653.373814][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.373843][ T9] usb 7-1: Product: syz [ 653.373858][ T9] usb 7-1: Manufacturer: syz [ 653.373874][ T9] usb 7-1: SerialNumber: syz [ 653.655789][ T10] usb 2-1: USB disconnect, device number 13 [ 653.976916][T12776] Bluetooth: hci2: command tx timeout [ 655.210377][T14820] loop8: detected capacity change from 16384 to 16383 [ 656.044598][T12776] Bluetooth: hci2: command tx timeout [ 656.411689][T14820] Dev loop8: unable to read RDB block 8 [ 656.411904][T14820] loop8: unable to read partition table [ 656.412200][T14820] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 657.042402][T14871] FAULT_INJECTION: forcing a failure. [ 657.042402][T14871] name failslab, interval 1, probability 0, space 0, times 0 [ 657.042447][T14871] CPU: 0 UID: 0 PID: 14871 Comm: syz.7.2897 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 657.042479][T14871] Tainted: [L]=SOFTLOCKUP [ 657.042487][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 657.042499][T14871] Call Trace: [ 657.042508][T14871] [ 657.042517][T14871] dump_stack_lvl+0xe8/0x150 [ 657.042555][T14871] should_fail_ex+0x46b/0x600 [ 657.042593][T14871] should_failslab+0xa8/0x100 [ 657.042618][T14871] __kmalloc_cache_noprof+0xa1/0x680 [ 657.042651][T14871] ? tipc_conn_alloc+0x57/0x500 [ 657.042747][T14871] ? tipc_conn_alloc+0x57/0x500 [ 657.042782][T14871] tipc_conn_alloc+0x57/0x500 [ 657.042814][T14871] tipc_topsrv_kern_subscr+0xf8/0x250 [ 657.042842][T14871] ? tipc_own_addr+0x45/0x2a0 [ 657.042872][T14871] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 657.042904][T14871] ? tipc_own_addr+0x45/0x2a0 [ 657.042935][T14871] ? __asan_memset+0x22/0x50 [ 657.042968][T14871] tipc_group_create+0x35b/0x4f0 [ 657.043006][T14871] tipc_sk_join+0x25d/0x6a0 [ 657.043050][T14871] ? __pfx_tipc_sk_join+0x10/0x10 [ 657.043076][T14871] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 657.043108][T14871] ? lockdep_hardirqs_on+0x7b/0x110 [ 657.043144][T14871] tipc_setsockopt+0x73e/0x9a0 [ 657.043177][T14871] ? __pfx_tipc_setsockopt+0x10/0x10 [ 657.043204][T14871] ? __fget_files+0x2a/0x420 [ 657.043233][T14871] ? __fget_files+0x2a/0x420 [ 657.043256][T14871] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 657.043280][T14871] ? __pfx_tipc_setsockopt+0x10/0x10 [ 657.043306][T14871] do_sock_setsockopt+0x17c/0x1b0 [ 657.043340][T14871] __x64_sys_setsockopt+0x143/0x1b0 [ 657.043374][T14871] do_syscall_64+0x166/0x520 [ 657.043403][T14871] ? trace_irq_disable+0x3b/0x140 [ 657.043432][T14871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.043455][T14871] ? clear_bhb_loop+0x70/0xc0 [ 657.043481][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.043502][T14871] RIP: 0033:0x7fda4d7be559 [ 657.043523][T14871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.043541][T14871] RSP: 002b:00007fda4ba16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 657.043566][T14871] RAX: ffffffffffffffda RBX: 00007fda4da45fa0 RCX: 00007fda4d7be559 [ 657.043583][T14871] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 657.043597][T14871] RBP: 00007fda4d8558b0 R08: 00000000000004bd R09: 0000000000000000 [ 657.043612][T14871] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 657.043627][T14871] R13: 00007fda4da46038 R14: 00007fda4da45fa0 R15: 00007ffcedf96ec8 [ 657.043662][T14871] [ 657.626537][ T9] usb 7-1: disable ehci-hcd to run US-144 [ 657.683216][ T9] usb 7-1: disable ehci-hcd to run US-144 [ 657.709858][ T9] usb 7-1: USB disconnect, device number 12 [ 657.793983][T14882] netlink: 606 bytes leftover after parsing attributes in process `syz.7.2900'. [ 658.118953][T12776] Bluetooth: hci2: command tx timeout [ 659.476070][T14715] udevd[14715]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.869928][ T5249] veth1_vlan: left promiscuous mode [ 660.196934][T12776] Bluetooth: hci2: command tx timeout [ 660.467957][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 660.467986][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2917'. [ 661.226598][T14926] mac80211_hwsim hwsim21 ..ãc¤±: renamed from wlan1 (while UP) [ 661.229298][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 661.229320][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2917'. [ 661.429894][ T9279] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430088][ T9279] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430130][ T9279] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430169][ T9279] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430210][ T9279] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430249][ T9279] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430289][ T9279] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430329][ T9279] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430369][ T9279] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430409][ T9279] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430449][ T9279] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.430488][ T9279] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.542262][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 661.542283][ T36] audit: type=1326 audit(1792150156.595:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14929 comm="syz.1.2918" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7fc00000 [ 661.929296][ T36] audit: type=1326 audit(1792150156.985:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.929379][ T36] audit: type=1326 audit(1792150156.985:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.930264][ T36] audit: type=1326 audit(1792150156.985:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.930319][ T36] audit: type=1326 audit(1792150156.985:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.930648][ T36] audit: type=1326 audit(1792150156.985:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.958341][ T36] audit: type=1326 audit(1792150156.995:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.958399][ T36] audit: type=1326 audit(1792150156.995:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.958446][ T36] audit: type=1326 audit(1792150156.995:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 661.958491][ T36] audit: type=1326 audit(1792150156.995:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14956 comm="syz.7.2924" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4d7be559 code=0x7ffc0000 [ 662.267995][T14770] rxe_eth0 speed is unknown, defaulting to 1000 [ 662.269194][ T5249] veth1_vlan: entered promiscuous mode [ 663.820749][T14988] FAULT_INJECTION: forcing a failure. [ 663.820749][T14988] name failslab, interval 1, probability 0, space 0, times 0 [ 663.820795][T14988] CPU: 1 UID: 0 PID: 14988 Comm: syz.1.2935 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 663.820831][T14988] Tainted: [L]=SOFTLOCKUP [ 663.820840][T14988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 663.820855][T14988] Call Trace: [ 663.820865][T14988] [ 663.820876][T14988] dump_stack_lvl+0xe8/0x150 [ 663.820920][T14988] should_fail_ex+0x46b/0x600 [ 663.820965][T14988] should_failslab+0xa8/0x100 [ 663.820995][T14988] __kmalloc_cache_noprof+0xa1/0x680 [ 663.821034][T14988] ? init_listener+0x50/0x1d0 [ 663.821083][T14988] ? init_listener+0x50/0x1d0 [ 663.821116][T14988] init_listener+0x50/0x1d0 [ 663.821145][T14988] do_seccomp+0x917/0xd30 [ 663.821178][T14988] ? __se_sys_futex+0x3a8/0x450 [ 663.821205][T14988] ? __pfx_do_seccomp+0x10/0x10 [ 663.821255][T14988] do_syscall_64+0x166/0x520 [ 663.821290][T14988] ? trace_irq_disable+0x3b/0x140 [ 663.821323][T14988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.821349][T14988] ? clear_bhb_loop+0x70/0xc0 [ 663.821379][T14988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.821403][T14988] RIP: 0033:0x7f7cdbcbe559 [ 663.821427][T14988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.821448][T14988] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 663.821476][T14988] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 663.821494][T14988] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 0000000000000001 [ 663.821509][T14988] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 663.821526][T14988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.821542][T14988] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 663.821595][T14988] [ 665.514780][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 665.630347][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 665.633751][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 665.705522][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 665.706330][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.123987][T15032] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.2946'. [ 667.177316][ T9268] bridge_slave_1: left allmulticast mode [ 667.177360][ T9268] bridge_slave_1: left promiscuous mode [ 667.177676][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.350657][ T9268] bridge_slave_0: left allmulticast mode [ 667.350687][ T9268] bridge_slave_0: left promiscuous mode [ 667.350855][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.956967][T12776] Bluetooth: hci1: command tx timeout [ 668.739329][ T9268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.833511][ T9268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.879199][ T9268] bond0 (unregistering): Released all slaves [ 669.172748][ T1394] netdevsim netdevsim5 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.172805][ T1394] netdevsim netdevsim5 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.172847][ T1394] netdevsim netdevsim5 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.172886][ T1394] netdevsim netdevsim5 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.833178][T15023] rxe_eth0 speed is unknown, defaulting to 1000 [ 670.039270][T12776] Bluetooth: hci1: command tx timeout [ 670.265363][T15108] fuse: fd is not a fuse device [ 672.116969][T12776] Bluetooth: hci1: command tx timeout [ 672.235771][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.236726][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.253996][T14770] bridge_slave_0: entered allmulticast mode [ 672.291025][T14770] bridge_slave_0: entered promiscuous mode [ 672.309482][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.312847][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.315213][T14770] bridge_slave_1: entered allmulticast mode [ 672.338771][T15148] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 672.384702][T14770] bridge_slave_1: entered promiscuous mode [ 672.752017][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2979'. [ 672.752165][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2979'. [ 672.778762][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2979'. [ 672.778796][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2979'. [ 672.849731][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.876159][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.415432][T14770] team0: Port device team_slave_0 added [ 673.449891][T14770] team0: Port device team_slave_1 added [ 674.181122][ T9268] hsr_slave_0: left promiscuous mode [ 674.217020][T12776] Bluetooth: hci1: command tx timeout [ 674.306973][ T5712] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 674.307163][ T9268] hsr_slave_1: left promiscuous mode [ 674.331371][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.362565][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.576068][ T5712] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 674.578574][ T5712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.583047][ T5712] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 674.583076][ T5712] usb 2-1: Product: syz [ 674.583092][ T5712] usb 2-1: Manufacturer: syz [ 674.583109][ T5712] usb 2-1: SerialNumber: syz [ 674.612638][ T5712] usb 2-1: config 0 descriptor?? [ 674.648431][ T5712] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 674.648956][ T5712] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 674.649043][ T5712] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 674.662685][ T5712] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 675.033535][ T5712] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 675.064283][ T5712] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 675.081212][ T5712] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 675.094615][ T5712] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 675.122764][ T5712] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 675.145399][ T5712] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 675.186535][ T5712] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 675.292629][ T9268] veth1_vlan: left promiscuous mode [ 675.408064][ T9268] veth0_vlan: left promiscuous mode [ 675.464769][ T5712] usb 2-1: USB disconnect, device number 14 [ 675.496352][ T5712] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 675.540294][ T5712] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 675.586041][ T5712] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 675.616732][ T5712] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 675.721710][ T5712] keyspan 2-1:0.0: device disconnected [ 676.918071][ T9268] team0 (unregistering): Port device team_slave_1 removed [ 676.998149][ T9268] team0 (unregistering): Port device team_slave_0 removed [ 677.440619][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.440642][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.440674][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.696475][T15219] ªªªªª»: left promiscuous mode [ 678.045055][T15219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.056329][T15219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.073866][T15219] veth0_to_team: entered promiscuous mode [ 678.263737][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.263761][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.263791][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.048757][T14770] hsr_slave_0: entered promiscuous mode [ 679.054889][T14770] hsr_slave_1: entered promiscuous mode [ 681.786294][ T9268] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.316694][T14770] netdevsim netdevsim5 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.848327][ T5600] Bluetooth: hci3: command 0x1003 tx timeout [ 682.853601][T12776] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 684.254652][ T9268] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.595930][T15352] FAULT_INJECTION: forcing a failure. [ 