last executing test programs: 24.764933506s ago: executing program 2 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) 20.925916337s ago: executing program 2 (id=875): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, 0x0) 12.307445384s ago: executing program 1 (id=890): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 11.807588032s ago: executing program 3 (id=891): r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x1fd, 0x12f382) write(r0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24002de8) 11.647921314s ago: executing program 2 (id=892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 11.173520582s ago: executing program 2 (id=893): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') r4 = socket$kcm(0x29, 0x2, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x182, 0x20010000) 10.534125822s ago: executing program 3 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r3) 9.918545562s ago: executing program 1 (id=895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) syz_open_procfs(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.228286863s ago: executing program 2 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc5", 0x94}], 0x1, &(0x7f00000004c0)=ANY=[], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 8.551622284s ago: executing program 3 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 8.438206346s ago: executing program 0 (id=898): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, 0x0, 0xb0) 6.668805534s ago: executing program 2 (id=899): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="400a2e000000c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94eb4d1177f18d3ccafa6f5b464"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x44f6, &(0x7f0000000440)={0x0, 0xb460, 0x1, 0x805, 0x4}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000110)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x2400404e) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6.450394117s ago: executing program 0 (id=900): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 6.447768437s ago: executing program 1 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.460714243s ago: executing program 3 (id=902): getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 4.941881021s ago: executing program 1 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x4, 0x12bb41) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0xc000) 4.291671681s ago: executing program 0 (id=904): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') r4 = socket$kcm(0x29, 0x2, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"a2e3ad2109c752f91b5d470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x182, 0x20010000) 3.896006268s ago: executing program 3 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r3) 3.741780001s ago: executing program 0 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) 2.579872279s ago: executing program 0 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc5", 0x94}], 0x1, &(0x7f00000004c0)=ANY=[], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.579322329s ago: executing program 3 (id=908): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x1b, 0x0) 2.528930529s ago: executing program 1 (id=909): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, 0x0, 0xb0) 1.089704563s ago: executing program 0 (id=910): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$cgroup_int(r6, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x1) 0s ago: executing program 1 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): [ 58.363183][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.376861][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: [ 59.157750][ T5525] sshd (5525) used greatest stack depth: 20432 bytes left OK syzkaller Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. syzkaller login: [ 79.402888][ T5763] cgroup: Unknown subsys name 'net' [ 79.553320][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.244116][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.607746][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.615424][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.624539][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.632637][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.640011][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.642370][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.655893][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.655912][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.666800][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.677053][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.680899][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.686506][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.693478][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.700539][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.707268][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.719691][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.719711][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.734881][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.743027][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.760002][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.771544][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.776307][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.786943][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.796483][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.275639][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.314433][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.439158][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.455405][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.499638][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.508274][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.516230][ T5778] bridge_slave_0: entered allmulticast mode [ 84.523892][ T5778] bridge_slave_0: entered promiscuous mode [ 84.570178][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.577592][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.585036][ T5778] bridge_slave_1: entered allmulticast mode [ 84.592635][ T5778] bridge_slave_1: entered promiscuous mode [ 84.679525][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.687027][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.694351][ T5776] bridge_slave_0: entered allmulticast mode [ 84.701861][ T5776] bridge_slave_0: entered promiscuous mode [ 84.719413][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.733274][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.760997][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.769301][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.776676][ T5776] bridge_slave_1: entered allmulticast mode [ 84.784680][ T5776] bridge_slave_1: entered promiscuous mode [ 84.866794][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.874140][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.881607][ T5777] bridge_slave_0: entered allmulticast mode [ 84.889202][ T5777] bridge_slave_0: entered promiscuous mode [ 84.897091][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.904265][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.916629][ T5775] bridge_slave_0: entered allmulticast mode [ 84.924182][ T5775] bridge_slave_0: entered promiscuous mode [ 84.935743][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.942949][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.953655][ T5775] bridge_slave_1: entered allmulticast mode [ 84.960985][ T5775] bridge_slave_1: entered promiscuous mode [ 84.970812][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.985671][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.998619][ T5778] team0: Port device team_slave_0 added [ 85.014058][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.031239][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.039080][ T5777] bridge_slave_1: entered allmulticast mode [ 85.049659][ T5777] bridge_slave_1: entered promiscuous mode [ 85.083716][ T5778] team0: Port device team_slave_1 added [ 85.160671][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.172832][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.185997][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.200072][ T5776] team0: Port device team_slave_0 added [ 85.209912][ T5776] team0: Port device team_slave_1 added [ 85.217057][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.224045][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.250384][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.265021][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.305838][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.312849][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.342286][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.401936][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.409039][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.438220][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.463915][ T5777] team0: Port device team_slave_0 added [ 85.473282][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.483416][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.509994][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.525371][ T5775] team0: Port device team_slave_0 added [ 85.546251][ T5777] team0: Port device team_slave_1 added [ 85.564129][ T5775] team0: Port device team_slave_1 added [ 85.615108][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.622218][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.648557][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.667451][ T5778] hsr_slave_0: entered promiscuous mode [ 85.675326][ T5778] hsr_slave_1: entered promiscuous mode [ 85.693514][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.701018][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.727142][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.740597][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.747673][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.773613][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.785511][ T5785] Bluetooth: hci3: command tx timeout [ 85.808870][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.815982][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.842082][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.864640][ T5785] Bluetooth: hci2: command tx timeout [ 85.864664][ T5782] Bluetooth: hci0: command tx timeout [ 85.865116][ T5792] Bluetooth: hci1: command tx timeout [ 85.951602][ T5775] hsr_slave_0: entered promiscuous mode [ 85.958531][ T5775] hsr_slave_1: entered promiscuous mode [ 85.965327][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.973221][ T5775] Cannot create hsr debugfs directory [ 86.001410][ T5776] hsr_slave_0: entered promiscuous mode [ 86.008422][ T5776] hsr_slave_1: entered promiscuous mode [ 86.017181][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.024884][ T5776] Cannot create hsr debugfs directory [ 86.039245][ T5777] hsr_slave_0: entered promiscuous mode [ 86.045936][ T5777] hsr_slave_1: entered promiscuous mode [ 86.052124][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.059923][ T5777] Cannot create hsr debugfs directory [ 86.523686][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.537694][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.552677][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.563281][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.647979][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.672490][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.684033][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.705129][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.809231][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.821435][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.833652][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.847974][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.887230][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.957333][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.969423][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.980164][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.002219][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.011620][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.065002][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.072387][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.139955][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.147306][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.259770][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.388801][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.428080][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.441708][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.481240][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.488483][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.522475][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.529819][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.559990][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.590671][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.630316][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.637561][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.667312][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.674591][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.707787][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.715064][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.801591][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.808919][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.869721][ T5792] Bluetooth: hci3: command tx timeout [ 87.946022][ T5792] Bluetooth: hci1: command tx timeout [ 87.946138][ T5785] Bluetooth: hci0: command tx timeout [ 87.951495][ T5792] Bluetooth: hci2: command tx timeout [ 88.133088][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.282632][ T5777] veth0_vlan: entered promiscuous mode [ 88.319375][ T5777] veth1_vlan: entered promiscuous mode [ 88.439851][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.485885][ T5777] veth0_macvtap: entered promiscuous mode [ 88.541712][ T5777] veth1_macvtap: entered promiscuous mode [ 88.595516][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.623450][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.644299][ T5775] veth0_vlan: entered promiscuous mode [ 88.658974][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.671190][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.683198][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.693877][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.728942][ T5775] veth1_vlan: entered promiscuous mode [ 88.782467][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.825093][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.911609][ T5775] veth0_macvtap: entered promiscuous mode [ 88.918733][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.935954][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.980123][ T5775] veth1_macvtap: entered promiscuous mode [ 89.001054][ T5776] veth0_vlan: entered promiscuous mode [ 89.021006][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.037916][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.053756][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.067654][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.080140][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.103500][ T5776] veth1_vlan: entered promiscuous mode [ 89.135995][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.151167][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.168997][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.194251][ T5778] veth0_vlan: entered promiscuous mode [ 89.248805][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.262759][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.290117][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.301990][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.367056][ T5778] veth1_vlan: entered promiscuous mode [ 89.932254][ T5845] omfs: Invalid superblock (0) [ 91.221816][ T5792] Bluetooth: hci3: command tx timeout [ 91.221844][ T5782] Bluetooth: hci0: command tx timeout [ 91.221928][ T5782] Bluetooth: hci1: command tx timeout [ 91.236011][ T5792] Bluetooth: hci2: command tx timeout [ 91.407246][ T5776] veth0_macvtap: entered promiscuous mode [ 91.458502][ T5776] veth1_macvtap: entered promiscuous mode [ 91.552470][ T5778] veth0_macvtap: entered promiscuous mode [ 91.578946][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.585882][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.603409][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.617938][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.634556][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.650554][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.662707][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.679214][ T5778] veth1_macvtap: entered promiscuous mode [ 91.718077][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.740703][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.750848][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.764602][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.780465][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.846934][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.855688][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.872562][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.881063][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.899472][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.910285][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.924687][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.939281][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.954206][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.967694][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.980011][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000162][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.014848][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.056239][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.077914][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.092474][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.104374][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.115359][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.125904][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.138061][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.192939][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205361][ T56] cfg80211: failed to load regulatory.db [ 92.216933][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.228353][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.239982][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.530545][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.552508][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.567936][ T5851] autofs4:pid:5851:autofs_fill_super: called with bogus options [ 92.656912][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.696389][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.764784][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.783637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.948034][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.975519][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.306567][ T5792] Bluetooth: hci1: command tx timeout [ 93.312254][ T5792] Bluetooth: hci3: command tx timeout [ 93.319185][ T5792] Bluetooth: hci0: command tx timeout [ 93.326617][ T5792] Bluetooth: hci2: command tx timeout [ 95.640915][ T5867] ALSA: mixer_oss: invalid OSS volume 'W' [ 96.545176][ T5765] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.943095][ T5765] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.964930][ T5765] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.974081][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.186369][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.208111][ T5765] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 97.218203][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.969845][ T5765] usb 1-1: Product: syz [ 97.974119][ T5765] usb 1-1: Manufacturer: syz [ 97.979288][ T5765] usb 1-1: SerialNumber: syz [ 98.017826][ T5765] usb 1-1: Found UVC 1.00 device syz (046d:0821) [ 98.044716][ T5765] usb 1-1: No streaming interface found for terminal 2. [ 99.364752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.915627][ T23] usb 1-1: USB disconnect, device number 2 [ 101.924653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.347172][ T5910] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5911] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5910] [ 107.214098][ T5917] ALSA: mixer_oss: invalid OSS volume 'W' [ 112.797379][ T5945] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5947] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5945] [ 114.580746][ T5962] ALSA: mixer_oss: invalid OSS volume 'W' [ 119.204983][ T5785] Bluetooth: Wrong link type (-57) [ 120.949085][ T5996] ALSA: mixer_oss: invalid OSS volume 'W' [ 123.914308][ T6009] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6011] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6009] [ 127.768415][ T6035] ALSA: mixer_oss: invalid OSS volume 'W' [ 128.764676][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.867601][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.889077][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 129.930944][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.972240][ T9] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 130.016274][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 130.024073][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 130.105878][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 130.113968][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 130.183523][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 130.217180][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 130.274605][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 130.304961][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 130.538217][ T56] usb 1-1: USB disconnect, device number 3 [ 130.550292][ T56] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 132.211025][ T56] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 132.644734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 133.810566][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.844567][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.906623][ T56] keyspan 1-1:1.0: device disconnected [ 134.476062][ T6055] sctp: [Deprecated]: syz.0.61 (pid 6055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.476062][ T6055] Use struct sctp_sack_info instead [ 134.839273][ T5785] Bluetooth: Wrong link type (-57) [ 135.390836][ T6061] ALSA: mixer_oss: invalid OSS volume 'W' [ 140.324754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 141.194916][ T6087] ALSA: mixer_oss: invalid OSS volume 'W' [ 143.427529][ T6094] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6095] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6094] [ 146.168403][ T6104] sctp: [Deprecated]: syz.1.70 (pid 6104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.168403][ T6104] Use struct sctp_sack_info instead [ 147.096282][ T5785] Bluetooth: Wrong link type (-57) [ 148.004622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 148.634069][ T6117] omfs: Invalid superblock (0) [ 150.264562][ T6124] sctp: [Deprecated]: syz.2.80 (pid 6124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.264562][ T6124] Use struct sctp_sack_info instead [ 150.564634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 153.606725][ T6136] sctp: [Deprecated]: syz.2.85 (pid 6136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.606725][ T6136] Use struct sctp_sack_info instead [ 154.882571][ T5785] Bluetooth: Wrong link type (-57) [ 154.888657][ T5785] Bluetooth: hci3: link tx timeout [ 154.894168][ T5785] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 156.177028][ T6154] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6155] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6154] [ 157.244272][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 158.244606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.405423][ T6164] sctp: [Deprecated]: syz.1.94 (pid 6164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.405423][ T6164] Use struct sctp_sack_info instead [ 160.665520][ T6167] FAULT_INJECTION: forcing a failure. [ 160.665520][ T6167] name failslab, interval 1, probability 0, space 0, times 1 [ 160.714622][ T6167] CPU: 0 PID: 6167 Comm: syz.1.95 Not tainted syzkaller #0 [ 160.721935][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.732089][ T6167] Call Trace: [ 160.735411][ T6167] [ 160.738381][ T6167] dump_stack_lvl+0x18c/0x250 [ 160.743126][ T6167] ? show_regs_print_info+0x20/0x20 [ 160.748390][ T6167] ? load_image+0x420/0x420 [ 160.752953][ T6167] ? __might_sleep+0xe0/0xe0 [ 160.757604][ T6167] ? __lock_acquire+0x7d80/0x7d80 [ 160.762698][ T6167] should_fail_ex+0x394/0x4c0 [ 160.767417][ T6167] should_failslab+0x9/0x20 [ 160.771956][ T6167] slab_pre_alloc_hook+0x59/0x300 [ 160.777043][ T6167] ? snd_seq_oss_readq_new+0x82/0x250 [ 160.782450][ T6167] ? snd_seq_oss_readq_new+0x82/0x250 [ 160.787865][ T6167] __kmem_cache_alloc_node+0x53/0x250 [ 160.793278][ T6167] ? snd_seq_oss_readq_new+0x82/0x250 [ 160.798705][ T6167] __kmalloc+0xa7/0x240 [ 160.802893][ T6167] snd_seq_oss_readq_new+0x82/0x250 [ 160.808133][ T6167] snd_seq_oss_open+0x807/0xf10 [ 160.813031][ T6167] ? snd_seq_oss_delete_client+0x50/0x50 [ 160.818765][ T6167] ? trace_raw_output_contention_end+0xd0/0xd0 [ 160.825002][ T6167] ? soundcore_open+0x274/0x4c0 [ 160.829895][ T6167] ? odev_open+0x5c/0xa0 [ 160.834178][ T6167] ? __lock_acquire+0x7d80/0x7d80 [ 160.839252][ T6167] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 160.845286][ T6167] ? async_call_lookup_ports+0x20/0x20 [ 160.850775][ T6167] ? do_raw_spin_unlock+0x121/0x230 [ 160.856012][ T6167] ? soundcore_open+0x310/0x4c0 [ 160.860899][ T6167] odev_open+0x67/0xa0 [ 160.865006][ T6167] chrdev_open+0x58c/0x600 [ 160.869478][ T6167] ? cd_forget+0x160/0x160 [ 160.873927][ T6167] ? fsnotify_perm+0x3ed/0x5e0 [ 160.878745][ T6167] do_dentry_open+0x880/0x14b0 [ 160.883562][ T6167] ? cd_forget+0x160/0x160 [ 160.888014][ T6167] path_openat+0x284f/0x3270 [ 160.892652][ T6167] ? do_sys_openat2+0xda/0x1d0 [ 160.897453][ T6167] ? __x64_sys_openat+0x139/0x160 [ 160.902531][ T6167] ? verify_lock_unused+0x140/0x140 [ 160.907766][ T6167] ? do_filp_open+0x430/0x430 [ 160.912498][ T6167] do_filp_open+0x1f2/0x430 [ 160.917040][ T6167] ? vfs_tmpfile+0x620/0x620 [ 160.921673][ T6167] ? _raw_spin_unlock+0x28/0x40 [ 160.926553][ T6167] ? alloc_fd+0x590/0x640 [ 160.930919][ T6167] do_sys_openat2+0x134/0x1d0 [ 160.935631][ T6167] ? do_sys_open+0xe0/0xe0 [ 160.940080][ T6167] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 160.946097][ T6167] ? lock_chain_count+0x20/0x20 [ 160.950976][ T6167] __x64_sys_openat+0x139/0x160 [ 160.955861][ T6167] do_syscall_64+0x55/0xb0 [ 160.960307][ T6167] ? clear_bhb_loop+0x40/0x90 [ 160.965016][ T6167] ? clear_bhb_loop+0x40/0x90 [ 160.969743][ T6167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.975674][ T6167] RIP: 0033:0x7fe52c19e159 [ 160.980129][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.999758][ T6167] RSP: 002b:00007fe52cfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.008204][ T6167] RAX: ffffffffffffffda RBX: 00007fe52c425fa0 RCX: 00007fe52c19e159 [ 161.016210][ T6167] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 161.024214][ T6167] RBP: 00007fe52c23506b R08: 0000000000000000 R09: 0000000000000000 [ 161.032210][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.040203][ T6167] R13: 00007fe52c426038 R14: 00007fe52c425fa0 R15: 00007ffca3d8a838 [ 161.048215][ T6167] [ 161.557728][ T6174] sctp: [Deprecated]: syz.0.91 (pid 6174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.557728][ T6174] Use struct sctp_sack_info instead [ 162.455747][ T5785] Bluetooth: Wrong link type (-57) [ 165.506993][ T6195] capability: warning: `syz.3.92' uses deprecated v2 capabilities in a way that may be insecure [ 168.356815][ T6206] sctp: [Deprecated]: syz.0.106 (pid 6206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.356815][ T6206] Use struct sctp_sack_info instead [ 171.044565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 171.856557][ T6223] sctp: [Deprecated]: syz.2.104 (pid 6223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.856557][ T6223] Use struct sctp_sack_info instead [ 174.230698][ T6240] nvmet: adding nsid 1 to subsystem testsubsys [ 174.530309][ T6244] sctp: [Deprecated]: syz.3.116 (pid 6244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.530309][ T6244] Use struct sctp_sack_info instead [ 175.296747][ T6247] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6248] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6247] [ 175.755035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 176.164667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 176.448190][ T5785] Bluetooth: hci2: link tx timeout [ 176.453680][ T5785] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.523683][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 182.825680][ T5785] Bluetooth: Wrong link type (-57) [ 183.347308][ T6285] sctp: [Deprecated]: syz.1.127 (pid 6285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.347308][ T6285] Use struct sctp_sack_info instead [ 183.552574][ T6287] sctp: [Deprecated]: syz.3.121 (pid 6287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.552574][ T6287] Use struct sctp_sack_info instead [ 184.336891][ T6290] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6291] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6290] [ 188.457780][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 190.896139][ T5785] Bluetooth: Wrong link type (-57) [ 191.566362][ T6326] sctp: [Deprecated]: syz.2.137 (pid 6326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.566362][ T6326] Use struct sctp_sack_info instead [ 192.651039][ T6334] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6335] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6334] [ 194.079035][ T6342] sctp: [Deprecated]: syz.2.139 (pid 6342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.079035][ T6342] Use struct sctp_sack_info instead [ 194.725190][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.731574][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.784535][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 196.317038][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 197.228596][ T6357] omfs: Invalid superblock (0) [ 201.606807][ T6374] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6375] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6374] [ 203.125449][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 205.720431][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 206.886799][ T6397] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6398] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6397] [ 207.967994][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 207.974153][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 209.347886][ T6405] FAULT_INJECTION: forcing a failure. [ 209.347886][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 209.391718][ T6405] CPU: 0 PID: 6405 Comm: syz.1.161 Not tainted syzkaller #0 [ 209.399128][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.409242][ T6405] Call Trace: [ 209.412561][ T6405] [ 209.415580][ T6405] dump_stack_lvl+0x18c/0x250 [ 209.420348][ T6405] ? show_regs_print_info+0x20/0x20 [ 209.425610][ T6405] ? load_image+0x420/0x420 [ 209.430185][ T6405] ? __might_sleep+0xe0/0xe0 [ 209.434811][ T6405] ? __lock_acquire+0x7d80/0x7d80 [ 209.439865][ T6405] should_fail_ex+0x394/0x4c0 [ 209.444603][ T6405] should_failslab+0x9/0x20 [ 209.449163][ T6405] slab_pre_alloc_hook+0x59/0x300 [ 209.454252][ T6405] kmem_cache_alloc_node+0x5e/0x310 [ 209.459488][ T6405] ? __alloc_skb+0x103/0x2c0 [ 209.464138][ T6405] __alloc_skb+0x103/0x2c0 [ 209.468608][ T6405] tcp_stream_alloc_skb+0x3d/0x330 [ 209.473783][ T6405] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 209.478975][ T6405] ? tcp_set_state+0x6c0/0x6c0 [ 209.483806][ T6405] tcp_sendmsg+0x2f/0x50 [ 209.488081][ T6405] __sys_sendto+0x4a9/0x6b0 [ 209.492616][ T6405] ? __ia32_sys_getpeername+0x90/0x90 [ 209.498046][ T6405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 209.504084][ T6405] ? lock_chain_count+0x20/0x20 [ 209.509013][ T6405] __x64_sys_sendto+0xde/0xf0 [ 209.513748][ T6405] do_syscall_64+0x55/0xb0 [ 209.518212][ T6405] ? clear_bhb_loop+0x40/0x90 [ 209.522928][ T6405] ? clear_bhb_loop+0x40/0x90 [ 209.527639][ T6405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.533569][ T6405] RIP: 0033:0x7fe52c19e159 [ 209.538028][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.557686][ T6405] RSP: 002b:00007fe52cfcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 209.566159][ T6405] RAX: ffffffffffffffda RBX: 00007fe52c425fa0 RCX: 00007fe52c19e159 [ 209.574159][ T6405] RDX: ffffffffffffff50 RSI: 0000200000000080 RDI: 0000000000000003 [ 209.582158][ T6405] RBP: 00007fe52c23506b R08: 0000000000000000 R09: 0000000000000000 [ 209.590167][ T6405] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000000 [ 209.598162][ T6405] R13: 00007fe52c426038 R14: 00007fe52c425fa0 R15: 00007ffca3d8a838 [ 209.606173][ T6405] [ 209.973237][ T6410] sctp: [Deprecated]: syz.0.151 (pid 6410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.973237][ T6410] Use struct sctp_sack_info instead [ 211.466737][ T6420] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6421] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6420] [ 213.357634][ T6428] ======================================================= [ 213.357634][ T6428] WARNING: The mand mount option has been deprecated and [ 213.357634][ T6428] and is ignored by this kernel. Remove the mand [ 213.357634][ T6428] option from the mount to silence this warning. [ 213.357634][ T6428] ======================================================= [ 213.412942][ T6428] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio) [ 214.666825][ T6433] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6434] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6433] [ 215.764617][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 216.114707][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 217.502346][ T6446] sctp: [Deprecated]: syz.1.171 (pid 6446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.502346][ T6446] Use struct sctp_sack_info instead [ 218.237210][ T6448] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6450] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6448] [ 220.490223][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 220.508880][ T5782] CPU: 1 PID: 5782 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 220.516511][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.526619][ T5782] Workqueue: hci2 hci_rx_work [ 220.531384][ T5782] Call Trace: [ 220.534701][ T5782] [ 220.537666][ T5782] dump_stack_lvl+0x18c/0x250 [ 220.542401][ T5782] ? show_regs_print_info+0x20/0x20 [ 220.547666][ T5782] ? load_image+0x420/0x420 [ 220.552245][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 220.557416][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 220.562492][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 220.567220][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 220.572473][ T5782] kobject_add_internal+0x617/0xc90 [ 220.577730][ T5782] kobject_add+0x164/0x240 [ 220.582224][ T5782] ? kobject_init+0x1d0/0x1d0 [ 220.586986][ T5782] ? get_device_parent+0x366/0x390 [ 220.592167][ T5782] device_add+0x3fa/0xc40 [ 220.596559][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 220.601550][ T5782] le_conn_complete_evt+0xe9a/0x1480 [ 220.606937][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 220.613236][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 220.618916][ T5782] ? mutex_unlock+0x10/0x10 [ 220.623485][ T5782] ? skb_pull_data+0xf0/0x1f0 [ 220.628212][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 220.633811][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 220.639937][ T5782] hci_event_packet+0x7b4/0x1280 [ 220.644932][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 220.650003][ T5782] ? lock_chain_count+0x20/0x20 [ 220.654902][ T5782] ? bis_list+0x290/0x290 [ 220.659286][ T5782] ? kcov_remote_start+0x513/0x810 [ 220.664447][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 220.669691][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 220.674949][ T5782] hci_rx_work+0x43a/0xd60 [ 220.679448][ T5782] ? process_scheduled_works+0x975/0x1600 [ 220.685219][ T5782] process_scheduled_works+0xa60/0x1600 [ 220.690850][ T5782] ? worker_attach_to_pool+0x370/0x370 [ 220.696368][ T5782] ? assign_work+0x3cc/0x5d0 [ 220.701016][ T5782] worker_thread+0xa5e/0xfe0 [ 220.705710][ T5782] kthread+0x2fa/0x390 [ 220.709825][ T5782] ? pr_cont_work+0x550/0x550 [ 220.714613][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 220.719253][ T5782] ret_from_fork+0x48/0x80 [ 220.723746][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 220.728397][ T5782] ret_from_fork_asm+0x11/0x20 [ 220.733242][ T5782] [ 220.770871][ T5782] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.785351][ T5782] Bluetooth: hci2: failed to register connection device [ 220.825091][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 222.646981][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 224.426071][ T6480] sctp: [Deprecated]: syz.0.181 (pid 6480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.426071][ T6480] Use struct sctp_sack_info instead [ 224.997087][ T6479] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6482] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6479] [ 227.629680][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 229.925655][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 229.935879][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 229.941955][ T5792] CPU: 1 PID: 5792 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 229.949551][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.959660][ T5792] Workqueue: hci0 hci_rx_work [ 229.964439][ T5792] Call Trace: [ 229.967783][ T5792] [ 229.970741][ T5792] dump_stack_lvl+0x18c/0x250 [ 229.975461][ T5792] ? show_regs_print_info+0x20/0x20 [ 229.980716][ T5792] ? load_image+0x420/0x420 [ 229.985260][ T5792] sysfs_create_dir_ns+0x26e/0x2a0 [ 229.990402][ T5792] ? __lock_acquire+0x7d80/0x7d80 [ 229.995465][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 230.000191][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 230.005425][ T5792] kobject_add_internal+0x617/0xc90 [ 230.010655][ T5792] kobject_add+0x164/0x240 [ 230.015106][ T5792] ? kobject_init+0x1d0/0x1d0 [ 230.019815][ T5792] ? get_device_parent+0x366/0x390 [ 230.024968][ T5792] device_add+0x3fa/0xc40 [ 230.029336][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 230.034311][ T5792] le_conn_complete_evt+0xe9a/0x1480 [ 230.039637][ T5792] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 230.045924][ T5792] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 230.051592][ T5792] ? mutex_unlock+0x10/0x10 [ 230.056126][ T5792] ? skb_pull_data+0xf0/0x1f0 [ 230.060842][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 230.066456][ T5792] ? hci_remote_host_features_evt+0x150/0x150 [ 230.072557][ T5792] hci_event_packet+0x7b4/0x1280 [ 230.077541][ T5792] ? __lock_acquire+0x7d80/0x7d80 [ 230.082603][ T5792] ? lock_chain_count+0x20/0x20 [ 230.087482][ T5792] ? bis_list+0x290/0x290 [ 230.091846][ T5792] ? kcov_remote_start+0x513/0x810 [ 230.096987][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 230.102219][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 230.107457][ T5792] hci_rx_work+0x43a/0xd60 [ 230.111914][ T5792] ? process_scheduled_works+0x975/0x1600 [ 230.117669][ T5792] process_scheduled_works+0xa60/0x1600 [ 230.123269][ T5792] ? worker_attach_to_pool+0x370/0x370 [ 230.128765][ T5792] ? assign_work+0x3cc/0x5d0 [ 230.133398][ T5792] worker_thread+0xa5e/0xfe0 [ 230.138049][ T5792] ? _raw_spin_unlock+0x40/0x40 [ 230.142937][ T5792] ? __kthread_parkme+0x71/0x1c0 [ 230.147935][ T5792] kthread+0x2fa/0x390 [ 230.152045][ T5792] ? pr_cont_work+0x550/0x550 [ 230.156754][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 230.161370][ T5792] ret_from_fork+0x48/0x80 [ 230.165828][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 230.170441][ T5792] ret_from_fork_asm+0x11/0x20 [ 230.175247][ T5792] [ 230.179923][ T5792] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 230.194834][ T5792] Bluetooth: hci0: failed to register connection device [ 230.213445][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 230.790537][ T6510] sctp: [Deprecated]: syz.1.191 (pid 6510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.790537][ T6510] Use struct sctp_sack_info instead [ 232.317123][ T6516] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6517] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6516] [ 235.296922][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 235.306862][ T5792] CPU: 1 PID: 5792 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 235.314459][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.324564][ T5792] Workqueue: hci1 hci_rx_work [ 235.329314][ T5792] Call Trace: [ 235.332656][ T5792] [ 235.335628][ T5792] dump_stack_lvl+0x18c/0x250 [ 235.340366][ T5792] ? show_regs_print_info+0x20/0x20 [ 235.345621][ T5792] ? load_image+0x420/0x420 [ 235.350193][ T5792] sysfs_create_dir_ns+0x26e/0x2a0 [ 235.355365][ T5792] ? __lock_acquire+0x7d80/0x7d80 [ 235.360457][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 235.365202][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 235.370471][ T5792] kobject_add_internal+0x617/0xc90 [ 235.375732][ T5792] kobject_add+0x164/0x240 [ 235.380209][ T5792] ? kobject_init+0x1d0/0x1d0 [ 235.384965][ T5792] ? get_device_parent+0x366/0x390 [ 235.390144][ T5792] device_add+0x3fa/0xc40 [ 235.394529][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 235.399558][ T5792] le_conn_complete_evt+0xe9a/0x1480 [ 235.404912][ T5792] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 235.411214][ T5792] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 235.416901][ T5792] ? mutex_unlock+0x10/0x10 [ 235.421453][ T5792] ? skb_pull_data+0xf0/0x1f0 [ 235.426190][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 235.431795][ T5792] ? hci_remote_host_features_evt+0x150/0x150 [ 235.437909][ T5792] hci_event_packet+0x7b4/0x1280 [ 235.442903][ T5792] ? __lock_acquire+0x7d80/0x7d80 [ 235.447983][ T5792] ? lock_chain_count+0x20/0x20 [ 235.453018][ T5792] ? bis_list+0x290/0x290 [ 235.457423][ T5792] ? kcov_remote_start+0x513/0x810 [ 235.462623][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 235.467929][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 235.473201][ T5792] hci_rx_work+0x43a/0xd60 [ 235.477711][ T5792] ? process_scheduled_works+0x975/0x1600 [ 235.483504][ T5792] process_scheduled_works+0xa60/0x1600 [ 235.489146][ T5792] ? worker_attach_to_pool+0x370/0x370 [ 235.494672][ T5792] ? assign_work+0x3cc/0x5d0 [ 235.499326][ T5792] worker_thread+0xa5e/0xfe0 [ 235.503986][ T5792] ? _raw_spin_unlock+0x40/0x40 [ 235.508912][ T5792] ? __kthread_parkme+0x71/0x1c0 [ 235.513929][ T5792] kthread+0x2fa/0x390 [ 235.518052][ T5792] ? pr_cont_work+0x550/0x550 [ 235.522798][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 235.527449][ T5792] ret_from_fork+0x48/0x80 [ 235.531932][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 235.536579][ T5792] ret_from_fork_asm+0x11/0x20 [ 235.541434][ T5792] [ 235.559937][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 235.568319][ T5792] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.583729][ T5792] Bluetooth: hci1: failed to register connection device [ 238.339728][ T6546] sctp: [Deprecated]: syz.0.201 (pid 6546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.339728][ T6546] Use struct sctp_sack_info instead [ 241.715711][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 242.196968][ T5792] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 242.833752][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 242.932196][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 243.895111][ T6584] sctp: [Deprecated]: syz.2.212 (pid 6584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.895111][ T6584] Use struct sctp_sack_info instead [ 245.983023][ T6606] omfs: Invalid superblock (0) [ 247.836669][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 249.476427][ T6626] sctp: [Deprecated]: syz.1.223 (pid 6626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.476427][ T6626] Use struct sctp_sack_info instead [ 252.934091][ T6656] sctp: [Deprecated]: syz.0.219 (pid 6656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.934091][ T6656] Use struct sctp_sack_info instead [ 254.175506][ T5792] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 256.029189][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.035754][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.925455][ T6693] sctp: [Deprecated]: syz.1.241 (pid 6693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.925455][ T6693] Use struct sctp_sack_info instead [ 263.744729][ T5792] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 264.002221][ T6730] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio) [ 278.116240][ T6795] FAULT_INJECTION: forcing a failure. [ 278.116240][ T6795] name fail_futex, interval 1, probability 0, space 0, times 1 [ 278.224531][ T6795] CPU: 0 PID: 6795 Comm: syz.1.273 Not tainted syzkaller #0 [ 278.231928][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.242060][ T6795] Call Trace: [ 278.245387][ T6795] [ 278.248357][ T6795] dump_stack_lvl+0x18c/0x250 [ 278.253097][ T6795] ? show_regs_print_info+0x20/0x20 [ 278.258346][ T6795] ? load_image+0x420/0x420 [ 278.262936][ T6795] should_fail_ex+0x394/0x4c0 [ 278.267708][ T6795] get_futex_key+0x136/0x1030 [ 278.272433][ T6795] ? verify_lock_unused+0x140/0x140 [ 278.277685][ T6795] ? futex_setup_timer+0xc0/0xc0 [ 278.282665][ T6795] ? perf_event_namespaces+0x196/0x9e0 [ 278.288172][ T6795] ? perf_event_fork+0x1c0/0x1c0 [ 278.293163][ T6795] futex_wake+0x127/0x4f0 [ 278.297543][ T6795] ? futex_wake_mark+0x150/0x150 [ 278.302532][ T6795] ? __lock_acquire+0x7d80/0x7d80 [ 278.307615][ T6795] do_futex+0x35d/0x3e0 [ 278.311848][ T6795] ? __ia32_sys_get_robust_list+0x110/0x110 [ 278.317796][ T6795] ? fput+0x154/0x1a0 [ 278.321830][ T6795] __se_sys_futex+0x3a9/0x440 [ 278.326564][ T6795] ? __x64_sys_futex+0xf0/0xf0 [ 278.331422][ T6795] ? __x64_sys_futex+0x21/0xf0 [ 278.336232][ T6795] do_syscall_64+0x55/0xb0 [ 278.340737][ T6795] ? clear_bhb_loop+0x40/0x90 [ 278.345475][ T6795] ? clear_bhb_loop+0x40/0x90 [ 278.350237][ T6795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.356185][ T6795] RIP: 0033:0x7fe52c19e159 [ 278.360649][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.380331][ T6795] RSP: 002b:00007fe52cfcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.388821][ T6795] RAX: ffffffffffffffda RBX: 00007fe52c425fa8 RCX: 00007fe52c19e159 [ 278.396839][ T6795] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe52c425fac [ 278.404852][ T6795] RBP: 00007fe52c425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 278.412864][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.420878][ T6795] R13: 00007fe52c426038 R14: 00007ffca3d8a750 R15: 00007ffca3d8a838 [ 278.428918][ T6795] [ 279.233895][ T6807] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 287.930120][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 290.334736][ T5765] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 290.556708][ T5765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.587182][ T5765] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 290.619643][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.835131][ T5765] as10x_usb: device has been detected [ 291.933097][ T5765] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 292.049416][ T5765] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 292.151347][ T5765] as10x_usb: error during firmware upload part1 [ 292.175213][ T5765] Registered device Abilis Systems DVB-Titan [ 294.625263][ T8] usb 4-1: USB disconnect, device number 2 [ 294.782654][ T8] Unregistered device Abilis Systems DVB-Titan [ 295.735317][ T8] as10x_usb: device has been disconnected [ 297.092583][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 301.389293][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 306.877345][ T6959] FAULT_INJECTION: forcing a failure. [ 306.877345][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 306.891006][ T6959] CPU: 0 PID: 6959 Comm: syz.0.322 Not tainted syzkaller #0 [ 306.898352][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.908446][ T6959] Call Trace: [ 306.911775][ T6959] [ 306.914744][ T6959] dump_stack_lvl+0x18c/0x250 [ 306.919476][ T6959] ? sk_alloc+0x3a/0x350 [ 306.923776][ T6959] ? l2cap_sock_create+0x15a/0x2d0 [ 306.928940][ T6959] ? show_regs_print_info+0x20/0x20 [ 306.934211][ T6959] ? load_image+0x420/0x420 [ 306.938791][ T6959] should_fail_ex+0x394/0x4c0 [ 306.943549][ T6959] should_failslab+0x9/0x20 [ 306.948106][ T6959] slab_pre_alloc_hook+0x59/0x300 [ 306.953195][ T6959] ? security_sk_alloc+0x4b/0x130 [ 306.958289][ T6959] ? security_sk_alloc+0x4b/0x130 [ 306.963355][ T6959] __kmem_cache_alloc_node+0x53/0x250 [ 306.968800][ T6959] ? security_sk_alloc+0x4b/0x130 [ 306.973852][ T6959] __kmalloc+0xa7/0x240 [ 306.978052][ T6959] ? sk_prot_alloc+0xe7/0x210 [ 306.982775][ T6959] security_sk_alloc+0x4b/0x130 [ 306.987655][ T6959] sk_prot_alloc+0x101/0x210 [ 306.992315][ T6959] ? sk_alloc+0x24/0x350 [ 306.996582][ T6959] sk_alloc+0x3a/0x350 [ 307.000676][ T6959] bt_sock_alloc+0x3b/0x330 [ 307.005211][ T6959] l2cap_sock_create+0x15a/0x2d0 [ 307.010176][ T6959] bt_sock_create+0x159/0x230 [ 307.014881][ T6959] __sock_create+0x49e/0x940 [ 307.019506][ T6959] __sys_socket+0xd7/0x1b0 [ 307.023953][ T6959] __x64_sys_socket+0x7a/0x90 [ 307.028663][ T6959] do_syscall_64+0x55/0xb0 [ 307.033124][ T6959] ? clear_bhb_loop+0x40/0x90 [ 307.037855][ T6959] ? clear_bhb_loop+0x40/0x90 [ 307.042577][ T6959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.048515][ T6959] RIP: 0033:0x7f1d4bf9e159 [ 307.052960][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.072604][ T6959] RSP: 002b:00007f1d4cdf8fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 307.081056][ T6959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f1d4bf9e159 [ 307.089054][ T6959] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 307.097099][ T6959] RBP: 00007f1d4c03506b R08: 0000000000000000 R09: 0000000000000000 [ 307.105099][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.113097][ T6959] R13: 00007f1d4c226038 R14: 00007f1d4c225fa0 R15: 00007ffc7447fad8 [ 307.121128][ T6959] [ 311.883912][ T6988] ALSA: mixer_oss: invalid OSS volume 'W' [ 318.054326][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.060935][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.300999][ T7023] ALSA: mixer_oss: invalid OSS volume 'W' [ 322.498439][ T7044] Config c/1 of g1 needs at least one function. [ 322.505368][ T7044] udc dummy_udc.0: failed to start g1: -22 [ 322.511274][ T7044] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 322.522079][ T7044] UDC core: g1: couldn't find an available UDC or it's busy [ 325.802026][ T7055] ALSA: mixer_oss: invalid OSS volume 'W' [ 326.371246][ T7058] omfs: Invalid superblock (0) [ 336.978829][ T7092] FAULT_INJECTION: forcing a failure. [ 336.978829][ T7092] name failslab, interval 1, probability 0, space 0, times 0 [ 337.014691][ T7092] CPU: 0 PID: 7092 Comm: syz.2.359 Not tainted syzkaller #0 [ 337.022112][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.032215][ T7092] Call Trace: [ 337.035569][ T7092] [ 337.038547][ T7092] dump_stack_lvl+0x18c/0x250 [ 337.043289][ T7092] ? show_regs_print_info+0x20/0x20 [ 337.048576][ T7092] ? load_image+0x420/0x420 [ 337.053137][ T7092] ? __lock_acquire+0x7d80/0x7d80 [ 337.058219][ T7092] ? rcu_is_watching+0x15/0xb0 [ 337.063045][ T7092] ? __alloc_pages+0x276/0x460 [ 337.067861][ T7092] should_fail_ex+0x394/0x4c0 [ 337.072610][ T7092] should_failslab+0x9/0x20 [ 337.077174][ T7092] slab_pre_alloc_hook+0x59/0x300 [ 337.082286][ T7092] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 337.088242][ T7092] __kmem_cache_alloc_node+0x53/0x250 [ 337.093678][ T7092] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 337.099629][ T7092] kmalloc_trace+0x2a/0xe0 [ 337.104110][ T7092] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 337.109890][ T7092] ? sctp_stream_interleave_init+0x55/0x90 [ 337.115763][ T7092] sctp_association_new+0x15be/0x25b0 [ 337.121191][ T7092] sctp_connect_new_asoc+0x2de/0x6a0 [ 337.126534][ T7092] ? __sctp_connect+0xd80/0xd80 [ 337.131429][ T7092] ? __local_bh_enable_ip+0x13a/0x1c0 [ 337.136856][ T7092] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 337.142459][ T7092] ? security_sctp_bind_connect+0x89/0xb0 [ 337.148274][ T7092] sctp_sendmsg+0x1519/0x27b0 [ 337.153036][ T7092] ? sctp_getsockopt+0xb60/0xb60 [ 337.158040][ T7092] ? aa_af_perm+0x330/0x330 [ 337.162634][ T7092] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 337.169126][ T7092] ? sock_rps_record_flow+0x19/0x3f0 [ 337.174478][ T7092] ? inet_sendmsg+0xce/0x2a0 [ 337.179110][ T7092] ? inet_send_prepare+0x250/0x250 [ 337.184271][ T7092] ____sys_sendmsg+0x61b/0x980 [ 337.189105][ T7092] ? __asan_memset+0x22/0x40 [ 337.193774][ T7092] ? __sys_sendmsg_sock+0x30/0x30 [ 337.198857][ T7092] ? __import_iovec+0x5f2/0x850 [ 337.203781][ T7092] ? import_iovec+0x73/0xa0 [ 337.208355][ T7092] ___sys_sendmsg+0x2a6/0x360 [ 337.213099][ T7092] ? __sys_sendmsg+0x2b0/0x2b0 [ 337.217953][ T7092] ? futex_setup_timer+0xc0/0xc0 [ 337.222977][ T7092] __sys_sendmmsg+0x2ca/0x510 [ 337.227726][ T7092] ? __ia32_sys_sendmsg+0x90/0x90 [ 337.232828][ T7092] ? __ia32_sys_get_robust_list+0x110/0x110 [ 337.238791][ T7092] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.244831][ T7092] ? lock_chain_count+0x20/0x20 [ 337.249743][ T7092] __x64_sys_sendmmsg+0xa0/0xb0 [ 337.254653][ T7092] do_syscall_64+0x55/0xb0 [ 337.259142][ T7092] ? clear_bhb_loop+0x40/0x90 [ 337.263882][ T7092] ? clear_bhb_loop+0x40/0x90 [ 337.268617][ T7092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.274570][ T7092] RIP: 0033:0x7f191939e159 [ 337.279033][ T7092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.298696][ T7092] RSP: 002b:00007f19175f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.307175][ T7092] RAX: ffffffffffffffda RBX: 00007f1919625fa0 RCX: 00007f191939e159 [ 337.315194][ T7092] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000004 [ 337.323208][ T7092] RBP: 00007f191943506b R08: 0000000000000000 R09: 0000000000000000 [ 337.331229][ T7092] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000000 [ 337.339248][ T7092] R13: 00007f1919626038 R14: 00007f1919625fa0 R15: 00007ffe04b2ed48 [ 337.347296][ T7092] [ 341.687684][ T7119] ALSA: mixer_oss: invalid OSS volume 'W' [ 342.290989][ T7127] omfs: Invalid superblock (0) [ 346.262391][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 354.469820][ T7179] ALSA: mixer_oss: invalid OSS volume 'W' [ 361.220057][ T7220] ALSA: mixer_oss: invalid OSS volume 'W' [ 371.572396][ T7279] ALSA: mixer_oss: invalid OSS volume 'W' [ 374.485121][ T7299] FAULT_INJECTION: forcing a failure. [ 374.485121][ T7299] name failslab, interval 1, probability 0, space 0, times 0 [ 374.517018][ T7299] CPU: 1 PID: 7299 Comm: syz.2.419 Not tainted syzkaller #0 [ 374.524408][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.534537][ T7299] Call Trace: [ 374.537977][ T7299] [ 374.541021][ T7299] dump_stack_lvl+0x18c/0x250 [ 374.545995][ T7299] ? show_regs_print_info+0x20/0x20 [ 374.551309][ T7299] ? load_image+0x420/0x420 [ 374.555920][ T7299] ? __might_sleep+0xe0/0xe0 [ 374.560615][ T7299] ? __lock_acquire+0x7d80/0x7d80 [ 374.565790][ T7299] should_fail_ex+0x394/0x4c0 [ 374.570557][ T7299] should_failslab+0x9/0x20 [ 374.575126][ T7299] slab_pre_alloc_hook+0x59/0x300 [ 374.580255][ T7299] kmem_cache_alloc+0x5a/0x2c0 [ 374.585099][ T7299] ? security_file_alloc+0x34/0x120 [ 374.590388][ T7299] security_file_alloc+0x34/0x120 [ 374.595481][ T7299] init_file+0x94/0x1f0 [ 374.599687][ T7299] alloc_empty_file+0xb7/0x1d0 [ 374.604499][ T7299] alloc_file+0x5b/0x600 [ 374.608793][ T7299] alloc_file_pseudo+0x184/0x210 [ 374.613810][ T7299] ? fput+0x1a0/0x1a0 [ 374.617868][ T7299] ? alloc_fd+0x590/0x640 [ 374.622298][ T7299] sock_alloc_file+0xb7/0x280 [ 374.627131][ T7299] __sys_socket+0x140/0x1b0 [ 374.631701][ T7299] __x64_sys_socket+0x7a/0x90 [ 374.636431][ T7299] do_syscall_64+0x55/0xb0 [ 374.640907][ T7299] ? clear_bhb_loop+0x40/0x90 [ 374.645756][ T7299] ? clear_bhb_loop+0x40/0x90 [ 374.650499][ T7299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.656444][ T7299] RIP: 0033:0x7f191939e159 [ 374.660989][ T7299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.680704][ T7299] RSP: 002b:00007f19175f5fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 374.689154][ T7299] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f191939e159 [ 374.697148][ T7299] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 374.705143][ T7299] RBP: 00007f191943506b R08: 0000000000000000 R09: 0000000000000000 [ 374.713161][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.721252][ T7299] R13: 00007f1919626038 R14: 00007f1919625fa0 R15: 00007ffe04b2ed48 [ 374.729270][ T7299] [ 376.297258][ T7311] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7312] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7311] [ 378.226256][ T7315] omfs: Invalid superblock (0) [ 378.980932][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.991139][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.579731][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 386.104367][ C1] sched: RT throttling activated [ 387.114801][ T7376] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 387.795041][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'. [ 392.299625][ T7401] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7402] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7401] [ 403.905885][ T7461] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 406.675736][ T7454] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7467] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7454] [ 407.784433][ T7474] o2cb: This node has not been configured. [ 407.790717][ T7474] o2cb: Cluster check failed. Fix errors before retrying. [ 407.800436][ T7474] (syz.3.464,7474,0):user_dlm_register:674 ERROR: status = -22 [ 407.808405][ T7474] (syz.3.464,7474,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 411.956714][ T7496] FAULT_INJECTION: forcing a failure. [ 411.956714][ T7496] name fail_futex, interval 1, probability 0, space 0, times 0 [ 411.970034][ T7496] CPU: 0 PID: 7496 Comm: syz.1.471 Not tainted syzkaller #0 [ 411.977393][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 411.987478][ T7496] Call Trace: [ 411.990787][ T7496] [ 411.993777][ T7496] dump_stack_lvl+0x18c/0x250 [ 411.998501][ T7496] ? show_regs_print_info+0x20/0x20 [ 412.003729][ T7496] ? load_image+0x420/0x420 [ 412.008294][ T7496] should_fail_ex+0x394/0x4c0 [ 412.013057][ T7496] futex_lock_pi_atomic+0x11b/0xd00 [ 412.018287][ T7496] ? pi_state_update_owner+0x340/0x340 [ 412.023775][ T7496] ? futex_setup_timer+0xc0/0xc0 [ 412.028765][ T7496] futex_lock_pi+0x22b/0xa00 [ 412.033389][ T7496] ? futex_wait_queue+0x138/0x1b0 [ 412.038439][ T7496] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 412.043867][ T7496] ? file_end_write+0x159/0x250 [ 412.048765][ T7496] ? vfs_write+0x5de/0x9a0 [ 412.053222][ T7496] do_futex+0x23d/0x3e0 [ 412.057409][ T7496] ? __ia32_sys_get_robust_list+0x110/0x110 [ 412.063342][ T7496] __se_sys_futex+0x3a9/0x440 [ 412.068051][ T7496] ? __x64_sys_futex+0xf0/0xf0 [ 412.072843][ T7496] ? __x64_sys_futex+0x21/0xf0 [ 412.077634][ T7496] do_syscall_64+0x55/0xb0 [ 412.082103][ T7496] ? clear_bhb_loop+0x40/0x90 [ 412.086882][ T7496] ? clear_bhb_loop+0x40/0x90 [ 412.091615][ T7496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.097557][ T7496] RIP: 0033:0x7fe52c19e159 [ 412.102018][ T7496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.121670][ T7496] RSP: 002b:00007fe52cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.130145][ T7496] RAX: ffffffffffffffda RBX: 00007fe52c425fa0 RCX: 00007fe52c19e159 [ 412.138161][ T7496] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 412.146344][ T7496] RBP: 00007fe52c23506b R08: 0000000000000000 R09: 0000000000000000 [ 412.154366][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.162372][ T7496] R13: 00007fe52c426038 R14: 00007fe52c425fa0 R15: 00007ffca3d8a838 [ 412.170391][ T7496] [ 413.726689][ T7502] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7503] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7502] [ 419.966619][ T7531] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7532] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7531] [ 427.022963][ T7554] Config c/1 of g1 needs at least one function. [ 427.073332][ T7554] udc usbip-vudc.0: failed to start g1: -22 [ 427.094670][ T7554] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 427.162674][ T7554] UDC core: g1: couldn't find an available UDC or it's busy [ 428.866838][ T7567] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7568] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7567] [ 433.034271][ T7583] omfs: Invalid superblock (0) [ 438.244615][ T7608] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7609] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7608] [ 440.532311][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.546093][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.845381][ T5786] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 447.055881][ T5786] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 448.664465][ T7646] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7664] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7646] [ 462.284586][ T7717] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7718] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7717] [ 466.399397][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 466.469086][ T5792] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 467.868839][ T7744] omfs: Invalid superblock (0) [ 474.017413][ T7770] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(12339.8192.232), cmd(3) [ 474.566674][ T5786] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 475.226879][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 481.304667][ T5817] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 481.517017][ T5817] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 481.541300][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.610832][ T5817] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 481.665759][ T5817] usb 1-1: config 1 has no interface number 1 [ 481.716829][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.232697][ T5817] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.321810][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.381219][ T5817] usb 1-1: Product: syz [ 483.398440][ T5817] usb 1-1: Manufacturer: syz [ 483.403139][ T5817] usb 1-1: SerialNumber: syz [ 484.996686][ T5817] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 485.015020][ T5817] usb 1-1: MIDIStreaming interface descriptor not found [ 485.147022][ T5817] usb 1-1: USB disconnect, device number 4 [ 486.813067][ T7828] udevd[7828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.458201][ T7847] overlayfs: failed to resolve './bus': -2 [ 500.725247][ T7879] omfs: Invalid superblock (0) [ 501.787424][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.793816][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.664438][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 523.385306][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 529.774635][ T8003] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8005] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8003] [ 532.264378][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 533.693176][ T8021] device-mapper: ioctl: name not supplied when creating device [ 533.855696][ T5817] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 535.025904][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.126756][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 535.139904][ T5817] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 535.151325][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 535.159866][ T5817] usb 1-1: Product: syz [ 535.164145][ T5817] usb 1-1: Manufacturer: syz [ 535.169349][ T5817] usb 1-1: SerialNumber: syz [ 535.182738][ T5817] usb 1-1: config 0 descriptor?? [ 535.229131][ T5817] imon_raw 1-1:0.0: IR endpoint missing [ 535.944625][ T8035] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8037] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8035] [ 536.502514][ T8032] kvm: emulating exchange as write [ 536.540199][ T8032] [ 536.540548][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 536.566847][ T5817] usb 1-1: USB disconnect, device number 5 [ 538.858542][ T8045] Bluetooth: hci2: command 0x0406 tx timeout [ 540.314386][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.630'. [ 543.626077][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 548.594619][ T8097] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8100] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8097] [ 551.154352][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 557.394661][ T8132] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8136] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8132] [ 560.454641][ T8140] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8142] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8140] [ 562.984638][ T8045] Bluetooth: hci2: command 0x0406 tx timeout [ 563.229713][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.236896][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.374390][ T174] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 567.586777][ T174] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 567.605711][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.630369][ T174] usb 1-1: config 0 descriptor?? [ 567.660010][ T174] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 567.774498][ T174] gp8psk: usb in 128 operation failed. [ 567.794392][ T174] gp8psk: usb in 137 operation failed. [ 567.800037][ T174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 567.856488][ T174] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 567.887584][ T174] usb 1-1: media controller created [ 568.524552][ T8180] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8182] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8180] [ 569.113862][ T174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.674559][ T8178] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8184] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8178] [ 570.206509][ T174] gp8psk_fe: Frontend attached [ 570.217620][ T174] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 570.226841][ T174] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 570.412888][ T174] gp8psk: usb in 138 operation failed. [ 570.423909][ T174] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 570.433802][ T174] gp8psk: found Genpix USB device pID = 203 (hex) [ 570.454719][ T174] usb 1-1: USB disconnect, device number 6 [ 570.575299][ T174] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 571.070230][ T1322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.811704][ T1322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.184510][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 572.271117][ T1322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.643622][ T1322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.415186][ T8210] binder: BINDER_SET_CONTEXT_MGR already set [ 575.422350][ T8210] binder: 8205:8210 ioctl 4018620d 200000000040 returned -16 [ 575.433189][ T8210] binder: 8205:8210 ioctl c0306201 0 returned -14 [ 576.333386][ T8045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 576.343933][ T8045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 576.355768][ T8045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 576.377099][ T8045] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 576.385167][ T8045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 576.392644][ T8045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 577.701156][ T8215] chnl_net:caif_netlink_parms(): no params data found [ 578.522173][ T5792] Bluetooth: hci0: command tx timeout [ 580.654624][ T8246] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8249] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8246] [ 581.206027][ T5792] Bluetooth: hci0: command tx timeout [ 581.855416][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'. [ 581.865068][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.872275][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.923031][ T8215] bridge_slave_0: entered allmulticast mode [ 581.966332][ T8215] bridge_slave_0: entered promiscuous mode [ 582.035458][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.042700][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.094622][ T8215] bridge_slave_1: entered allmulticast mode [ 582.102210][ T8215] bridge_slave_1: entered promiscuous mode [ 582.152633][ T1322] hsr_slave_0: left promiscuous mode [ 582.168999][ T1322] hsr_slave_1: left promiscuous mode [ 582.185849][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.199696][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.226724][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.249248][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.273937][ T1322] bridge_slave_1: left allmulticast mode [ 582.288293][ T1322] bridge_slave_1: left promiscuous mode [ 582.295863][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.413029][ T1322] bridge_slave_0: left allmulticast mode [ 582.420072][ T1322] bridge_slave_0: left promiscuous mode [ 582.450100][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.540779][ T8045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.551578][ T8045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.560254][ T8045] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.587313][ T8045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.602669][ T8045] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 582.610738][ T8045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 583.705832][ T8272] o2cb: This node has not been configured. [ 583.711701][ T8272] o2cb: Cluster check failed. Fix errors before retrying. [ 583.719781][ T8272] (syz.1.680,8272,1):user_dlm_register:674 ERROR: status = -22 [ 583.727417][ T8272] (syz.1.680,8272,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 583.791803][ T5792] Bluetooth: hci0: command tx timeout [ 584.101263][ T1322] veth1_macvtap: left promiscuous mode [ 584.116320][ T1322] veth0_macvtap: left promiscuous mode [ 584.122065][ T1322] veth1_vlan: left promiscuous mode [ 584.153958][ T1322] veth0_vlan: left promiscuous mode [ 585.743514][ T8045] Bluetooth: hci1: command tx timeout [ 585.864418][ T8045] Bluetooth: hci0: command tx timeout [ 588.125276][ T8045] Bluetooth: hci1: command tx timeout [ 588.539156][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 588.588729][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 588.658071][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.720836][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.584625][ T8299] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8301] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8299] [ 591.145137][ T8045] Bluetooth: hci1: command tx timeout [ 591.219992][ T1322] bond0 (unregistering): Released all slaves [ 591.512673][ T8215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.525829][ T8215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.642470][ T8215] team0: Port device team_slave_0 added [ 591.674155][ T8215] team0: Port device team_slave_1 added [ 591.780435][ T8215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.790275][ T8215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.845147][ T8215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.878693][ T8215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.896590][ T8215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.958640][ T8215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.545594][ T8215] hsr_slave_0: entered promiscuous mode [ 592.607867][ T8215] hsr_slave_1: entered promiscuous mode [ 593.225311][ T8045] Bluetooth: hci1: command tx timeout [ 596.294787][ T8328] o2cb: This node has not been configured. [ 596.300673][ T8328] o2cb: Cluster check failed. Fix errors before retrying. [ 596.307917][ T8328] (syz.1.690,8328,1):user_dlm_register:674 ERROR: status = -22 [ 596.316074][ T8328] (syz.1.690,8328,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 596.495051][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 596.631837][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.772173][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.937118][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.122592][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.371326][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.404830][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.412146][ T8265] bridge_slave_0: entered allmulticast mode [ 598.542045][ T8265] bridge_slave_0: entered promiscuous mode [ 598.718546][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.744576][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.751927][ T8265] bridge_slave_1: entered allmulticast mode [ 598.770892][ T8265] bridge_slave_1: entered promiscuous mode [ 599.248211][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.286348][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.682675][ T8265] team0: Port device team_slave_0 added [ 599.703804][ T8265] team0: Port device team_slave_1 added [ 599.963391][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.565525][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.597951][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.682201][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.697730][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.733186][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.919104][ T8265] hsr_slave_0: entered promiscuous mode [ 601.935701][ T8265] hsr_slave_1: entered promiscuous mode [ 601.942085][ T8265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.964467][ T8265] Cannot create hsr debugfs directory [ 601.992469][ T8215] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.174372][ T8215] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.196057][ T8215] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.323398][ T8215] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 605.329345][ T8215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.551199][ T8215] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.622751][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.629998][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.674283][ T1322] hsr_slave_0: left promiscuous mode [ 605.680669][ T1322] hsr_slave_1: left promiscuous mode [ 605.707597][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.725405][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.745333][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.752910][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.761450][ T1322] bridge_slave_1: left allmulticast mode [ 605.767793][ T1322] bridge_slave_1: left promiscuous mode [ 605.773717][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.783993][ T1322] bridge_slave_0: left allmulticast mode [ 605.789956][ T1322] bridge_slave_0: left promiscuous mode [ 605.796705][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.830300][ T1322] veth1_macvtap: left promiscuous mode [ 605.837023][ T1322] veth0_macvtap: left promiscuous mode [ 605.842845][ T1322] veth1_vlan: left promiscuous mode [ 605.850613][ T1322] veth0_vlan: left promiscuous mode [ 608.119867][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 608.201833][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 608.279559][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.361482][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.426404][ T1322] bond0 (unregistering): Released all slaves [ 609.597164][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.604435][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.831781][ T8265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 610.565346][ T8265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 610.990463][ T8265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 611.045653][ T8265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 611.667114][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.995747][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.046437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.054512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.196935][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.204201][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.335421][ T8215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.427129][ T8045] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 614.438038][ T8045] CPU: 0 PID: 8045 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 614.445682][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 614.455788][ T8045] Workqueue: hci3 hci_rx_work [ 614.460656][ T8045] Call Trace: [ 614.463974][ T8045] [ 614.466948][ T8045] dump_stack_lvl+0x18c/0x250 [ 614.471686][ T8045] ? show_regs_print_info+0x20/0x20 [ 614.476938][ T8045] ? load_image+0x420/0x420 [ 614.481507][ T8045] sysfs_create_dir_ns+0x26e/0x2a0 [ 614.486702][ T8045] ? __lock_acquire+0x7d80/0x7d80 [ 614.491781][ T8045] ? sysfs_warn_dup+0xa0/0xa0 [ 614.496512][ T8045] ? do_raw_spin_unlock+0x121/0x230 [ 614.501763][ T8045] kobject_add_internal+0x617/0xc90 [ 614.507071][ T8045] kobject_add+0x164/0x240 [ 614.511537][ T8045] ? kobject_init+0x1d0/0x1d0 [ 614.516271][ T8045] ? get_device_parent+0x366/0x390 [ 614.521494][ T8045] device_add+0x3fa/0xc40 [ 614.525876][ T8045] hci_conn_add_sysfs+0xd5/0x1e0 [ 614.530986][ T8045] le_conn_complete_evt+0xe9a/0x1480 [ 614.536384][ T8045] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 614.542689][ T8045] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 614.548473][ T8045] ? mutex_unlock+0x10/0x10 [ 614.553022][ T8045] ? skb_pull_data+0xf0/0x1f0 [ 614.557778][ T8045] hci_le_conn_complete_evt+0x187/0x440 [ 614.563385][ T8045] ? hci_remote_host_features_evt+0x150/0x150 [ 614.569502][ T8045] hci_event_packet+0x7b4/0x1280 [ 614.574489][ T8045] ? __lock_acquire+0x7d80/0x7d80 [ 614.579603][ T8045] ? lock_chain_count+0x20/0x20 [ 614.584529][ T8045] ? bis_list+0x290/0x290 [ 614.588938][ T8045] ? kcov_remote_start+0x513/0x810 [ 614.594119][ T8045] ? lockdep_hardirqs_on+0x98/0x150 [ 614.599450][ T8045] ? hci_send_to_monitor+0xd7/0x4f0 [ 614.604715][ T8045] hci_rx_work+0x43a/0xd60 [ 614.609196][ T8045] ? process_scheduled_works+0x975/0x1600 [ 614.614988][ T8045] process_scheduled_works+0xa60/0x1600 [ 614.620650][ T8045] ? worker_attach_to_pool+0x370/0x370 [ 614.626186][ T8045] ? assign_work+0x3cc/0x5d0 [ 614.630840][ T8045] worker_thread+0xa5e/0xfe0 [ 614.635496][ T8045] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 614.641456][ T8045] ? _raw_spin_unlock+0x40/0x40 [ 614.646365][ T8045] ? __kthread_parkme+0x71/0x1c0 [ 614.651368][ T8045] kthread+0x2fa/0x390 [ 614.655486][ T8045] ? pr_cont_work+0x550/0x550 [ 614.660223][ T8045] ? kthread_blkcg+0xd0/0xd0 [ 614.664861][ T8045] ret_from_fork+0x48/0x80 [ 614.669363][ T8045] ? kthread_blkcg+0xd0/0xd0 [ 614.674001][ T8045] ret_from_fork_asm+0x11/0x20 [ 614.678866][ T8045] [ 614.692294][ T8045] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 614.713227][ T8045] Bluetooth: hci3: failed to register connection device [ 614.900329][ T8215] veth0_vlan: entered promiscuous mode [ 614.926920][ T8215] veth1_vlan: entered promiscuous mode [ 615.030365][ T8215] veth0_macvtap: entered promiscuous mode [ 615.070388][ T8215] veth1_macvtap: entered promiscuous mode [ 615.141831][ T8215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.174399][ T8215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.194365][ T8215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.224702][ T8215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.243881][ T8215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.258772][ T8215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.278041][ T8215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.298738][ T8215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.330917][ T8215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.347574][ T8215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.370976][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.497530][ T8215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.547874][ T8215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.557302][ T8215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.566519][ T8215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.982486][ T8265] veth0_vlan: entered promiscuous mode [ 617.027079][ T8265] veth1_vlan: entered promiscuous mode [ 617.039146][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.053126][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.178745][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.813196][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.975675][ T8265] veth0_macvtap: entered promiscuous mode [ 619.018684][ T8265] veth1_macvtap: entered promiscuous mode [ 619.097973][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.143561][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.179790][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.214303][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.299458][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.344754][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.387176][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.420748][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.474492][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.514416][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.545623][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.584434][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.554702][ T8494] o2cb: This node has not been configured. [ 620.560623][ T8494] o2cb: Cluster check failed. Fix errors before retrying. [ 620.567901][ T8494] (syz.2.720,8494,1):user_dlm_register:674 ERROR: status = -22 [ 620.575556][ T8494] (syz.2.720,8494,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 620.988547][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 620.995576][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.087961][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.147482][ T8265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.204316][ T8265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.213106][ T8265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.274320][ T8265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.561692][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.615118][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.734492][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.742405][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.677610][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.684013][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.308585][ T8045] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 636.319009][ T8045] CPU: 1 PID: 8045 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 636.326593][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 636.336668][ T8045] Workqueue: hci1 hci_rx_work [ 636.341387][ T8045] Call Trace: [ 636.344698][ T8045] [ 636.347679][ T8045] dump_stack_lvl+0x18c/0x250 [ 636.352390][ T8045] ? show_regs_print_info+0x20/0x20 [ 636.357634][ T8045] ? load_image+0x420/0x420 [ 636.362163][ T8045] sysfs_create_dir_ns+0x26e/0x2a0 [ 636.367307][ T8045] ? __lock_acquire+0x7d80/0x7d80 [ 636.372344][ T8045] ? sysfs_warn_dup+0xa0/0xa0 [ 636.377041][ T8045] ? do_raw_spin_unlock+0x121/0x230 [ 636.382281][ T8045] kobject_add_internal+0x617/0xc90 [ 636.387507][ T8045] kobject_add+0x164/0x240 [ 636.391939][ T8045] ? kobject_init+0x1d0/0x1d0 [ 636.396647][ T8045] ? get_device_parent+0x366/0x390 [ 636.401787][ T8045] device_add+0x3fa/0xc40 [ 636.406136][ T8045] hci_conn_add_sysfs+0xd5/0x1e0 [ 636.411100][ T8045] le_conn_complete_evt+0xe9a/0x1480 [ 636.416414][ T8045] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 636.422674][ T8045] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 636.428328][ T8045] ? mutex_unlock+0x10/0x10 [ 636.432869][ T8045] ? skb_pull_data+0xf0/0x1f0 [ 636.437568][ T8045] hci_le_conn_complete_evt+0x187/0x440 [ 636.443146][ T8045] ? hci_remote_host_features_evt+0x150/0x150 [ 636.449226][ T8045] hci_event_packet+0x7b4/0x1280 [ 636.454185][ T8045] ? __lock_acquire+0x7d80/0x7d80 [ 636.459281][ T8045] ? lock_chain_count+0x20/0x20 [ 636.464152][ T8045] ? bis_list+0x290/0x290 [ 636.468505][ T8045] ? kcov_remote_start+0x513/0x810 [ 636.473638][ T8045] ? lockdep_hardirqs_on+0x98/0x150 [ 636.478857][ T8045] ? hci_send_to_monitor+0xd7/0x4f0 [ 636.484094][ T8045] hci_rx_work+0x43a/0xd60 [ 636.488538][ T8045] ? process_scheduled_works+0x975/0x1600 [ 636.494315][ T8045] process_scheduled_works+0xa60/0x1600 [ 636.499938][ T8045] ? worker_attach_to_pool+0x370/0x370 [ 636.505429][ T8045] ? assign_work+0x3cc/0x5d0 [ 636.510066][ T8045] worker_thread+0xa5e/0xfe0 [ 636.514681][ T8045] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 636.520616][ T8045] ? _raw_spin_unlock+0x40/0x40 [ 636.525487][ T8045] ? __kthread_parkme+0x71/0x1c0 [ 636.530447][ T8045] kthread+0x2fa/0x390 [ 636.534526][ T8045] ? pr_cont_work+0x550/0x550 [ 636.539249][ T8045] ? kthread_blkcg+0xd0/0xd0 [ 636.543854][ T8045] ret_from_fork+0x48/0x80 [ 636.548306][ T8045] ? kthread_blkcg+0xd0/0xd0 [ 636.552913][ T8045] ret_from_fork_asm+0x11/0x20 [ 636.557761][ T8045] [ 636.728575][ T8045] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 636.742903][ T8045] Bluetooth: hci1: failed to register connection device [ 636.772280][ T8592] o2cb: This node has not been configured. [ 636.778412][ T8592] o2cb: Cluster check failed. Fix errors before retrying. [ 636.785797][ T8592] (syz.0.734,8592,0):user_dlm_register:674 ERROR: status = -22 [ 636.793517][ T8592] (syz.0.734,8592,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 642.128783][ T5792] Bluetooth: hci1: link tx timeout [ 642.144331][ T5792] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.185129][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 645.871646][ T8642] o2cb: This node has not been configured. [ 645.879585][ T8642] o2cb: Cluster check failed. Fix errors before retrying. [ 645.887150][ T8642] (syz.3.744,8642,0):user_dlm_register:674 ERROR: status = -22 [ 645.894861][ T8642] (syz.3.744,8642,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 646.264347][ T8045] Bluetooth: hci1: command 0x0406 tx timeout [ 648.236332][ T8045] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 648.405980][ T8660] mmap: syz.0.742 (8660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 649.723823][ T8670] FAULT_INJECTION: forcing a failure. [ 649.723823][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 649.840256][ T8670] CPU: 1 PID: 8670 Comm: syz.1.750 Not tainted syzkaller #0 [ 649.847638][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.857758][ T8670] Call Trace: [ 649.861106][ T8670] [ 649.864082][ T8670] dump_stack_lvl+0x18c/0x250 [ 649.868832][ T8670] ? show_regs_print_info+0x20/0x20 [ 649.874088][ T8670] ? load_image+0x420/0x420 [ 649.878652][ T8670] ? __lock_acquire+0x7d80/0x7d80 [ 649.883729][ T8670] should_fail_ex+0x394/0x4c0 [ 649.888554][ T8670] should_failslab+0x9/0x20 [ 649.893117][ T8670] slab_pre_alloc_hook+0x59/0x300 [ 649.898205][ T8670] ? newque+0x88/0x480 [ 649.902331][ T8670] __kmem_cache_alloc_node+0x53/0x250 [ 649.907765][ T8670] ? newque+0x88/0x480 [ 649.911882][ T8670] kmalloc_trace+0x2a/0xe0 [ 649.916355][ T8670] newque+0x88/0x480 [ 649.920313][ T8670] ipcget+0x1d1/0xe10 [ 649.924356][ T8670] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 649.930385][ T8670] ? preempt_schedule_notrace+0x110/0x110 [ 649.936163][ T8670] ? lock_chain_count+0x20/0x20 [ 649.941058][ T8670] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 649.946758][ T8670] ? lockdep_hardirqs_on+0x98/0x150 [ 649.952027][ T8670] __x64_sys_msgget+0x11b/0x160 [ 649.956934][ T8670] ? newque+0x480/0x480 [ 649.961154][ T8670] do_syscall_64+0x55/0xb0 [ 649.965620][ T8670] ? clear_bhb_loop+0x40/0x90 [ 649.970365][ T8670] ? clear_bhb_loop+0x40/0x90 [ 649.975106][ T8670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.981059][ T8670] RIP: 0033:0x7fe52c19e159 [ 649.985526][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.005174][ T8670] RSP: 002b:00007fe52cfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 650.013647][ T8670] RAX: ffffffffffffffda RBX: 00007fe52c425fa0 RCX: 00007fe52c19e159 [ 650.021692][ T8670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.029712][ T8670] RBP: 00007fe52c23506b R08: 0000000000000000 R09: 0000000000000000 [ 650.037733][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.045768][ T8670] R13: 00007fe52c426038 R14: 00007fe52c425fa0 R15: 00007ffca3d8a838 [ 650.053800][ T8670] [ 654.183895][ T8045] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 654.189472][ T8703] o2cb: This node has not been configured. [ 654.199879][ T8703] o2cb: Cluster check failed. Fix errors before retrying. [ 654.210210][ T8703] (syz.1.754,8703,0):user_dlm_register:674 ERROR: status = -22 [ 654.218839][ T8703] (syz.1.754,8703,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 662.066137][ T8045] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 667.000907][ T8045] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 667.012122][ T8045] CPU: 0 PID: 8045 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 667.019740][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.029844][ T8045] Workqueue: hci0 hci_rx_work [ 667.034582][ T8045] Call Trace: [ 667.037888][ T8045] [ 667.040847][ T8045] dump_stack_lvl+0x18c/0x250 [ 667.045563][ T8045] ? show_regs_print_info+0x20/0x20 [ 667.050801][ T8045] ? load_image+0x420/0x420 [ 667.055353][ T8045] sysfs_create_dir_ns+0x26e/0x2a0 [ 667.060496][ T8045] ? __lock_acquire+0x7d80/0x7d80 [ 667.065554][ T8045] ? sysfs_warn_dup+0xa0/0xa0 [ 667.070285][ T8045] ? do_raw_spin_unlock+0x121/0x230 [ 667.075540][ T8045] kobject_add_internal+0x617/0xc90 [ 667.080782][ T8045] kobject_add+0x164/0x240 [ 667.085234][ T8045] ? kobject_init+0x1d0/0x1d0 [ 667.089941][ T8045] ? get_device_parent+0x366/0x390 [ 667.095098][ T8045] device_add+0x3fa/0xc40 [ 667.099466][ T8045] hci_conn_add_sysfs+0xd5/0x1e0 [ 667.104466][ T8045] le_conn_complete_evt+0xe9a/0x1480 [ 667.109800][ T8045] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 667.116083][ T8045] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 667.121753][ T8045] ? mutex_unlock+0x10/0x10 [ 667.126307][ T8045] ? skb_pull_data+0xf0/0x1f0 [ 667.131045][ T8045] hci_le_conn_complete_evt+0x187/0x440 [ 667.136629][ T8045] ? hci_remote_host_features_evt+0x150/0x150 [ 667.142988][ T8045] hci_event_packet+0x7b4/0x1280 [ 667.147978][ T8045] ? __lock_acquire+0x7d80/0x7d80 [ 667.153033][ T8045] ? lock_chain_count+0x20/0x20 [ 667.157911][ T8045] ? bis_list+0x290/0x290 [ 667.162276][ T8045] ? kcov_remote_start+0x513/0x810 [ 667.167464][ T8045] ? lockdep_hardirqs_on+0x98/0x150 [ 667.172706][ T8045] ? hci_send_to_monitor+0xd7/0x4f0 [ 667.177962][ T8045] hci_rx_work+0x43a/0xd60 [ 667.182419][ T8045] ? process_scheduled_works+0x975/0x1600 [ 667.188176][ T8045] process_scheduled_works+0xa60/0x1600 [ 667.193781][ T8045] ? worker_attach_to_pool+0x370/0x370 [ 667.199283][ T8045] ? assign_work+0x3cc/0x5d0 [ 667.203913][ T8045] worker_thread+0xa5e/0xfe0 [ 667.208544][ T8045] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 667.214477][ T8045] ? _raw_spin_unlock+0x40/0x40 [ 667.219358][ T8045] ? __kthread_parkme+0x71/0x1c0 [ 667.224331][ T8045] kthread+0x2fa/0x390 [ 667.228424][ T8045] ? pr_cont_work+0x550/0x550 [ 667.233134][ T8045] ? kthread_blkcg+0xd0/0xd0 [ 667.237749][ T8045] ret_from_fork+0x48/0x80 [ 667.242195][ T8045] ? kthread_blkcg+0xd0/0xd0 [ 667.246812][ T8045] ret_from_fork_asm+0x11/0x20 [ 667.251624][ T8045] [ 667.314417][ T8045] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 667.328680][ T8045] Bluetooth: hci0: failed to register connection device [ 668.373974][ T8774] Zero length message leads to an empty skb [ 669.557843][ T8790] FAULT_INJECTION: forcing a failure. [ 669.557843][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 669.652222][ T8790] CPU: 1 PID: 8790 Comm: syz.2.776 Not tainted syzkaller #0 [ 669.659608][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.669716][ T8790] Call Trace: [ 669.673051][ T8790] [ 669.676050][ T8790] dump_stack_lvl+0x18c/0x250 [ 669.680790][ T8790] ? show_regs_print_info+0x20/0x20 [ 669.686089][ T8790] ? load_image+0x420/0x420 [ 669.690682][ T8790] ? __might_fault+0xaa/0x120 [ 669.695414][ T8790] ? __lock_acquire+0x7d80/0x7d80 [ 669.700503][ T8790] ? __local_bh_enable_ip+0x13a/0x1c0 [ 669.705928][ T8790] ? _local_bh_enable+0xa0/0xa0 [ 669.710840][ T8790] should_fail_ex+0x394/0x4c0 [ 669.715584][ T8790] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 669.721200][ T8790] ? __stack_depot_save+0x1f/0x660 [ 669.726400][ T8790] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 669.732190][ T8790] ? fpregs_set+0x370/0x370 [ 669.736751][ T8790] ? get_signal+0x9fc/0x1390 [ 669.741441][ T8790] ? fpu__alloc_mathframe+0xa7/0x120 [ 669.746792][ T8790] get_sigframe+0x5de/0x7d0 [ 669.751406][ T8790] ? load_gs_index+0x1a0/0x1a0 [ 669.756231][ T8790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 669.762265][ T8790] ? get_signal+0x1197/0x1390 [ 669.766998][ T8790] x64_setup_rt_frame+0x164/0xc30 [ 669.772092][ T8790] ? lockdep_hardirqs_on+0x98/0x150 [ 669.777351][ T8790] ? _raw_spin_unlock_irq+0x2e/0x50 [ 669.782607][ T8790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 669.788650][ T8790] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 669.794257][ T8790] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 669.800143][ T8790] arch_do_signal_or_restart+0x411/0x7b0 [ 669.805846][ T8790] ? get_sigframe_size+0x20/0x20 [ 669.810886][ T8790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 669.816950][ T8790] ? exit_to_user_mode_loop+0x3b/0x110 [ 669.822471][ T8790] exit_to_user_mode_loop+0x70/0x110 [ 669.827827][ T8790] exit_to_user_mode_prepare+0xee/0x180 [ 669.833447][ T8790] irqentry_exit_to_user_mode+0x9/0x30 [ 669.838971][ T8790] exc_page_fault+0x8c/0x100 [ 669.843617][ T8790] asm_exc_page_fault+0x26/0x30 [ 669.848534][ T8790] RIP: 0033:0x7f4d4d9872df [ 669.853004][ T8790] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 669.872713][ T8790] RSP: 002b:00007f4d4e903bd8 EFLAGS: 00010283 [ 669.878839][ T8790] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 669.886850][ T8790] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f4d4e903c00 [ 669.894862][ T8790] RBP: 00007f4d4e903c00 R08: 0000000000000000 R09: 0000000000000000 [ 669.902895][ T8790] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 669.910927][ T8790] R13: 00007f4d4dc26038 R14: 00007f4d4dc25fa0 R15: 00007ffeaa49d828 [ 669.918974][ T8790] [ 672.264459][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 673.616100][ T8045] Bluetooth: hci0: command 0x0406 tx timeout [ 680.658243][ T8841] Format for deleting device is "id" (uint). [ 682.270822][ T8851] FAULT_INJECTION: forcing a failure. [ 682.270822][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 682.305224][ T8851] CPU: 1 PID: 8851 Comm: syz.1.794 Not tainted syzkaller #0 [ 682.312606][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 682.322723][ T8851] Call Trace: [ 682.326060][ T8851] [ 682.329040][ T8851] dump_stack_lvl+0x18c/0x250 [ 682.333791][ T8851] ? show_regs_print_info+0x20/0x20 [ 682.339059][ T8851] ? load_image+0x420/0x420 [ 682.343628][ T8851] ? __might_sleep+0xe0/0xe0 [ 682.348288][ T8851] ? __lock_acquire+0x7d80/0x7d80 [ 682.353370][ T8851] ? mark_lock+0x94/0x320 [ 682.357784][ T8851] should_fail_ex+0x394/0x4c0 [ 682.362538][ T8851] should_failslab+0x9/0x20 [ 682.367115][ T8851] slab_pre_alloc_hook+0x59/0x300 [ 682.372229][ T8851] ? snd_seq_port_connect+0x6b/0x420 [ 682.377673][ T8851] __kmem_cache_alloc_node+0x53/0x250 [ 682.383123][ T8851] ? snd_seq_port_connect+0x6b/0x420 [ 682.388475][ T8851] kmalloc_trace+0x2a/0xe0 [ 682.392970][ T8851] snd_seq_port_connect+0x6b/0x420 [ 682.398156][ T8851] ? do_raw_read_unlock+0x3d/0x80 [ 682.403249][ T8851] ? _raw_read_unlock+0x28/0x40 [ 682.408183][ T8851] snd_seq_ioctl_subscribe_port+0x318/0x6e0 [ 682.414139][ T8851] ? snd_seq_oss_midi_open+0x19a/0x800 [ 682.419756][ T8851] ? snd_seq_ioctl_set_port_info+0x1a0/0x1a0 [ 682.425790][ T8851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 682.431722][ T8851] ? _raw_spin_unlock+0x40/0x40 [ 682.436630][ T8851] ? mark_lock+0x94/0x320 [ 682.441003][ T8851] snd_seq_oss_midi_open+0x3e1/0x800 [ 682.446331][ T8851] ? snd_seq_oss_midi_open_all+0xc0/0xc0 [ 682.452032][ T8851] ? snd_seq_oss_midi_get_addr+0x16b/0x260 [ 682.457897][ T8851] snd_seq_oss_synth_setup_midi+0x12d/0x520 [ 682.463874][ T8851] snd_seq_oss_open+0x956/0xf10 [ 682.468777][ T8851] ? snd_seq_oss_delete_client+0x50/0x50 [ 682.474515][ T8851] ? trace_raw_output_contention_end+0xd0/0xd0 [ 682.480811][ T8851] ? soundcore_open+0x274/0x4c0 [ 682.485812][ T8851] ? odev_open+0x5c/0xa0 [ 682.490090][ T8851] ? __lock_acquire+0x7d80/0x7d80 [ 682.495148][ T8851] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 682.501165][ T8851] ? async_call_lookup_ports+0x20/0x20 [ 682.506655][ T8851] ? do_raw_spin_unlock+0x121/0x230 [ 682.511892][ T8851] ? soundcore_open+0x310/0x4c0 [ 682.516781][ T8851] odev_open+0x67/0xa0 [ 682.520891][ T8851] chrdev_open+0x58c/0x600 [ 682.525350][ T8851] ? cd_forget+0x160/0x160 [ 682.529804][ T8851] ? fsnotify_perm+0x3ed/0x5e0 [ 682.534613][ T8851] do_dentry_open+0x880/0x14b0 [ 682.539428][ T8851] ? cd_forget+0x160/0x160 [ 682.543881][ T8851] path_openat+0x284f/0x3270 [ 682.548524][ T8851] ? do_sys_openat2+0xda/0x1d0 [ 682.553318][ T8851] ? __x64_sys_openat+0x139/0x160 [ 682.558380][ T8851] ? verify_lock_unused+0x140/0x140 [ 682.563623][ T8851] ? do_filp_open+0x430/0x430 [ 682.568343][ T8851] do_filp_open+0x1f2/0x430 [ 682.572884][ T8851] ? vfs_tmpfile+0x620/0x620 [ 682.577661][ T8851] ? _raw_spin_unlock+0x28/0x40 [ 682.582553][ T8851] ? alloc_fd+0x590/0x640 [ 682.586968][ T8851] do_sys_openat2+0x134/0x1d0 [ 682.591695][ T8851] ? do_sys_open+0xe0/0xe0 [ 682.596150][ T8851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 682.602219][ T8851] ? lock_chain_count+0x20/0x20 [ 682.607108][ T8851] __x64_sys_openat+0x139/0x160 [ 682.611998][ T8851] do_syscall_64+0x55/0xb0 [ 682.616464][ T8851] ? clear_bhb_loop+0x40/0x90 [ 682.621178][ T8851] ? clear_bhb_loop+0x40/0x90 [ 682.625889][ T8851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.631825][ T8851] RIP: 0033:0x7fe52c19e159 [ 682.636273][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.655913][ T8851] RSP: 002b:00007fe52cfcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 682.664413][ T8851] RAX: ffffffffffffffda RBX: 00007fe52c425fa0 RCX: 00007fe52c19e159 [ 682.672431][ T8851] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 682.680430][ T8851] RBP: 00007fe52c23506b R08: 0000000000000000 R09: 0000000000000000 [ 682.688447][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.696442][ T8851] R13: 00007fe52c426038 R14: 00007fe52c425fa0 R15: 00007ffca3d8a838 [ 682.704461][ T8851] [ 687.394792][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.401158][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.054625][ T8870] ALSA: mixer_oss: invalid OSS volume '' [ 695.934814][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 700.007590][ T8917] ALSA: mixer_oss: invalid OSS volume '' [ 700.474552][ T56] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 702.236751][ T56] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 702.254425][ T56] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.267598][ T5765] kworker/dying (5765) used greatest stack depth: 15832 bytes left [ 702.284371][ T56] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.293484][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.603283][ T56] usb 4-1: GET_CAPABILITIES returned 0 [ 702.624376][ T56] usbtmc 4-1:16.0: can't read capabilities [ 702.944927][ T5819] usb 4-1: USB disconnect, device number 4 [ 704.263334][ T8045] Bluetooth: hci0: command 0x0406 tx timeout [ 709.697837][ T8957] ALSA: mixer_oss: invalid OSS volume '' [ 711.134702][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'. [ 717.379284][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 717.388605][ T174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 717.431058][ T9011] IPv6: sit1: Disabled Multicast RS [ 717.446739][ T9011] sit1: entered allmulticast mode [ 717.584387][ T174] usb 3-1: Using ep0 maxpacket: 32 [ 717.603967][ T174] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 717.674519][ T174] usb 3-1: config 0 has no interface number 0 [ 717.680712][ T174] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 717.711797][ T174] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 718.773233][ T174] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.857904][ T9014] o2cb: This node has not been configured. [ 718.863763][ T9014] o2cb: Cluster check failed. Fix errors before retrying. [ 718.871012][ T9014] (syz.0.835,9014,0):user_dlm_register:674 ERROR: status = -22 [ 718.878719][ T9014] (syz.0.835,9014,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 718.905366][ T174] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 718.923897][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.932087][ T174] usb 3-1: Product: syz [ 718.936710][ T174] usb 3-1: Manufacturer: syz [ 718.941355][ T174] usb 3-1: SerialNumber: syz [ 718.965751][ T174] usb 3-1: config 0 descriptor?? [ 718.987520][ T174] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input17 [ 721.091694][ T23] usb 3-1: USB disconnect, device number 2 [ 722.762497][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 722.814677][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 725.154285][ T56] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 725.463661][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 725.473054][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.483785][ T56] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.504461][ T56] usb 1-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 725.527067][ T56] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 725.536776][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.577454][ T56] usb 1-1: Product: syz [ 725.587562][ T56] usb 1-1: Manufacturer: syz [ 725.592226][ T56] usb 1-1: SerialNumber: syz [ 726.854606][ T9068] o2cb: This node has not been configured. [ 726.860475][ T9068] o2cb: Cluster check failed. Fix errors before retrying. [ 726.867692][ T9068] (syz.1.846,9068,1):user_dlm_register:674 ERROR: status = -22 [ 726.875997][ T9068] (syz.1.846,9068,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 727.176017][ T56] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 727.226494][ T56] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 727.245258][ T56] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 727.258899][ T56] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 727.293135][ T56] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 727.609851][ T28] audit: type=1326 audit(1790253617.888:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 727.711347][ T56] usb 1-1: USB disconnect, device number 7 [ 727.961199][ T28] audit: type=1326 audit(1790253617.898:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 728.091654][ T9064] udevd[9064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.184408][ T28] audit: type=1326 audit(1790253617.908:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 728.400079][ T28] audit: type=1326 audit(1790253617.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 728.745300][ T28] audit: type=1326 audit(1790253617.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 728.926637][ T28] audit: type=1326 audit(1790253617.928:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 728.974408][ T28] audit: type=1326 audit(1790253617.928:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 729.038599][ T28] audit: type=1326 audit(1790253617.938:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 729.135391][ T28] audit: type=1326 audit(1790253617.938:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1d4bf9e159 code=0x7ffc0000 [ 731.495257][ T9089] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.852'. [ 734.176321][ T9095] o2cb: This node has not been configured. [ 734.182189][ T9095] o2cb: Cluster check failed. Fix errors before retrying. [ 734.189432][ T9095] (syz.3.856,9095,1):user_dlm_register:674 ERROR: status = -22 [ 734.197022][ T9095] (syz.3.856,9095,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 739.026165][ T9123] FAULT_INJECTION: forcing a failure. [ 739.026165][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 739.094431][ T9123] CPU: 0 PID: 9123 Comm: syz.3.858 Not tainted syzkaller #0 [ 739.101813][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 739.111906][ T9123] Call Trace: [ 739.115215][ T9123] [ 739.118201][ T9123] dump_stack_lvl+0x18c/0x250 [ 739.122918][ T9123] ? show_regs_print_info+0x20/0x20 [ 739.128147][ T9123] ? load_image+0x420/0x420 [ 739.132675][ T9123] ? __might_sleep+0xe0/0xe0 [ 739.137302][ T9123] ? __lock_acquire+0x7d80/0x7d80 [ 739.142366][ T9123] should_fail_ex+0x394/0x4c0 [ 739.147087][ T9123] should_failslab+0x9/0x20 [ 739.151624][ T9123] slab_pre_alloc_hook+0x59/0x300 [ 739.156692][ T9123] kmem_cache_alloc+0x5a/0x2c0 [ 739.161491][ T9123] ? mempool_init_node+0x1e9/0x480 [ 739.166667][ T9123] ? mempool_free+0x320/0x320 [ 739.171377][ T9123] mempool_init_node+0x1e9/0x480 [ 739.176358][ T9123] ? mempool_alloc_slab+0x60/0x60 [ 739.181409][ T9123] ? mempool_free+0x320/0x320 [ 739.186118][ T9123] mempool_init+0x3a/0x50 [ 739.190481][ T9123] bioset_init+0x286/0x6d0 [ 739.194979][ T9123] __alloc_disk_node+0x8e/0x570 [ 739.199865][ T9123] ? blk_alloc_queue+0x404/0x4c0 [ 739.204830][ T9123] __blk_alloc_disk+0x2e/0x80 [ 739.209534][ T9123] dm_create+0x46f/0xf90 [ 739.213852][ T9123] dev_create+0x1f8/0x400 [ 739.218293][ T9123] ? list_devices+0x820/0x820 [ 739.222997][ T9123] ? __might_fault+0xaa/0x120 [ 739.227704][ T9123] ? __might_fault+0xc6/0x120 [ 739.232415][ T9123] ? __might_fault+0xaa/0x120 [ 739.237132][ T9123] ? list_devices+0x820/0x820 [ 739.241850][ T9123] dm_ctl_ioctl+0x975/0xd00 [ 739.246408][ T9123] ? list_devices+0x820/0x820 [ 739.251119][ T9123] ? dm_poll+0x120/0x120 [ 739.255422][ T9123] ? bpf_lsm_file_ioctl+0x9/0x10 [ 739.260423][ T9123] ? security_file_ioctl+0x80/0xa0 [ 739.265572][ T9123] ? dm_poll+0x120/0x120 [ 739.269859][ T9123] __se_sys_ioctl+0xfd/0x170 [ 739.274493][ T9123] do_syscall_64+0x55/0xb0 [ 739.278942][ T9123] ? clear_bhb_loop+0x40/0x90 [ 739.283652][ T9123] ? clear_bhb_loop+0x40/0x90 [ 739.288366][ T9123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.294294][ T9123] RIP: 0033:0x7fd24499e159 [ 739.298754][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.318384][ T9123] RSP: 002b:00007fd2457f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.326831][ T9123] RAX: ffffffffffffffda RBX: 00007fd244c25fa0 RCX: 00007fd24499e159 [ 739.334833][ T9123] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 739.342835][ T9123] RBP: 00007fd244a3506b R08: 0000000000000000 R09: 0000000000000000 [ 739.350838][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.358847][ T9123] R13: 00007fd244c26038 R14: 00007fd244c25fa0 R15: 00007ffe7c33a128 [ 739.366864][ T9123] [ 741.206684][ T5792] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 742.441279][ T9134] warning: `syz.3.868' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 745.212493][ T9157] o2cb: This node has not been configured. [ 745.218463][ T9157] o2cb: Cluster check failed. Fix errors before retrying. [ 745.225723][ T9157] (syz.2.866,9157,1):user_dlm_register:674 ERROR: status = -22 [ 745.233320][ T9157] (syz.2.866,9157,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 747.206609][ T9177] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 748.224747][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.231121][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.601023][ T9185] TCP: TCP_TX_DELAY enabled [ 753.857397][ T9212] ALSA: mixer_oss: invalid OSS volume '' [ 755.118367][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 756.558995][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 756.632282][ T9239] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.641682][ T9239] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.650460][ T9239] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.659251][ T9239] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.749195][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 757.989251][ T9154] udevd[9154]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 761.036659][ T9257] overlayfs: failed to clone upperpath [ 761.456536][ T8045] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 765.195299][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 766.159367][ T9283] ALSA: mixer_oss: invalid OSS volume '' [ 766.388464][ T9286] ------------[ cut here ]------------ [ 766.394393][ T9286] failed to allocate ring buffer on CPU 1 [ 766.488950][ T9286] WARNING: CPU: 0 PID: 9286 at kernel/trace/ring_buffer.c:5861 trace_rb_cpu_prepare+0x2fa/0x330 [ 766.499756][ T9286] Modules linked in: [ 766.503726][ T9286] CPU: 0 PID: 9286 Comm: syz.3.908 Not tainted syzkaller #0 [ 766.512558][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.523232][ T9286] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 766.529393][ T9286] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 00 fd ff 48 c7 c7 e0 ef ce 8a 89 de e8 36 c4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 28 00 fd ff e9 32 ff ff ff e8 1e 00 [ 766.549319][ T9286] RSP: 0018:ffffc90002eafab8 EFLAGS: 00010246 [ 766.555813][ T9286] RAX: 45cb48588814c300 RBX: 0000000000000001 RCX: 0000000000080000 [ 766.563915][ T9286] RDX: ffffc9000dcf6000 RSI: 000000000007ffff RDI: 0000000000080000 [ 766.572048][ T9286] RBP: 0000000000000001 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 766.580227][ T9286] R10: dffffc0000000000 R11: ffffed10171e518b R12: 0000000000000000 [ 766.588403][ T9286] R13: ffff8880281daa08 R14: ffff88805e28a810 R15: ffff88805e28a8b0 [ 766.596478][ T9286] FS: 00007fd2457d46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 766.606233][ T9286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.612902][ T9286] CR2: 0000200000003000 CR3: 000000002dbcd000 CR4: 00000000003506f0 [ 766.621227][ T9286] Call Trace: [ 766.624626][ T9286] [ 766.627640][ T9286] ? rb_get_reader_page+0xd90/0xd90 [ 766.632903][ T9286] cpuhp_invoke_callback+0x481/0x7e0 [ 766.638331][ T9286] ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570 [ 766.645326][ T9286] ? rb_get_reader_page+0xd90/0xd90 [ 766.650592][ T9286] ? mutex_lock_nested+0x20/0x20 [ 766.655646][ T9286] cpuhp_issue_call+0x3ed/0x740 [ 766.660565][ T9286] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 766.667351][ T9286] __cpuhp_state_add_instance+0x25/0x40 [ 766.672983][ T9286] __ring_buffer_alloc+0x30e/0x550 [ 766.678201][ T9286] allocate_trace_buffers+0x70/0x290 [ 766.683553][ T9286] ? __raw_spin_lock_init+0x45/0x100 [ 766.689005][ T9286] trace_array_create_systems+0x311/0xc70 [ 766.694841][ T9286] instance_mkdir+0xd1/0x130 [ 766.699500][ T9286] tracefs_syscall_mkdir+0x128/0x1a0 [ 766.705