684.595930][T15352] name failslab, interval 1, probability 0, space 0, times 0 [ 684.595974][T15352] CPU: 1 UID: 0 PID: 15352 Comm: syz.1.3037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 684.596006][T15352] Tainted: [L]=SOFTLOCKUP [ 684.596013][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 684.596026][T15352] Call Trace: [ 684.596036][T15352] [ 684.596046][T15352] dump_stack_lvl+0xe8/0x150 [ 684.596086][T15352] should_fail_ex+0x46b/0x600 [ 684.596126][T15352] should_failslab+0xa8/0x100 [ 684.596152][T15352] __kmalloc_noprof+0xfb/0x790 [ 684.596186][T15352] ? __list_lru_init+0xbe/0x600 [ 684.596209][T15352] ? __list_lru_init+0xbe/0x600 [ 684.596240][T15352] __list_lru_init+0xbe/0x600 [ 684.596275][T15352] sget_fc+0xf6e/0x1a80 [ 684.596301][T15352] ? __pfx_kernfs_test_super+0x10/0x10 [ 684.596340][T15352] ? __pfx_kernfs_set_super+0x10/0x10 [ 684.596371][T15352] ? __pfx_sget_fc+0x10/0x10 [ 684.596396][T15352] ? __kasan_kmalloc+0x93/0xb0 [ 684.596419][T15352] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 684.596451][T15352] ? kernfs_get_tree+0xc4/0x980 [ 684.596475][T15352] ? kernfs_get_tree+0xc4/0x980 [ 684.596518][T15352] kernfs_get_tree+0x1e9/0x980 [ 684.596545][T15352] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 684.596576][T15352] ? rt_spin_unlock+0x165/0x200 [ 684.596605][T15352] ? __pfx_kernfs_get_tree+0x10/0x10 [ 684.596631][T15352] ? cap_capable+0x123/0x460 [ 684.596667][T15352] ? bpf_lsm_capable+0x9/0x20 [ 684.596700][T15352] vfs_get_tree+0x92/0x2a0 [ 684.596733][T15352] do_new_mount+0x325/0xb00 [ 684.596761][T15352] ? cap_capable+0x123/0x460 [ 684.596795][T15352] ? __pfx_do_new_mount+0x10/0x10 [ 684.596821][T15352] ? ns_capable+0x89/0xe0 [ 684.596851][T15352] ? path_mount+0x647/0x1050 [ 684.596879][T15352] ? user_path_at+0xd4/0x160 [ 684.596908][T15352] __se_sys_mount+0x31d/0x420 [ 684.596937][T15352] ? __pfx___se_sys_mount+0x10/0x10 [ 684.596967][T15352] ? __x64_sys_mount+0x20/0xc0 [ 684.596996][T15352] do_syscall_64+0x166/0x520 [ 684.597026][T15352] ? trace_irq_disable+0x3b/0x140 [ 684.597058][T15352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.597081][T15352] ? clear_bhb_loop+0x70/0xc0 [ 684.597107][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.597129][T15352] RIP: 0033:0x7f7cdbcbe559 [ 684.597151][T15352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.597172][T15352] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 684.597197][T15352] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 684.597215][T15352] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 684.597230][T15352] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 684.597244][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.597258][T15352] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 684.597296][T15352] [ 685.008143][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 685.241053][T15360] CIFS: Attempting to mount //127.0.0.1/share [ 686.104078][ T9268] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.145994][T15360] CIFS: VFS: cifs_mount failed w/return code = -112 [ 686.449710][T14770] netdevsim netdevsim5 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.519227][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.521006][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.521232][T15023] bridge_slave_0: entered allmulticast mode [ 686.529337][T15023] bridge_slave_0: entered promiscuous mode [ 686.542885][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.543713][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.543908][T15023] bridge_slave_1: entered allmulticast mode [ 686.553290][T15023] bridge_slave_1: entered promiscuous mode [ 688.205258][ T9268] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.393758][T15023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.411186][T15408] ceph: No mds server is up or the cluster is laggy [ 688.413232][ T9] libceph: connect (1)[c::]:6789 error -101 [ 688.413463][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 688.460721][ T5249] 8021q: adding VLAN 0 to HW filter on device eth14 [ 688.475226][T15023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.413120][T14770] netdevsim netdevsim5 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.571249][T15023] team0: Port device team_slave_0 added [ 689.579004][T15023] team0: Port device team_slave_1 added [ 689.659495][T15023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.659516][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.659638][T15023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.663320][T15023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.663369][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.663400][T15023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.787234][T15023] hsr_slave_0: entered promiscuous mode [ 689.790714][T15023] hsr_slave_1: entered promiscuous mode [ 689.793515][T15023] debugfs: 'hsr0' already exists in 'hsr' [ 689.873890][T15023] Cannot create hsr debugfs directory [ 690.581425][T14770] netdevsim netdevsim5 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.668785][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 691.164288][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.164373][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.707316][ T5905] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 691.862369][ T5905] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 691.865849][ T5905] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 691.865884][ T5905] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 691.865931][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.944816][ T5905] usb 8-1: probing VID:PID(0424:012C) [ 692.058002][ T5905] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 692.058037][ T5905] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 692.058060][ T5905] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 692.058082][ T5905] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 692.058104][ T5905] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 692.415233][ T5905] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 692.522229][ T1394] netdevsim netdevsim6 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.613750][ T5905] usb 8-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 693.925972][ T5905] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 693.975703][ T5905] usb 8-1: USB disconnect, device number 2 [ 694.698603][T15523] loop5: detected capacity change from 0 to 7 [ 694.754425][T15523] Dev loop5: unable to read RDB block 7 [ 694.754462][T15523] loop5: unable to read partition table [ 694.754600][T15523] loop5: partition table beyond EOD, truncated [ 694.754621][T15523] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 695.454623][T15540] FAULT_INJECTION: forcing a failure. [ 695.454623][T15540] name failslab, interval 1, probability 0, space 0, times 0 [ 695.454669][T15540] CPU: 1 UID: 0 PID: 15540 Comm: syz.7.3081 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 695.454704][T15540] Tainted: [L]=SOFTLOCKUP [ 695.454713][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 695.454729][T15540] Call Trace: [ 695.454739][T15540] [ 695.454751][T15540] dump_stack_lvl+0xe8/0x150 [ 695.454794][T15540] should_fail_ex+0x46b/0x600 [ 695.454840][T15540] should_failslab+0xa8/0x100 [ 695.454869][T15540] __kmalloc_noprof+0xfb/0x790 [ 695.454906][T15540] ? security_sb_alloc+0x48/0x310 [ 695.454932][T15540] ? security_sb_alloc+0x48/0x310 [ 695.454977][T15540] security_sb_alloc+0x48/0x310 [ 695.455007][T15540] sget_fc+0x9dc/0x1a80 [ 695.455036][T15540] ? __pfx_super_s_dev_test+0x10/0x10 [ 695.455080][T15540] ? __pfx_super_s_dev_set+0x10/0x10 [ 695.455115][T15540] ? __pfx_sget_fc+0x10/0x10 [ 695.455141][T15540] ? rt_mutex_slowunlock+0x219/0x460 [ 695.455173][T15540] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 695.455214][T15540] sget_dev+0xab/0xf0 [ 695.455246][T15540] ? __pfx_sget_dev+0x10/0x10 [ 695.455275][T15540] ? get_mtd_device+0x200/0x240 [ 695.455305][T15540] ? __pfx_get_mtd_device+0x10/0x10 [ 695.455339][T15540] mtd_get_sb+0x51/0x410 [ 695.455368][T15540] ? __pfx_jffs2_fill_super+0x10/0x10 [ 695.455398][T15540] ? __pfx_jffs2_fill_super+0x10/0x10 [ 695.455426][T15540] get_tree_mtd+0x597/0x7d0 [ 695.455461][T15540] ? __pfx_jffs2_fill_super+0x10/0x10 [ 695.455488][T15540] ? __pfx_get_tree_mtd+0x10/0x10 [ 695.455527][T15540] ? safesetid_security_capable+0xa9/0x1a0 [ 695.455574][T15540] vfs_get_tree+0x92/0x2a0 [ 695.455612][T15540] do_new_mount+0x325/0xb00 [ 695.455639][T15540] ? cap_capable+0x123/0x460 [ 695.455680][T15540] ? __pfx_do_new_mount+0x10/0x10 [ 695.455716][T15540] ? ns_capable+0x89/0xe0 [ 695.455751][T15540] ? path_mount+0x647/0x1050 [ 695.455783][T15540] ? user_path_at+0xd4/0x160 [ 695.455817][T15540] __se_sys_mount+0x31d/0x420 [ 695.455854][T15540] ? __pfx___se_sys_mount+0x10/0x10 [ 695.455892][T15540] ? __x64_sys_mount+0x20/0xc0 [ 695.455922][T15540] do_syscall_64+0x166/0x520 [ 695.455952][T15540] ? trace_irq_disable+0x3b/0x140 [ 695.455990][T15540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.456013][T15540] ? clear_bhb_loop+0x70/0xc0 [ 695.456043][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.456068][T15540] RIP: 0033:0x7fda4d7be559 [ 695.456092][T15540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.456113][T15540] RSP: 002b:00007fda4ba16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 695.456141][T15540] RAX: ffffffffffffffda RBX: 00007fda4da45fa0 RCX: 00007fda4d7be559 [ 695.456160][T15540] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000100 [ 695.456178][T15540] RBP: 00007fda4d8558b0 R08: 0000000000000000 R09: 0000000000000000 [ 695.456194][T15540] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 695.456210][T15540] R13: 00007fda4da46038 R14: 00007fda4da45fa0 R15: 00007ffcedf96ec8 [ 695.456251][T15540] [ 696.242176][ T9268] bond1 (unregistering): (slave gretap1): Releasing active interface [ 696.620319][ T9268] bond0 (unregistering): Released all slaves [ 696.635258][ T9268] bond1 (unregistering): Released all slaves [ 696.669902][ T9268] bond2 (unregistering): Released all slaves [ 697.050881][T15556] lo: entered allmulticast mode [ 697.069447][ T9268] tipc: Left network mode [ 697.157321][T15556] lo: left allmulticast mode [ 697.767192][ T3395] netdevsim netdevsim6 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.772695][ T3395] netdevsim netdevsim6 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.772768][ T3395] netdevsim netdevsim6 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.009296][T15571] fuse: fd is not a fuse device [ 698.916392][T14770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 699.085977][T14770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.102184][T14770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 699.403543][T14770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.420034][T14770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 699.596250][T14770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.664574][T14770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 700.460019][T14770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.747336][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3102'. [ 702.389021][ T5746] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 702.617025][ T5746] usb 2-1: Using ep0 maxpacket: 16 [ 702.617925][ T5746] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 702.619150][ T5746] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 702.619178][ T5746] usb 2-1: config 0 has no interface number 0 [ 702.627467][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.627496][ T5746] usb 2-1: Product: syz [ 702.627511][ T5746] usb 2-1: Manufacturer: syz [ 702.627527][ T5746] usb 2-1: SerialNumber: syz [ 702.652244][ T5746] usb 2-1: config 0 descriptor?? [ 702.672686][ T5746] rndis_host 2-1:0.180: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 702.913855][ T5746] usb 2-1: USB disconnect, device number 15 [ 703.311766][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 703.603838][T12776] Bluetooth: hci0: command 0x0406 tx timeout [ 704.410340][T15693] FAULT_INJECTION: forcing a failure. [ 704.410340][T15693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.410388][T15693] CPU: 0 UID: 0 PID: 15693 Comm: syz.7.3113 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 704.410422][T15693] Tainted: [L]=SOFTLOCKUP [ 704.410432][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 704.410445][T15693] Call Trace: [ 704.410455][T15693] [ 704.410466][T15693] dump_stack_lvl+0xe8/0x150 [ 704.410510][T15693] should_fail_ex+0x46b/0x600 [ 704.410553][T15693] _copy_to_user+0x31/0xb0 [ 704.410580][T15693] rng_dev_read+0x3ed/0x7c0 [ 704.410708][T15693] ? __pfx_rng_dev_read+0x10/0x10 [ 704.410741][T15693] ? bpf_lsm_file_permission+0x9/0x20 [ 704.410771][T15693] ? security_file_permission+0x75/0x260 [ 704.410818][T15693] ? rw_verify_area+0x250/0x4d0 [ 704.410850][T15693] ? __pfx_rng_dev_read+0x10/0x10 [ 704.410876][T15693] vfs_read+0x219/0xa90 [ 704.410917][T15693] ? __pfx_vfs_read+0x10/0x10 [ 704.410950][T15693] ? __fget_files+0x2a/0x420 [ 704.410980][T15693] ? __fget_files+0x2a/0x420 [ 704.411007][T15693] ? __fget_files+0x3a8/0x420 [ 704.411036][T15693] ? __fget_files+0x2a/0x420 [ 704.411074][T15693] ksys_read+0x156/0x270 [ 704.411106][T15693] ? __pfx_ksys_read+0x10/0x10 [ 704.411151][T15693] do_syscall_64+0x166/0x520 [ 704.411185][T15693] ? trace_irq_disable+0x3b/0x140 [ 704.411215][T15693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.411238][T15693] ? clear_bhb_loop+0x70/0xc0 [ 704.411268][T15693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.411293][T15693] RIP: 0033:0x7fda4d7be559 [ 704.411316][T15693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.411337][T15693] RSP: 002b:00007fda4ba16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.411363][T15693] RAX: ffffffffffffffda RBX: 00007fda4da45fa0 RCX: 00007fda4d7be559 [ 704.411381][T15693] RDX: 0000000000002020 RSI: 0000200000001bc0 RDI: 0000000000000004 [ 704.411397][T15693] RBP: 00007fda4d8558b0 R08: 0000000000000000 R09: 0000000000000000 [ 704.411413][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.411427][T15693] R13: 00007fda4da46038 R14: 00007fda4da45fa0 R15: 00007ffcedf96ec8 [ 704.411471][T15693] [ 705.074127][T15696] 9p: Bad value for 'wfdno' [ 706.301671][T15023] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 706.591063][T15023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.625922][T15023] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 706.727286][T15023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.745875][T15023] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 706.833350][T15023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.952913][T15023] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 706.999826][T15023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.454421][ T5600] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 707.454457][ T5600] CPU: 1 UID: 0 PID: 5600 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 707.454494][ T5600] Tainted: [L]=SOFTLOCKUP [ 707.454503][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 707.454520][ T5600] Workqueue: hci5 hci_rx_work [ 707.454662][ T5600] Call Trace: [ 707.454673][ T5600] [ 707.454684][ T5600] dump_stack_lvl+0xe8/0x150 [ 707.454726][ T5600] sysfs_create_dir_ns+0x271/0x2a0 [ 707.454765][ T5600] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 707.454807][ T5600] ? rt_spin_unlock+0x165/0x200 [ 707.454840][ T5600] kobject_add_internal+0x62c/0xce0 [ 707.454877][ T5600] kobject_add+0x163/0x240 [ 707.454897][ T5600] ? rt_spin_unlock+0x159/0x200 [ 707.454928][ T5600] ? __pfx_kobject_add+0x10/0x10 [ 707.454960][ T5600] ? get_device_parent+0x370/0x3a0 [ 707.454995][ T5600] device_add+0x3fa/0xb80 [ 707.455026][ T5600] hci_conn_add_sysfs+0xd5/0x210 [ 707.455124][ T5600] le_conn_complete_evt+0xfe3/0x16d0 [ 707.455198][ T5600] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 707.455231][ T5600] ? rt_mutex_slowunlock+0x219/0x460 [ 707.455255][ T5600] ? skb_pull_data+0xf0/0x200 [ 707.455294][ T5600] hci_le_enh_conn_complete_evt+0x189/0x490 [ 707.455325][ T5600] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 707.455362][ T5600] hci_event_packet+0x67a/0xf10 [ 707.455399][ T5600] ? reacquire_held_locks+0x117/0x1a0 [ 707.455441][ T5600] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 707.455471][ T5600] ? __pfx_hci_event_packet+0x10/0x10 [ 707.455495][ T5600] ? rt_spin_unlock+0x159/0x200 [ 707.455534][ T5600] ? hci_send_to_monitor+0xe2/0x590 [ 707.455574][ T5600] hci_rx_work+0x3ee/0x1020 [ 707.455610][ T5600] ? process_scheduled_works+0x97a/0x1630 [ 707.455643][ T5600] process_scheduled_works+0xc3d/0x1630 [ 707.455715][ T5600] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.455759][ T5600] ? assign_work+0x3cf/0x5d0 [ 707.455799][ T5600] worker_thread+0xa47/0xfb0 [ 707.455869][ T5600] kthread+0x38b/0x470 [ 707.455895][ T5600] ? __pfx_worker_thread+0x10/0x10 [ 707.455927][ T5600] ? __pfx_kthread+0x10/0x10 [ 707.455955][ T5600] ret_from_fork+0x514/0xb70 [ 707.455986][ T5600] ? __pfx_ret_from_fork+0x10/0x10 [ 707.456012][ T5600] ? __switch_to+0xc89/0x1420 [ 707.456068][ T5600] ? __pfx_kthread+0x10/0x10 [ 707.456095][ T5600] ret_from_fork_asm+0x1a/0x30 [ 707.456138][ T5600] [ 707.456175][ T5600] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 707.456226][ T5600] Bluetooth: hci5: failed to register connection device [ 708.590286][T15727] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 708.590430][T15727] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 708.843496][T15727] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 709.240281][T15727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 709.240388][T15727] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 709.415373][T15727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.415501][T15727] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 709.477942][ T5249] 8021q: adding VLAN 0 to HW filter on device eth14 [ 709.712806][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 709.712831][ T36] audit: type=1326 audit(1792150204.765:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.712962][ T36] audit: type=1326 audit(1792150204.765:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751648][ T36] audit: type=1326 audit(1792150204.775:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751704][ T36] audit: type=1326 audit(1792150204.775:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751747][ T36] audit: type=1326 audit(1792150204.775:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751791][ T36] audit: type=1326 audit(1792150204.775:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751834][ T36] audit: type=1326 audit(1792150204.775:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751878][ T36] audit: type=1326 audit(1792150204.775:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751921][ T36] audit: type=1326 audit(1792150204.785:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 709.751965][ T36] audit: type=1326 audit(1792150204.785:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x7ffc0000 [ 710.098339][T15727] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 710.290017][ T9268] hsr_slave_0: left promiscuous mode [ 710.318697][ T9268] hsr_slave_1: left promiscuous mode [ 710.320387][T15727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.320548][T15727] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 710.471688][T15727] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 710.592660][ T9268] veth1_macvtap: left promiscuous mode [ 710.592818][ T9268] veth0_macvtap: left promiscuous mode [ 710.593134][ T9268] veth1_vlan: left promiscuous mode [ 710.593345][ T9268] veth0_vlan: left promiscuous mode [ 710.606989][ T5600] Bluetooth: hci5: command 0x0406 tx timeout [ 711.476889][T12776] Bluetooth: hci0: command 0x0406 tx timeout [ 711.477001][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.564514][T12776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.716340][T12776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.741837][T12776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.744781][T12776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.747101][T12776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.341646][T15776] netlink: 'syz.1.3133': attribute type 4 has an invalid length. [ 712.398215][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 712.677665][ T5600] Bluetooth: hci5: command 0x0406 tx timeout [ 713.192946][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3137'. [ 713.557212][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 714.147575][ T5600] Bluetooth: hci3: command tx timeout [ 714.355958][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3137'. [ 714.443107][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 714.771764][ T5600] Bluetooth: hci5: command 0x0406 tx timeout [ 715.062291][T12776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 715.199823][T12776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 715.215398][T12776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 715.215666][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 715.277064][T12776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 715.292435][T12776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.661262][T15763] rxe_eth0 speed is unknown, defaulting to 1000 [ 716.092271][T15023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.204540][ T5600] Bluetooth: hci3: command tx timeout [ 716.264959][T15023] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.283837][T15652] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.283922][T15652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.496307][T15652] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.496465][T15652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.525820][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 717.635550][ T5249] 8021q: adding VLAN 0 to HW filter on device eth15 [ 717.637024][ T5600] Bluetooth: hci0: command tx timeout [ 718.276966][ T5600] Bluetooth: hci3: command tx timeout [ 719.286937][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 719.508858][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.519054][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.519083][ T9] usb 2-1: Product: syz [ 719.519100][ T9] usb 2-1: Manufacturer: syz [ 719.519115][ T9] usb 2-1: SerialNumber: syz [ 719.530838][ T9] usb 2-1: config 0 descriptor?? [ 719.729007][ T5600] Bluetooth: hci0: command tx timeout [ 719.819840][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.356844][ T5600] Bluetooth: hci3: command tx timeout [ 720.520749][ T5249] 8021q: adding VLAN 0 to HW filter on device eth16 [ 720.631994][T15801] rxe_eth0 speed is unknown, defaulting to 1000 [ 721.062257][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 721.251173][ T9] usb 2-1: USB disconnect, device number 16 [ 721.797478][ T5600] Bluetooth: hci0: command tx timeout [ 722.913455][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'. [ 723.748402][T15023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.877250][ T5600] Bluetooth: hci0: command tx timeout [ 724.382600][T15763] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.382835][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.383049][T15763] bridge_slave_0: entered allmulticast mode [ 724.415982][T15763] bridge_slave_0: entered promiscuous mode [ 724.452920][T15763] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.453321][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.453503][T15763] bridge_slave_1: entered allmulticast mode [ 724.456083][T15763] bridge_slave_1: entered promiscuous mode [ 724.859670][T15763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.906217][T15763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.483208][T12776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.602174][T12776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.604824][T12776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.606039][T12776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.607034][T12776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.768904][T15763] team0: Port device team_slave_0 added [ 727.579332][T15763] team0: Port device team_slave_1 added [ 727.956972][ T5600] Bluetooth: hci2: command tx timeout [ 728.134704][T16028] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 728.196206][T15763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.196228][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.196260][T15763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.650154][T15763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.650177][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.650208][T15763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.067301][T15801] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.067528][T15801] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.067751][T15801] bridge_slave_0: entered allmulticast mode [ 729.070841][T15801] bridge_slave_0: entered promiscuous mode [ 729.119971][T15763] hsr_slave_0: entered promiscuous mode [ 729.124699][T15763] hsr_slave_1: entered promiscuous mode [ 729.129306][T15763] debugfs: 'hsr0' already exists in 'hsr' [ 729.129402][T15763] Cannot create hsr debugfs directory [ 729.147242][T15988] rxe_eth0 speed is unknown, defaulting to 1000 [ 729.155999][T15801] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.156145][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.156359][T15801] bridge_slave_1: entered allmulticast mode [ 729.186375][T15801] bridge_slave_1: entered promiscuous mode [ 729.345355][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 729.345376][ T36] audit: type=1326 audit(1792150224.395:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.1.3187" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 729.346382][ T36] audit: type=1326 audit(1792150224.395:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.1.3187" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 729.409029][ T36] audit: type=1326 audit(1792150224.455:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.1.3187" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 729.409074][ T36] audit: type=1326 audit(1792150224.455:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.1.3187" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 729.409104][ T36] audit: type=1326 audit(1792150224.455:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.1.3187" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 730.040796][ T5600] Bluetooth: hci2: command tx timeout [ 730.075085][ T9268] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.299549][T15801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.359917][T15801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.324738][ T9268] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.871199][T15801] team0: Port device team_slave_0 added [ 732.034705][T15801] team0: Port device team_slave_1 added [ 732.138491][ T5600] Bluetooth: hci2: command tx timeout [ 732.533844][ T9268] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.637884][ T5249] 8021q: adding VLAN 0 to HW filter on device eth17 [ 732.638626][T16086] tipc: Started in network mode [ 732.638659][T16086] tipc: Node identity ac1414aa, cluster identity 4711 [ 732.639040][T16086] tipc: New replicast peer: 172.20.20.187 [ 732.771171][T16086] tipc: Enabled bearer , priority 10 [ 732.823507][T15801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.823528][T15801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.823550][T15801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.946392][T15801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.946416][T15801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.946449][T15801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.004336][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.005258][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.006308][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.010455][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.020673][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.132859][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.133794][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.165835][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.167778][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.169898][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.362333][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.364404][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.366205][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.368277][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.369080][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.435033][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.460418][ T9268] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.461322][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.465218][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.520430][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.576135][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.577404][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.580379][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.589034][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.622479][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.624966][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.650893][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.652869][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.656274][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.691141][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.692060][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.693659][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.694553][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.695523][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.696583][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.700228][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.701433][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.702650][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.703822][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.705067][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.706504][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.711414][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.712677][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.713845][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.715177][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.716351][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.720495][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.728201][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.734980][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.738628][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.745285][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.747553][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.780493][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.782270][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.783841][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.785326][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.790996][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.927440][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.929209][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 733.947360][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 734.008134][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 734.012274][T16094] 9pnet_fd: p9_fd_create_tcp (16094): problem connecting socket to 127.0.0.1 [ 734.114014][T11353] tipc: Node number set to 2886997162 [ 734.205113][ T5600] Bluetooth: hci2: command tx timeout [ 734.662907][T15801] hsr_slave_0: entered promiscuous mode [ 734.665257][T15801] hsr_slave_1: entered promiscuous mode [ 734.665859][T15801] debugfs: 'hsr0' already exists in 'hsr' [ 734.681286][T15801] Cannot create hsr debugfs directory [ 736.298673][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 736.493198][ T36] audit: type=1326 audit(1792150231.545:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16122 comm="syz.0.3207" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff757cfe559 code=0x0 [ 737.799890][ T5249] 8021q: adding VLAN 0 to HW filter on device eth18 [ 739.147497][ T9268] bridge_slave_1: left allmulticast mode [ 739.147543][ T9268] bridge_slave_1: left promiscuous mode [ 739.148022][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.351759][ T9268] bridge_slave_0: left allmulticast mode [ 739.351813][ T9268] bridge_slave_0: left promiscuous mode [ 739.352120][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.823097][ T9268] bridge_slave_1: left allmulticast mode [ 739.823141][ T9268] bridge_slave_1: left promiscuous mode [ 739.823420][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.896932][T16172] overlayfs: failed to clone upperpath [ 740.057293][ T9268] bridge_slave_0: left allmulticast mode [ 740.057339][ T9268] bridge_slave_0: left promiscuous mode [ 740.057543][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.133568][ T9268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.198928][ T9268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.226527][T16182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.241963][ T9268] bond0 (unregistering): Released all slaves [ 741.333508][T16183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.021019][ T9268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.097771][ T9268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.140064][ T9268] bond0 (unregistering): Released all slaves [ 744.666225][T15988] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.666387][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.666588][T15988] bridge_slave_0: entered allmulticast mode [ 744.703188][T15988] bridge_slave_0: entered promiscuous mode [ 744.751983][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.752113][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.752311][T15988] bridge_slave_1: entered allmulticast mode [ 744.778062][T15988] bridge_slave_1: entered promiscuous mode [ 744.784002][ T5249] 8021q: adding VLAN 0 to HW filter on device eth19 [ 745.490281][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.654483][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 745.908584][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.584780][T15651] netdevsim netdevsim7 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.604121][T15988] team0: Port device team_slave_0 added [ 746.698434][T15988] team0: Port device team_slave_1 added [ 746.699915][T15763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 746.877069][T15763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.880663][T16236] FAULT_INJECTION: forcing a failure. [ 746.880663][T16236] name fail_futex, interval 1, probability 0, space 0, times 0 [ 746.880703][T16236] CPU: 1 UID: 0 PID: 16236 Comm: syz.1.3236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 746.880729][T16236] Tainted: [L]=SOFTLOCKUP [ 746.880737][T16236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 746.880748][T16236] Call Trace: [ 746.880757][T16236] [ 746.880767][T16236] dump_stack_lvl+0xe8/0x150 [ 746.880820][T16236] should_fail_ex+0x46b/0x600 [ 746.880857][T16236] get_futex_key+0x8e2/0x1580 [ 746.880900][T16236] ? __pfx_get_futex_key+0x10/0x10 [ 746.880946][T16236] futex_wake+0x119/0x600 [ 746.880974][T16236] ? __pfx_futex_wake+0x10/0x10 [ 746.880995][T16236] ? do_raw_spin_lock+0x12b/0x2f0 [ 746.881035][T16236] do_futex+0x458/0x4e0 [ 746.881060][T16236] ? __pfx_do_futex+0x10/0x10 [ 746.881085][T16236] ? __might_fault+0xaf/0x130 [ 746.881131][T16236] mm_exit_exec_release+0x10d/0x290 [ 746.881161][T16236] exit_mm+0x50/0x240 [ 746.881185][T16236] do_exit+0x6cd/0x2360 [ 746.881205][T16236] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 746.881241][T16236] ? __pfx_do_exit+0x10/0x10 [ 746.881261][T16236] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 746.881292][T16236] ? rt_spin_unlock+0x159/0x200 [ 746.881317][T16236] do_group_exit+0x22d/0x2f0 [ 746.881338][T16236] ? rt_spin_unlock+0x165/0x200 [ 746.881362][T16236] get_signal+0x121b/0x12c0 [ 746.881408][T16236] arch_do_signal_or_restart+0xbb/0x860 [ 746.881441][T16236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.881475][T16236] ? ksys_write+0x248/0x270 [ 746.881510][T16236] exit_to_user_mode_loop+0x10e/0x770 [ 746.881536][T16236] ? rcu_is_watching+0x16/0xb0 [ 746.881559][T16236] do_syscall_64+0x328/0x520 [ 746.881584][T16236] ? trace_irq_disable+0x3b/0x140 [ 746.881610][T16236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.881630][T16236] ? clear_bhb_loop+0x70/0xc0 [ 746.881653][T16236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.881671][T16236] RIP: 0033:0x7f7cdbcbe559 [ 746.881690][T16236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.881705][T16236] RSP: 002b:00007f7cd9f160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 746.881726][T16236] RAX: fffffffffffffe00 RBX: 00007f7cdbf45fa8 RCX: 00007f7cdbcbe559 [ 746.881740][T16236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7cdbf45fa8 [ 746.881752][T16236] RBP: 00007f7cdbf45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 746.881763][T16236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.881774][T16236] R13: 00007f7cdbf46038 R14: 00007ffcfc90e2c0 R15: 00007ffcfc90e3a8 [ 746.881815][T16236] [ 747.192785][T15763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 747.245619][T15763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 747.361165][T15763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 747.447038][T15763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 747.711410][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.711431][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.711464][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.712856][T15763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 747.765350][T16246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.831918][T15763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 747.863398][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.863421][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.863454][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.254560][T16242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.271043][T16256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3240'. [ 748.343154][T16260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3240'. [ 749.181624][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 749.523041][ T5249] 8021q: adding VLAN 0 to HW filter on device eth20 [ 749.765399][T15988] hsr_slave_0: entered promiscuous mode [ 749.780873][T15988] hsr_slave_1: entered promiscuous mode [ 749.782075][T15988] debugfs: 'hsr0' already exists in 'hsr' [ 749.782105][T15988] Cannot create hsr debugfs directory [ 749.985475][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3246'. [ 750.119681][ T9268] hsr_slave_0: left promiscuous mode [ 750.143679][T16292] FAULT_INJECTION: forcing a failure. [ 750.143679][T16292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.143724][T16292] CPU: 0 UID: 0 PID: 16292 Comm: syz.1.3247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 750.143757][T16292] Tainted: [L]=SOFTLOCKUP [ 750.143766][T16292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 750.143780][T16292] Call Trace: [ 750.143791][T16292] [ 750.143811][T16292] dump_stack_lvl+0xe8/0x150 [ 750.143855][T16292] should_fail_ex+0x46b/0x600 [ 750.143899][T16292] _copy_to_user+0x31/0xb0 [ 750.143928][T16292] bpf_verifier_vlog+0x52a/0x900 [ 750.143976][T16292] btf_verifier_log+0x11d/0x1a0 [ 750.144010][T16292] ? __pfx_btf_verifier_log+0x10/0x10 [ 750.144054][T16292] btf_enum_check_meta+0xc7e/0xdc0 [ 750.144103][T16292] btf_check_all_metas+0x344/0xa30 [ 750.144143][T16292] btf_parse_type_sec+0xfb/0x1950 [ 750.144178][T16292] ? __pfx___btf_verifier_log+0x10/0x10 [ 750.144211][T16292] ? __pfx_btf_check_sec_info+0x10/0x10 [ 750.144247][T16292] ? btf_parse_hdr+0x5f2/0x810 [ 750.144271][T16292] ? btf_parse_str_sec+0x244/0x2f0 [ 750.144301][T16292] btf_new_fd+0x3e0/0x8f0 [ 750.144329][T16292] __sys_bpf+0xd2e/0xd90 [ 750.144373][T16292] ? __pfx___sys_bpf+0x10/0x10 [ 750.144405][T16292] ? __lock_acquire+0x747/0x2de0 [ 750.144442][T16292] ? do_futex+0x3e7/0x4e0 [ 750.144502][T16292] ? rcu_is_watching+0x16/0xb0 [ 750.144536][T16292] __x64_sys_bpf+0xba/0xd0 [ 750.144573][T16292] do_syscall_64+0x166/0x520 [ 750.144608][T16292] ? trace_irq_disable+0x3b/0x140 [ 750.144639][T16292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.144663][T16292] ? clear_bhb_loop+0x70/0xc0 [ 750.144692][T16292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.144716][T16292] RIP: 0033:0x7f7cdbcbe559 [ 750.144739][T16292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.144760][T16292] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 750.144789][T16292] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 750.144815][T16292] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 750.144831][T16292] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 750.144846][T16292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.144861][T16292] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 750.144900][T16292] [ 750.397225][ T9268] hsr_slave_1: left promiscuous mode [ 750.398648][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.459988][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.800922][ T9268] hsr_slave_0: left promiscuous mode [ 750.831867][ T9268] hsr_slave_1: left promiscuous mode [ 750.833438][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.833466][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.869764][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.869796][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.259841][ T9268] veth1_macvtap: left promiscuous mode [ 751.259964][ T9268] veth0_macvtap: left promiscuous mode [ 751.260393][ T9268] veth0_vlan: left promiscuous mode [ 752.187706][ T9268] team0 (unregistering): Port device team_slave_1 removed [ 752.227896][ T9268] team0 (unregistering): Port device team_slave_0 removed [ 752.606440][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.606521][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.299007][ T9268] team0 (unregistering): Port device team_slave_1 removed [ 753.341110][ T9268] team0 (unregistering): Port device team_slave_0 removed [ 754.246517][T15801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 754.352282][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.429903][T15801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 754.513971][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.568638][T15801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 754.809495][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.833001][T15801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 754.924550][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.159223][T16362] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 755.992984][T15763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.339355][T15763] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.375628][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.377087][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.456936][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 757.465108][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.465318][T15651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.665448][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 757.779710][ T9] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 757.779746][ T9] usb 2-1: Product: syz [ 757.803488][ T9] usb 2-1: config 0 descriptor?? [ 757.808709][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 757.814224][ T9] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 758.146648][T15801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.190428][T11353] usb 2-1: USB disconnect, device number 17 [ 758.193435][T11353] ftdi_sio 2-1:0.0: device disconnected [ 758.959963][T15801] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.992518][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.993397][ T9265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.192716][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.192950][T15650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.285047][T15654] netdevsim netdevsim7 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.798619][ T9268] bridge_slave_1: left allmulticast mode [ 760.798662][ T9268] bridge_slave_1: left promiscuous mode [ 760.798964][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.979330][ T9268] bridge_slave_0: left allmulticast mode [ 760.979360][ T9268] bridge_slave_0: left promiscuous mode [ 760.979533][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.016276][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 761.264771][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880614dd400: rx timeout, send abort [ 761.751488][ T36] audit: type=1326 audit(1792150256.805:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.753058][ T36] audit: type=1326 audit(1792150256.805:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.753116][ T36] audit: type=1326 audit(1792150256.805:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.753170][ T36] audit: type=1326 audit(1792150256.805:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.753222][ T36] audit: type=1326 audit(1792150256.805:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.753449][ T36] audit: type=1326 audit(1792150256.805:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.754040][ T36] audit: type=1326 audit(1792150256.805:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.754095][ T36] audit: type=1326 audit(1792150256.805:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.754144][ T36] audit: type=1326 audit(1792150256.805:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.754198][ T36] audit: type=1326 audit(1792150256.805:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.1.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 761.764853][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880614dd400: abort rx timeout. Force session deactivation [ 761.764967][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880614de800: rx timeout, send abort [ 762.237883][ T9268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.265036][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880614de800: abort rx timeout. Force session deactivation [ 762.307976][ T9268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.330869][ T9268] bond0 (unregistering): Released all slaves [ 762.878832][T15644] netdevsim netdevsim7 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.215670][T15763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.326209][T15648] netdevsim netdevsim7 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.942264][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 766.942289][ T36] audit: type=1326 audit(1792150261.985:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 766.942347][ T36] audit: type=1326 audit(1792150261.985:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 766.942492][ T36] audit: type=1326 audit(1792150261.985:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 766.942546][ T36] audit: type=1326 audit(1792150261.985:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 766.942597][ T36] audit: type=1326 audit(1792150261.985:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 766.942647][ T36] audit: type=1326 audit(1792150261.985:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 767.009223][ T36] audit: type=1326 audit(1792150262.065:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cdbc7ed8e code=0x7ffc0000 [ 767.015333][ T36] audit: type=1326 audit(1792150262.065:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cdbc7ed8e code=0x7ffc0000 [ 767.018618][ T36] audit: type=1326 audit(1792150262.075:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cdbc7ed8e code=0x7ffc0000 [ 767.020576][ T36] audit: type=1326 audit(1792150262.075:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16546 comm="syz.1.3297" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cdbc7ed8e code=0x7ffc0000 [ 767.147409][T15801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.194609][T15988] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 767.351035][T15988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.369429][T15988] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 767.533851][T15988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.657777][T15988] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 767.834931][T15988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.877046][T15988] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 768.019886][T15988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.071658][T16560] FAULT_INJECTION: forcing a failure. [ 768.071658][T16560] name failslab, interval 1, probability 0, space 0, times 0 [ 768.071686][T16560] CPU: 1 UID: 0 PID: 16560 Comm: syz.1.3299 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.071706][T16560] Tainted: [L]=SOFTLOCKUP [ 768.071712][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 768.071721][T16560] Call Trace: [ 768.071727][T16560] [ 768.071734][T16560] dump_stack_lvl+0xe8/0x150 [ 768.071763][T16560] should_fail_ex+0x46b/0x600 [ 768.071789][T16560] should_failslab+0xa8/0x100 [ 768.071806][T16560] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 768.071828][T16560] ? kobject_set_name_vargs+0x61/0x110 [ 768.071842][T16560] ? kobject_set_name_vargs+0x61/0x110 [ 768.071860][T16560] kvasprintf+0xeb/0x1a0 [ 768.071877][T16560] ? __pfx_kvasprintf+0x10/0x10 [ 768.071893][T16560] ? rcu_is_watching+0x16/0xb0 [ 768.071907][T16560] ? kfree+0x4d/0x6d0 [ 768.071927][T16560] ? kvasprintf_const+0xe1/0x240 [ 768.071943][T16560] kobject_set_name_vargs+0x61/0x110 [ 768.071958][T16560] dev_set_name+0xe2/0x140 [ 768.072045][T16560] ? __pfx_dev_set_name+0x10/0x10 [ 768.072066][T16560] ? nfc_allocate_device+0x129/0x560 [ 768.072107][T16560] ? nfc_allocate_device+0x129/0x560 [ 768.072130][T16560] nfc_allocate_device+0x1d6/0x560 [ 768.072152][T16560] nci_allocate_device+0x1da/0x380 [ 768.072183][T16560] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 768.072242][T16560] virtual_ncidev_open+0x75/0x190 [ 768.072298][T16560] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 768.072319][T16560] misc_open+0x2de/0x350 [ 768.072359][T16560] chrdev_open+0x4dc/0x600 [ 768.072374][T16560] ? __pfx_chrdev_open+0x10/0x10 [ 768.072388][T16560] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 768.072413][T16560] ? __pfx_chrdev_open+0x10/0x10 [ 768.072427][T16560] do_dentry_open+0x849/0x1420 [ 768.072448][T16560] vfs_open+0x3b/0x350 [ 768.072461][T16560] ? path_openat+0x142d/0x1d60 [ 768.072482][T16560] path_openat+0x1448/0x1d60 [ 768.072514][T16560] do_file_open+0x23e/0x4a0 [ 768.072536][T16560] ? __pfx_do_file_open+0x10/0x10 [ 768.072571][T16560] ? alloc_fd+0x654/0x6d0 [ 768.072594][T16560] do_sys_openat2+0x115/0x200 [ 768.072610][T16560] ? __se_sys_futex+0x3a8/0x450 [ 768.072626][T16560] ? __pfx_do_sys_openat2+0x10/0x10 [ 768.072642][T16560] ? __pfx___se_sys_futex+0x10/0x10 [ 768.072662][T16560] __x64_sys_openat+0x138/0x170 [ 768.072680][T16560] do_syscall_64+0x166/0x520 [ 768.072698][T16560] ? trace_irq_disable+0x3b/0x140 [ 768.072717][T16560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.072731][T16560] ? clear_bhb_loop+0x70/0xc0 [ 768.072750][T16560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.072765][T16560] RIP: 0033:0x7f7cdbcbe559 [ 768.072779][T16560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.072792][T16560] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 768.072809][T16560] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 768.072820][T16560] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 768.072830][T16560] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 768.072839][T16560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.072848][T16560] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 768.072870][T16560] [ 768.525142][ T9268] hsr_slave_0: left promiscuous mode [ 768.566895][ T9268] hsr_slave_1: left promiscuous mode [ 768.569206][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.606561][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.148440][ T9268] team0 (unregistering): Port device team_slave_1 removed [ 769.200591][ T9268] team0 (unregistering): Port device team_slave_0 removed [ 770.198132][T15763] veth0_vlan: entered promiscuous mode [ 770.403799][T15763] veth1_vlan: entered promiscuous mode [ 770.818963][T15801] veth0_vlan: entered promiscuous mode [ 771.009661][T15801] veth1_vlan: entered promiscuous mode [ 771.128501][T15763] veth0_macvtap: entered promiscuous mode [ 771.168079][T15763] veth1_macvtap: entered promiscuous mode [ 771.191702][T15988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.328048][T15988] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.329796][T15801] veth0_macvtap: entered promiscuous mode [ 771.540268][T15654] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.540421][T15654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.545684][T15801] veth1_macvtap: entered promiscuous mode [ 771.664297][T15644] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.664509][T15644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.981615][T15801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.138798][T15801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.329065][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 772.329104][T16620] netlink: 'syz.0.3309': attribute type 6 has an invalid length. [ 772.394527][T16620] @: entered promiscuous mode [ 772.397699][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 772.397745][T16620] netlink: 'syz.0.3309': attribute type 6 has an invalid length. [ 772.692249][T12776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 772.883791][T12776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 772.896051][T12776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 772.908989][T12776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 772.910391][T12776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 773.583676][T16631] FAULT_INJECTION: forcing a failure. [ 773.583676][T16631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.583718][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.1.3311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 773.583751][T16631] Tainted: [L]=SOFTLOCKUP [ 773.583759][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 773.583773][T16631] Call Trace: [ 773.583793][T16631] [ 773.583803][T16631] dump_stack_lvl+0xe8/0x150 [ 773.583842][T16631] should_fail_ex+0x46b/0x600 [ 773.583883][T16631] _copy_to_user+0x31/0xb0 [ 773.583910][T16631] inotify_read+0x350/0xbf0 [ 773.583947][T16631] ? __pfx_inotify_read+0x10/0x10 [ 773.583976][T16631] ? __pfx_woken_wake_function+0x10/0x10 [ 773.584008][T16631] ? bpf_lsm_file_permission+0x9/0x20 [ 773.584035][T16631] ? security_file_permission+0x75/0x260 [ 773.584070][T16631] ? rw_verify_area+0x250/0x4d0 [ 773.584103][T16631] vfs_readv+0x588/0x850 [ 773.584127][T16631] ? __pfx_inotify_read+0x10/0x10 [ 773.584158][T16631] ? __pfx_vfs_readv+0x10/0x10 [ 773.584196][T16631] ? __fget_files+0x2a/0x420 [ 773.584227][T16631] ? __fget_files+0x3a8/0x420 [ 773.584251][T16631] ? __fget_files+0x2a/0x420 [ 773.584284][T16631] do_readv+0x15a/0x2e0 [ 773.584308][T16631] ? __pfx_do_readv+0x10/0x10 [ 773.584342][T16631] do_syscall_64+0x166/0x520 [ 773.584372][T16631] ? trace_irq_disable+0x3b/0x140 [ 773.584401][T16631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.584424][T16631] ? clear_bhb_loop+0x70/0xc0 [ 773.584450][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.584471][T16631] RIP: 0033:0x7f7cdbcbe559 [ 773.584492][T16631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.584511][T16631] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 773.584536][T16631] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 773.584554][T16631] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 773.584571][T16631] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 773.584586][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.584599][T16631] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 773.584634][T16631] [ 773.656268][T15650] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.669313][T15644] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.040316][T15644] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.055872][T15623] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.114410][ T5249] 8021q: adding VLAN 0 to HW filter on device eth21 [ 775.183330][ T5600] Bluetooth: hci1: command tx timeout [ 775.972549][T12776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 776.034121][T12776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 776.043889][T12776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 776.116225][T12776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 776.129092][T12776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 777.240866][ T5600] Bluetooth: hci1: command tx timeout [ 778.596898][ T5600] Bluetooth: hci3: command tx timeout [ 778.622692][T16710] FAULT_INJECTION: forcing a failure. [ 778.622692][T16710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.622728][T16710] CPU: 0 UID: 0 PID: 16710 Comm: syz.1.3324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 778.622754][T16710] Tainted: [L]=SOFTLOCKUP [ 778.622761][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 778.622772][T16710] Call Trace: [ 778.622779][T16710] [ 778.622789][T16710] dump_stack_lvl+0xe8/0x150 [ 778.622828][T16710] should_fail_ex+0x46b/0x600 [ 778.622869][T16710] _copy_from_user+0x2d/0xb0 [ 778.622894][T16710] copy_from_bpfptr+0x5c/0x90 [ 778.622929][T16710] bpf_prog_load+0xcdb/0x1c20 [ 778.622966][T16710] ? __pfx_bpf_prog_load+0x10/0x10 [ 778.623015][T16710] __sys_bpf+0xd0d/0xd90 [ 778.623057][T16710] ? __pfx___sys_bpf+0x10/0x10 [ 778.623094][T16710] ? do_futex+0x3e7/0x4e0 [ 778.623159][T16710] ? rcu_is_watching+0x16/0xb0 [ 778.623188][T16710] __x64_sys_bpf+0xba/0xd0 [ 778.623222][T16710] do_syscall_64+0x166/0x520 [ 778.623253][T16710] ? trace_irq_disable+0x3b/0x140 [ 778.623283][T16710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.623305][T16710] ? clear_bhb_loop+0x70/0xc0 [ 778.623330][T16710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.623352][T16710] RIP: 0033:0x7f7cdbcbe559 [ 778.623372][T16710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.623390][T16710] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.623416][T16710] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 778.623433][T16710] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 778.623448][T16710] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 778.623463][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.623477][T16710] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 778.623515][T16710] [ 778.944139][T16619] rxe_eth0 speed is unknown, defaulting to 1000 [ 779.317967][ T5600] Bluetooth: hci1: command tx timeout [ 780.677058][ T5600] Bluetooth: hci3: command tx timeout [ 781.401071][ T5600] Bluetooth: hci1: command tx timeout [ 781.570428][T11353] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 781.756940][T11353] usb 2-1: Using ep0 maxpacket: 16 [ 781.765407][T11353] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 781.771171][T11353] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 781.771211][T11353] usb 2-1: config 0 has no interface number 0 [ 781.771259][T11353] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 781.771287][T11353] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 781.813082][T11353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.813114][T11353] usb 2-1: Product: syz [ 781.813127][T11353] usb 2-1: Manufacturer: syz [ 781.813142][T11353] usb 2-1: SerialNumber: syz [ 781.877605][T11353] usb 2-1: config 0 descriptor?? [ 781.885227][T16750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 781.885370][T16750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.125038][T16750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.125346][T16750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.328652][T11353] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 782.760530][T12776] Bluetooth: hci3: command tx timeout [ 783.690908][T11353] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 783.690948][T11353] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 783.691249][T11353] asix 2-1:0.34: probe with driver asix failed with error -71 [ 783.755039][T11353] usb 2-1: USB disconnect, device number 18 [ 784.052639][T15988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.283591][T16660] rxe_eth0 speed is unknown, defaulting to 1000 [ 784.836952][T12776] Bluetooth: hci3: command tx timeout [ 785.769116][T16815] FAULT_INJECTION: forcing a failure. [ 785.769116][T16815] name failslab, interval 1, probability 0, space 0, times 0 [ 785.769163][T16815] CPU: 1 UID: 0 PID: 16815 Comm: syz.1.3339 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 785.769209][T16815] Tainted: [L]=SOFTLOCKUP [ 785.769219][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 785.769234][T16815] Call Trace: [ 785.769245][T16815] [ 785.769256][T16815] dump_stack_lvl+0xe8/0x150 [ 785.769297][T16815] should_fail_ex+0x46b/0x600 [ 785.769338][T16815] should_failslab+0xa8/0x100 [ 785.769364][T16815] __kmalloc_cache_noprof+0xa1/0x680 [ 785.769401][T16815] ? init_srcu_struct_fields+0x7f/0xaa0 [ 785.769437][T16815] ? init_srcu_struct_fields+0x7f/0xaa0 [ 785.769481][T16815] init_srcu_struct_fields+0x7f/0xaa0 [ 785.769528][T16815] blk_mq_alloc_tag_set+0x3d6/0x1000 [ 785.769578][T16815] loop_add+0x436/0xb50 [ 785.769720][T16815] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 785.769763][T16815] ? __pfx_loop_add+0x10/0x10 [ 785.769794][T16815] ? errseq_sample+0x40/0x70 [ 785.769847][T16815] ? __pfx_smack_file_ioctl+0x10/0x10 [ 785.769890][T16815] loop_control_ioctl+0x12b/0x5b0 [ 785.769924][T16815] ? __fget_files+0x2a/0x420 [ 785.769954][T16815] ? __pfx_loop_control_ioctl+0x10/0x10 [ 785.769984][T16815] ? __fget_files+0x2a/0x420 [ 785.770018][T16815] ? bpf_lsm_file_ioctl+0x9/0x20 [ 785.770048][T16815] ? __pfx_loop_control_ioctl+0x10/0x10 [ 785.770083][T16815] __se_sys_ioctl+0xff/0x170 [ 785.770121][T16815] do_syscall_64+0x166/0x520 [ 785.770155][T16815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.770180][T16815] ? clear_bhb_loop+0x70/0xc0 [ 785.770218][T16815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.770241][T16815] RIP: 0033:0x7f7cdbcbe559 [ 785.770270][T16815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.770291][T16815] RSP: 002b:00007f7cd9f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.770320][T16815] RAX: ffffffffffffffda RBX: 00007f7cdbf45fa0 RCX: 00007f7cdbcbe559 [ 785.770339][T16815] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 785.770355][T16815] RBP: 00007f7cdbd558b0 R08: 0000000000000000 R09: 0000000000000000 [ 785.770371][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.770387][T16815] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 785.770424][T16815] [ 786.250150][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 786.323355][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 786.350954][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.377429][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.442869][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 788.764595][ T5600] Bluetooth: hci0: command tx timeout [ 789.099344][T16882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3352'. [ 790.437210][T15623] bridge_slave_1: left allmulticast mode [ 790.437255][T15623] bridge_slave_1: left promiscuous mode [ 790.437680][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.589455][T15623] bridge_slave_0: left allmulticast mode [ 790.589501][T15623] bridge_slave_0: left promiscuous mode [ 790.589966][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.836902][ T5600] Bluetooth: hci0: command tx timeout [ 791.809071][T15623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.870480][T15623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.919223][T15623] bond0 (unregistering): Released all slaves [ 791.937207][T16817] rxe_eth0 speed is unknown, defaulting to 1000 [ 792.356434][T16924] bridge0: port 1(vlan2) entered blocking state [ 792.361451][T16924] bridge0: port 1(vlan2) entered disabled state [ 792.361690][T16924] vlan2: entered allmulticast mode [ 792.361707][T16924] geneve0: entered allmulticast mode [ 792.817027][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.817197][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.817415][T16619] bridge_slave_0: entered allmulticast mode [ 792.862271][T16619] bridge_slave_0: entered promiscuous mode [ 792.867196][T16773] netdevsim netdevsim5 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.867254][T16773] netdevsim netdevsim5 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.867290][T16773] netdevsim netdevsim5 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.867326][T16773] netdevsim netdevsim5 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.907832][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.908514][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.908739][T16619] bridge_slave_1: entered allmulticast mode [ 792.916056][T16619] bridge_slave_1: entered promiscuous mode [ 792.918614][ T5600] Bluetooth: hci0: command tx timeout [ 793.333677][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.419230][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.121825][T16619] team0: Port device team_slave_0 added [ 794.241760][T16619] team0: Port device team_slave_1 added [ 794.691781][T16964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3367'. [ 795.002512][ T5600] Bluetooth: hci0: command tx timeout [ 795.298140][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.298163][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.298195][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.501276][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.501300][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.501334][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.877394][T16619] hsr_slave_0: entered promiscuous mode [ 796.882841][T16619] hsr_slave_1: entered promiscuous mode [ 797.110706][T15623] hsr_slave_0: left promiscuous mode [ 797.179692][T15623] hsr_slave_1: left promiscuous mode [ 797.180659][T15623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.219969][T15623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.544034][T15623] veth1_macvtap: left promiscuous mode [ 797.544166][T15623] veth0_macvtap: left promiscuous mode [ 797.602017][T15623] veth1_vlan: left promiscuous mode [ 797.602300][T15623] veth0_vlan: left promiscuous mode [ 797.838577][T17031] netlink: 'syz.1.3375': attribute type 2 has an invalid length. [ 798.898413][T15623] team0 (unregistering): Port device team_slave_1 removed [ 798.942000][T15623] team0 (unregistering): Port device team_slave_0 removed [ 799.699380][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.699583][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.699818][T16660] bridge_slave_0: entered allmulticast mode [ 799.709407][T16660] bridge_slave_0: entered promiscuous mode [ 799.753172][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.753343][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.753515][T16660] bridge_slave_1: entered allmulticast mode [ 799.755318][T16660] bridge_slave_1: entered promiscuous mode [ 800.066081][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.214581][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.847991][T16660] team0: Port device team_slave_0 added [ 801.012237][T16660] team0: Port device team_slave_1 added [ 801.380426][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.380448][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.380478][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.523293][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.523314][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.523340][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.714613][T16619] netdevsim netdevsim5 eth24 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.452622][T16660] hsr_slave_0: entered promiscuous mode [ 803.455216][T16660] hsr_slave_1: entered promiscuous mode [ 803.471571][T16660] debugfs: 'hsr0' already exists in 'hsr' [ 803.471603][T16660] Cannot create hsr debugfs directory [ 803.868178][T16619] netdevsim netdevsim5 eth23 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.149398][T16817] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.149680][T16817] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.149892][T16817] bridge_slave_0: entered allmulticast mode [ 804.153225][T16817] bridge_slave_0: entered promiscuous mode [ 804.232194][T16817] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.232272][T16817] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.232397][T16817] bridge_slave_1: entered allmulticast mode [ 804.240331][T16817] bridge_slave_1: entered promiscuous mode [ 804.794056][T16619] netdevsim netdevsim5 eth22 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.580786][T16817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.263593][T16619] netdevsim netdevsim5 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.372796][T16817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.715482][T16817] team0: Port device team_slave_0 added [ 808.424625][T16817] team0: Port device team_slave_1 added [ 808.677958][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 808.777559][T17150] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 808.921373][ T10] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 808.924715][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 808.924753][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 808.958956][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.958989][ T10] usb 2-1: Product: syz [ 808.959002][ T10] usb 2-1: Manufacturer: syz [ 808.959016][ T10] usb 2-1: SerialNumber: syz [ 809.225212][ T10] usb 2-1: usb_control_msg returned -71 [ 809.225267][ T10] usbtmc 2-1:1.0: can't read capabilities [ 809.225319][ T10] usbtmc 2-1:1.0: Failed to submit iin_urb [ 809.225405][ T10] usbtmc 2-1:1.0: probe with driver usbtmc failed with error -90 [ 809.261664][ T10] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 809.303648][ T10] usb 2-1: USB disconnect, device number 19 [ 809.334250][T17071] udevd[17071]: setting mode of /dev/bus/usb/002/019 to 020664 failed: No such file or directory [ 809.334411][T17071] udevd[17071]: setting owner of /dev/bus/usb/002/019 to uid=0, gid=0 failed: No such file or directory [ 809.479168][T16817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.479190][T16817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.479214][T16817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.486555][T16817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.486575][T16817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.486604][T16817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.256544][T16817] hsr_slave_0: entered promiscuous mode [ 810.274482][T16817] hsr_slave_1: entered promiscuous mode [ 810.275645][T16817] debugfs: 'hsr0' already exists in 'hsr' [ 810.275672][T16817] Cannot create hsr debugfs directory [ 812.262920][T16619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 812.487268][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.571363][T16619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 812.714706][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.010614][T16619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 814.055514][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.055599][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.135094][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.173206][T16619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 814.216563][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.072818][T16660] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.516851][T15618] netdevsim netdevsim8 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.516935][T15618] netdevsim netdevsim8 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.517090][ T9268] netdevsim netdevsim8 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.517127][ T9268] netdevsim netdevsim8 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.569933][T17213] netlink: 'syz.0.3421': attribute type 1 has an invalid length. [ 815.612795][T17213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.890793][T16660] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.093953][T17213] bond4: (slave veth5): Enslaving as an active interface with a down link [ 816.447270][T17215] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 816.458775][T17215] bond4: (slave batadv1): making interface the new active one [ 816.460762][T17215] batadv1: entered promiscuous mode [ 816.659657][T17215] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 817.019135][T16660] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.384666][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.642625][T16660] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.738037][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.772891][T15642] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.773138][T15642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.948965][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.949111][ T9268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.268901][T15626] bridge_slave_1: left allmulticast mode [ 821.268944][T15626] bridge_slave_1: left promiscuous mode [ 821.269239][T15626] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.523619][T15626] bridge_slave_0: left allmulticast mode [ 821.523662][T15626] bridge_slave_0: left promiscuous mode [ 821.523941][T15626] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.836839][ T5719] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 822.003218][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 822.004660][ T5719] usb 2-1: not running at top speed; connect to a high speed hub [ 822.004704][ T5719] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 822.043224][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.043260][ T5719] usb 2-1: Product: syz [ 822.043277][ T5719] usb 2-1: Manufacturer: syz [ 822.043294][ T5719] usb 2-1: SerialNumber: syz [ 822.164902][T15626] bridge_slave_1: left allmulticast mode [ 822.164947][T15626] bridge_slave_1: left promiscuous mode [ 822.165603][T15626] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.377685][T15626] bridge_slave_0: left allmulticast mode [ 822.377728][T15626] bridge_slave_0: left promiscuous mode [ 822.378003][T15626] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.453393][ T5719] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 822.453485][ T5719] usb 2-1: MIDIStreaming interface descriptor not found [ 823.593093][ T5719] usb 2-1: USB disconnect, device number 20 [ 824.788043][T17291] netlink: 'syz.0.3437': attribute type 1 has an invalid length. [ 825.468613][T17301] udevd[17301]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.857930][T15626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.958254][T15626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.001679][T15626] bond0 (unregistering): Released all slaves [ 826.649782][T15626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.708384][T15626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.728971][T15626] bond0 (unregistering): Released all slaves [ 827.078387][T16817] netdevsim netdevsim8 eth24 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.437442][T17291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 827.541422][T17293] bond5: (slave gretap3): making interface the new active one [ 827.646682][T17293] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 827.680748][T17293] syz.0.3437 (17293) used greatest stack depth: 17152 bytes left [ 828.293394][T16817] netdevsim netdevsim8 eth23 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.644670][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.875368][T17347] netlink: 'syz.0.3444': attribute type 11 has an invalid length. [ 830.141291][T16817] netdevsim netdevsim8 eth22 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.275264][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 830.275287][ T36] audit: type=1326 audit(1792150325.325:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.311041][ T36] audit: type=1326 audit(1792150325.325:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.315670][ T36] audit: type=1326 audit(1792150325.365:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.316199][ T36] audit: type=1326 audit(1792150325.365:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.390872][ T36] audit: type=1326 audit(1792150325.365:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.391357][ T36] audit: type=1326 audit(1792150325.445:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.392876][ T36] audit: type=1326 audit(1792150325.445:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.392952][ T36] audit: type=1326 audit(1792150325.445:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.393628][ T36] audit: type=1326 audit(1792150325.445:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 830.393683][ T36] audit: type=1326 audit(1792150325.445:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17352 comm="syz.1.3446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbcbe559 code=0x7ffc0000 [ 832.769373][T16817] netdevsim netdevsim8 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.536240][T17381] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 835.014036][T12776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 835.062991][T12776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 835.083659][T12776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 835.085867][T12776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 835.089042][T12776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.843311][ T94] batadv1: left promiscuous mode [ 836.401114][T12776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 836.501533][T12776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 836.600564][T12776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 836.621944][T12776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 836.641862][T12776] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 837.156977][ T5600] Bluetooth: hci2: command tx timeout [ 837.196054][T15626] hsr_slave_0: left promiscuous mode [ 837.246850][T15626] hsr_slave_1: left promiscuous mode [ 837.249882][T15626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.359757][T15626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.609803][T15626] hsr_slave_0: left promiscuous mode [ 838.076953][T15626] hsr_slave_1: left promiscuous mode [ 838.083628][T15626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.083653][T15626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.173859][T15626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.173884][T15626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.317246][T15626] veth1_macvtap: left promiscuous mode [ 838.317319][T15626] veth0_macvtap: left promiscuous mode [ 838.317478][T15626] veth1_vlan: left promiscuous mode [ 838.317601][T15626] veth0_vlan: left promiscuous mode [ 838.987655][T15626] team0 (unregistering): Port device team_slave_1 removed [ 839.027928][T15626] team0 (unregistering): Port device team_slave_0 removed [ 839.157083][ T5600] Bluetooth: hci6: command tx timeout [ 839.236851][ T5600] Bluetooth: hci2: command tx timeout [ 839.988436][T15626] team0 (unregistering): Port device team_slave_1 removed [ 840.058585][T15626] team0 (unregistering): Port device team_slave_0 removed [ 841.236893][ T5600] Bluetooth: hci6: command tx timeout [ 841.317538][ T5600] Bluetooth: hci2: command tx timeout [ 841.475204][T17446] FAULT_INJECTION: forcing a failure. [ 841.475204][T17446] name failslab, interval 1, probability 0, space 0, times 0 [ 841.475249][T17446] CPU: 1 UID: 0 PID: 17446 Comm: syz.1.3468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 841.475283][T17446] Tainted: [L]=SOFTLOCKUP [ 841.475292][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 841.475305][T17446] Call Trace: [ 841.475314][T17446] [ 841.475323][T17446] dump_stack_lvl+0xe8/0x150 [ 841.475364][T17446] should_fail_ex+0x46b/0x600 [ 841.475402][T17446] should_failslab+0xa8/0x100 [ 841.475429][T17446] __kmalloc_cache_noprof+0xa1/0x680 [ 841.475467][T17446] ? cec_queue_event_fh+0xd3/0xa80 [ 841.475559][T17446] ? cec_queue_event_fh+0xd3/0xa80 [ 841.475583][T17446] ? cec_queue_event_fh+0x96/0xa80 [ 841.475611][T17446] cec_queue_event_fh+0xd3/0xa80 [ 841.475649][T17446] cec_open+0x567/0x7a0 [ 841.475680][T17446] ? __pfx_cec_open+0x10/0x10 [ 841.475715][T17446] ? rt_spin_unlock+0x159/0x200 [ 841.475745][T17446] ? rt_spin_unlock+0x165/0x200 [ 841.475773][T17446] chrdev_open+0x4dc/0x600 [ 841.475798][T17446] ? __pfx_chrdev_open+0x10/0x10 [ 841.475818][T17446] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 841.475856][T17446] ? __pfx_chrdev_open+0x10/0x10 [ 841.475874][T17446] do_dentry_open+0x849/0x1420 [ 841.475919][T17446] vfs_open+0x3b/0x350 [ 841.475938][T17446] ? path_openat+0x142d/0x1d60 [ 841.475972][T17446] path_openat+0x1448/0x1d60 [ 841.476024][T17446] do_file_open+0x23e/0x4a0 [ 841.476061][T17446] ? __pfx_do_file_open+0x10/0x10 [ 841.476118][T17446] ? alloc_fd+0x654/0x6d0 [ 841.476155][T17446] do_sys_openat2+0x115/0x200 [ 841.476177][T17446] ? __se_sys_futex+0x3a8/0x450 [ 841.476200][T17446] ? __pfx_do_sys_openat2+0x10/0x10 [ 841.476230][T17446] ? rcu_is_watching+0x16/0xb0 [ 841.476257][T17446] __x64_sys_openat+0x138/0x170 [ 841.476286][T17446] do_syscall_64+0x166/0x520 [ 841.476317][T17446] ? trace_irq_disable+0x3b/0x140 [ 841.476344][T17446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.476369][T17446] ? clear_bhb_loop+0x70/0xc0 [ 841.476396][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.476419][T17446] RIP: 0033:0x7f7cdbc7ed8e [ 841.476440][T17446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 841.476459][T17446] RSP: 002b:00007f7cd9f15b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 841.476484][T17446] RAX: ffffffffffffffda RBX: 00007f7cd9f166c0 RCX: 00007f7cdbc7ed8e [ 841.476500][T17446] RDX: 0000000000000001 RSI: 00007f7cd9f15c00 RDI: ffffffffffffff9c [ 841.476515][T17446] RBP: 00007f7cd9f15c00 R08: 0000000000000000 R09: 0000000000000000 [ 841.476530][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 841.476544][T17446] R13: 00007f7cdbf46038 R14: 00007f7cdbf45fa0 R15: 00007ffcfc90e3a8 [ 841.476579][T17446] [ 842.612102][T17382] rxe_eth0 speed is unknown, defaulting to 1000 [ 843.109963][ T5608] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 843.257814][ T5608] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 843.293258][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.293294][ T5608] usb 2-1: Product: syz [ 843.293312][ T5608] usb 2-1: Manufacturer: syz [ 843.293329][ T5608] usb 2-1: SerialNumber: syz [ 843.324641][ T5600] Bluetooth: hci6: command tx timeout [ 843.339400][ T5608] usb 2-1: config 0 descriptor?? [ 843.366230][ T5608] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 843.399393][ T5600] Bluetooth: hci2: command tx timeout [ 843.877969][T17404] rxe_eth0 speed is unknown, defaulting to 1000 [ 845.125933][ T5608] gspca_stk1135: reg_w 0x200 err -71 [ 845.126979][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.126996][ T5608] gspca_stk1135: Sensor write failed [ 845.127030][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127042][ T5608] gspca_stk1135: Sensor write failed [ 845.127077][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127088][ T5608] gspca_stk1135: Sensor read failed [ 845.127121][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127132][ T5608] gspca_stk1135: Sensor read failed [ 845.127142][ T5608] gspca_stk1135: Detected sensor type unknown (0x0) [ 845.127182][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127194][ T5608] gspca_stk1135: Sensor read failed [ 845.127228][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127240][ T5608] gspca_stk1135: Sensor read failed [ 845.127274][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127285][ T5608] gspca_stk1135: Sensor write failed [ 845.127317][ T5608] gspca_stk1135: serial bus timeout: status=0x00 [ 845.127328][ T5608] gspca_stk1135: Sensor write failed [ 845.127453][ T5608] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 845.131782][ T5608] usb 2-1: USB disconnect, device number 21 [ 845.403708][ T5600] Bluetooth: hci6: command tx timeout [ 846.885969][T12776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.963168][T12776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.966602][T12776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.992861][T12776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.008998][T12776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.974829][ T38] INFO: task kworker/1:0:31 blocked for more than 143 secon ** replaying previous printk message ** [ 847.974829][ T38] INFO: task kworker/1:0:31 blocked for more than 143 seconds. [ 847.974861][ T38] Tainted: G L syzkaller #0 [ 847.974875][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.974887][ T38] task:kworker/1:0 state:D stack:20976 pid:31 tgid:31 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 847.974953][ T38] Workqueue: events_freezable mmc_rescan [ 847.975098][ T38] Call Trace: [ 847.975107][ T38] [ 847.975123][ T38] __schedule+0x16d9/0x5700 [ 847.975160][ T38] ? __lock_acquire+0x747/0x2de0 [ 847.975196][ T38] ? rcu_is_watching+0x16/0xb0 [ 847.975235][ T38] ? __pfx___schedule+0x10/0x10 [ 847.975262][ T38] ? lock_acquire+0x115/0x350 [ 847.975305][ T38] ? schedule+0x90/0x2b0 [ 847.975338][ T38] schedule+0x164/0x2b0 [ 847.975371][ T38] schedule_timeout+0xc0/0x2c0 [ 847.975401][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 847.975433][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 847.975461][ T38] ? wait_for_completion+0x272/0x5e0 [ 847.975494][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 847.975534][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 847.975567][ T38] ? wait_for_completion+0x272/0x5e0 [ 847.975599][ T38] wait_for_completion+0x2ca/0x5e0 [ 847.975646][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 847.975678][ T38] ? vub300_mmc_request+0x1000/0x1910 [ 847.975768][ T38] ? trace_mmc_request_start+0x81/0x1e0 [ 847.975804][ T38] mmc_wait_for_req_done+0x37/0x490 [ 847.975839][ T38] ? mmc_start_request+0x202/0x2d0 [ 847.975870][ T38] ? mmc_wait_for_req+0x1b5/0x240 [ 847.975905][ T38] mmc_wait_for_cmd+0x183/0x2a0 [ 847.975940][ T38] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 847.975994][ T38] ? __pfx_mmc_wait_done+0x10/0x10 [ 847.976029][ T38] ? rt_spin_unlock+0x165/0x200 [ 847.976065][ T38] sdio_reset+0xf4/0x3a0 [ 847.976124][ T38] ? __pfx_sdio_reset+0x10/0x10 [ 847.976163][ T38] ? __mmc_claim_host+0x15d/0x640 [ 847.976210][ T38] ? mmc_power_up+0x5d/0x650 [ 847.976241][ T38] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 847.976275][ T38] mmc_rescan+0x6ee/0x1040 [ 847.976365][ T38] ? process_scheduled_works+0x97a/0x1630 [ 847.976401][ T38] process_scheduled_works+0xc3d/0x1630 [ 847.976473][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.976523][ T38] ? assign_work+0x3cf/0x5d0 [ 847.976562][ T38] worker_thread+0xa47/0xfb0 [ 847.976630][ T38] kthread+0x38b/0x470 [ 847.976657][ T38] ? __pfx_worker_thread+0x10/0x10 [ 847.976806][ T38] ? __pfx_kthread+0x10/0x10 [ 847.976837][ T38] ret_from_fork+0x514/0xb70 [ 847.976869][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 847.976895][ T38] ? __switch_to+0xc89/0x1420 [ 847.976934][ T38] ? __pfx_kthread+0x10/0x10 [ 847.976962][ T38] ret_from_fork_asm+0x1a/0x30 [ 847.977000][ T38] [ 847.977109][ T38] INFO: task kworker/1:7:5905 blocked for more than 143 seconds. [ 847.977132][ T38] Tainted: G L syzkaller #0 [ 847.977145][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.977156][ T38] task:kworker/1:7 state:D stack:21928 pid:5905 tgid:5905 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 847.977222][ T38] Workqueue: usb_hub_wq hub_event [ 847.977326][ T38] Call Trace: [ 847.977335][ T38] [ 847.977350][ T38] __schedule+0x16d9/0x5700 [ 847.977386][ T38] ? update_protect_slice+0x128/0x210 [ 847.977447][ T38] ? __pfx___schedule+0x10/0x10 [ 847.977490][ T38] ? schedule+0x90/0x2b0 [ 847.977533][ T38] schedule+0x164/0x2b0 [ 847.977568][ T38] schedule_timeout+0xc0/0x2c0 [ 847.977598][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 847.977629][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 847.977671][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 847.977702][ T38] ? wait_for_completion+0x272/0x5e0 [ 847.977732][ T38] wait_for_completion+0x2ca/0x5e0 [ 847.977776][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 847.977823][ T38] __flush_work+0x9c2/0xd70 [ 847.977857][ T38] ? __flush_work+0x101/0xd70 [ 847.977927][ T38] ? __pfx___flush_work+0x10/0x10 [ 847.977963][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 847.978021][ T38] ? __cancel_work_sync+0x5c/0x110 [ 847.978047][ T38] __cancel_work_sync+0xbf/0x110 [ 847.978073][ T38] mmc_stop_host+0xd9/0x460 [ 847.978112][ T38] mmc_remove_host+0x15/0x60 [ 847.978139][ T38] vub300_disconnect+0x154/0x2f0 [ 847.978176][ T38] usb_unbind_interface+0x295/0x9f0 [ 847.978244][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 847.978274][ T38] ? __pfx_usb_unbind_interface+0x10/0x10 [ 847.978303][ T38] device_release_driver_internal+0x4f5/0x880 [ 847.978337][ T38] bus_remove_device+0x449/0x560 [ 847.978379][ T38] ? __pfx_bus_remove_device+0x10/0x10 [ 847.978408][ T38] ? up_read+0x34/0x180 [ 847.978431][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 847.978456][ T38] device_del+0x528/0x8f0 [ 847.978490][ T38] ? __pfx_device_del+0x10/0x10 [ 847.978521][ T38] ? kobject_put+0x516/0x550 [ 847.978552][ T38] usb_disable_device+0x3d4/0x8d0 [ 847.978588][ T38] usb_disconnect+0x32d/0x990 [ 847.978612][ T38] hub_event+0x1bb7/0x4cf0 [ 847.978641][ T38] ? __lock_acquire+0x747/0x2de0 [ 847.978674][ T38] ? register_lock_class+0x31/0x2e0 [ 847.978736][ T38] ? __pfx_hub_event+0x10/0x10 [ 847.978771][ T38] ? rcu_is_watching+0x16/0xb0 [ 847.978794][ T38] ? process_scheduled_works+0x97a/0x1630 [ 847.978823][ T38] process_scheduled_works+0xc3d/0x1630 [ 847.978885][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.978921][ T38] ? assign_work+0x3cf/0x5d0 [ 847.978955][ T38] worker_thread+0xa47/0xfb0 [ 847.978999][ T38] ? __kthread_parkme+0x71/0x1f0 [ 847.979040][ T38] kthread+0x38b/0x470 [ 847.979064][ T38] ? __pfx_worker_thread+0x10/0x10 [ 847.979090][ T38] ? __pfx_kthread+0x10/0x10 [ 847.979114][ T38] ret_from_fork+0x514/0xb70 [ 847.979141][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 847.979164][ T38] ? __switch_to+0xc89/0x1420 [ 847.979197][ T38] ? __pfx_kthread+0x10/0x10 [ 847.979222][ T38] ret_from_fork_asm+0x1a/0x30 [ 847.979261][ T38] [ 847.979338][ T38] [ 847.979338][ T38] Showing all locks held in the system: [ 847.979348][ T38] locks held by pr/ttyS0/17: 3, last CPU#1: [ 847.979364][ T38] #0: ffffffff8f09d818 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 847.979426][ T38] #1: ffffffff9aeb1f58 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 847.979483][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 847.979544][ T38] locks held by kworker/1:0/31: 2, on CPU#1: [ 847.979560][ T38] #0: ffff88813ff2a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.979616][ T38] #1: ffffc90000a5fc40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.979673][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 847.979688][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 847.979761][ T38] locks held by getty/5341: 2, on CPU#0: [ 847.979776][ T38] #0: ffff888033caa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 847.979895][ T38] #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 847.979957][ T38] locks held by kworker/1:7/5905: 5, on CPU#1: [ 847.979972][ T38] #0: ffff888022296138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.980027][ T38] #1: ffffc90005c1fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.980084][ T38] #2: ffff88802ae2c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 847.980134][ T38] #3: ffff88803b38c210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 847.980182][ T38] #4: ffff8880642501d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 847.980238][ T38] locks held by syz-executor/10905: 4, last CPU#1: [ 847.980253][ T38] #0: ffffffff8f29f470 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 847.980307][ T38] #1: ffff8880132a9db8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 847.980364][ T38] #2: ffff88803e439db8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 847.980426][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 847.980484][ T38] locks held by kworker/u8:20/15621: 3, on CPU#1: [ 847.980499][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.980562][ T38] #1: ffffc9000494fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.980617][ T38] #2: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 847.980724][ T38] locks held by kworker/u8:29/15626: 5, on CPU#1: [ 847.980739][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.980795][ T38] #1: ffffc9000472fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 847.980851][ T38] #2: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 847.980924][ T38] #3: ffff888064ee1978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 847.981035][ T38] #4: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 847.981090][ T38] locks held by syz-executor/16660: 1, on CPU#0: [ 847.981105][ T38] #0: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 847.981189][ T38] locks held by syz-executor/16817: 7, on CPU#1: [ 847.981204][ T38] #0: ffff8880363c2510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 847.981264][ T38] #1: ffff88803b124c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 847.981315][ T38] #2: ffff88802a6a0878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 847.981370][ T38] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 847.981451][ T38] #4: ffff888061f09160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 847.981502][ T38] #5: ffff88802bf54310 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbc0 [ 847.981604][ T38] #6: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x18/0x60 [ 847.981661][ T38] locks held by syz-executor/17382: 2, on CPU#0: [ 847.981676][ T38] #0: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 847.981727][ T38] #1: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 847.981816][ T38] locks held by syz-executor/17404: 6, on CPU#0: [ 847.981831][ T38] #0: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 847.981882][ T38] #1: ffffffff90320260 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 847.981971][ T38] #2: ffffffff903204a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 847.982022][ T38] #3: ffff88803ef29208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 847.982074][ T38] #4: ffff88803ef29528 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 847.982179][ T38] #5: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x8e0 [ 847.982261][ T38] locks held by syz-executor/17493: 1, on CPU#1: [ 847.982276][ T38] #0: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 847.982369][ T38] locks held by syz.0.3484/17505: 4, last CPU#0: [ 847.982384][ T38] #0: ffff8880348dd1b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 847.982440][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 847.982493][ T38] #2: ffff88805d760ad8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 847.982561][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 847.982611][ T38] [ 847.982617][ T38] ============================================= [ 847.982617][ T38] [ 847.982628][ T38] NMI backtrace for cpu 0 [ 847.982645][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 847.982674][ T38] Tainted: [L]=SOFTLOCKUP [ 847.982681][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.982693][ T38] Call Trace: [ 847.982703][ T38] [ 847.982712][ T38] dump_stack_lvl+0xe8/0x150 [ 847.982743][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 847.982767][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 847.982791][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 847.982819][ T38] sys_info+0x135/0x170 [ 847.982839][ T38] watchdog+0xfd7/0x1030 [ 847.982876][ T38] ? watchdog+0x1c7/0x1030 [ 847.982910][ T38] kthread+0x38b/0x470 [ 847.982932][ T38] ? __pfx_watchdog+0x10/0x10 [ 847.982957][ T38] ? __pfx_kthread+0x10/0x10 [ 847.982980][ T38] ret_from_fork+0x514/0xb70 [ 847.983004][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 847.983026][ T38] ? __switch_to+0xc89/0x1420 [ 847.983057][ T38] ? __pfx_kthread+0x10/0x10 [ 847.983080][ T38] ret_from_fork_asm+0x1a/0x30 [ 847.983116][ T38] [ 847.983125][ T38] Sending NMI from CPU 0 to CPUs 1: [ 847.983156][ C1] NMI backtrace for cpu 1 [ 847.983174][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 847.983199][ C1] Tainted: [L]=SOFTLOCKUP [ 847.983206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.983217][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 847.983274][ C1] Code: e8 ae 89 63 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 4e d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 847.983289][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 847.983306][ C1] RAX: 1ffffffff35d6300 RBX: 00000000000003fd RCX: 0000000000000000 [ 847.983320][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 847.983331][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 847.983343][ C1] R10: dffffc0000000000 R11: ffffffff85634f60 R12: dffffc0000000000 [ 847.983357][ C1] R13: 0000000000000000 R14: ffffffff9aeb1f80 R15: 0000000000000000 [ 847.983368][ C1] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 847.983383][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.983396][ C1] CR2: 00007f7cdca756c8 CR3: 000000003008c000 CR4: 00000000003526f0 [ 847.983414][ C1] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 847.983426][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 847.983439][ C1] Call Trace: [ 847.983446][ C1] [ 847.983455][ C1] wait_for_lsr+0x190/0x300 [ 847.983505][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 847.983531][ C1] serial8250_console_write+0xaa2/0x1220 [ 847.983562][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 847.983595][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 847.983628][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 847.983656][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 847.983690][ C1] nbcon_kthread_func+0x679/0x880 [ 847.983718][ C1] ? nbcon_kthread_func+0x163/0x880 [ 847.983740][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 847.983768][ C1] ? __kthread_parkme+0x71/0x1f0 [ 847.983793][ C1] ? __kthread_parkme+0x199/0x1f0 [ 847.983820][ C1] kthread+0x38b/0x470 [ 847.983838][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 847.983860][ C1] ? __pfx_kthread+0x10/0x10 [ 847.983878][ C1] ret_from_fork+0x514/0xb70 [ 847.983897][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 847.983915][ C1] ? __switch_to+0xc89/0x1420 [ 847.983940][ C1] ? __pfx_kthread+0x10/0x10 [ 847.983958][ C1] ret_from_fork_asm+0x1a/0x30 [ 847.983984][ C1] [ 847.984149][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 849.503866][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 849.515070][ T38] Tainted: [L]=SOFTLOCKUP [ 849.519396][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 849.529473][ T38] Call Trace: [ 849.532759][ T38] [ 849.535694][ T38] vpanic+0x56d/0xa60 [ 849.539686][ T38] ? __pfx_vpanic+0x10/0x10 [ 849.544196][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 849.549759][ T38] panic+0xc5/0xd0 [ 849.553502][ T38] ? __pfx_panic+0x10/0x10 [ 849.557925][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 849.562963][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 849.569133][ T38] watchdog+0x1030/0x1030 [ 849.573481][ T38] ? watchdog+0x1c7/0x1030 [ 849.577914][ T38] kthread+0x38b/0x470 [ 849.581991][ T38] ? __pfx_watchdog+0x10/0x10 [ 849.586676][ T38] ? __pfx_kthread+0x10/0x10 [ 849.591279][ T38] ret_from_fork+0x514/0xb70 [ 849.595883][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 849.601010][ T38] ? __switch_to+0xc89/0x1420 [ 849.605710][ T38] ? __pfx_kthread+0x10/0x10 [ 849.610307][ T38] ret_from_fork_asm+0x1a/0x30 [ 849.615092][ T38] [ 849.618464][ T38] Kernel Offset: disabled [ 849.622790][ T38] Rebooting in 86400 seconds..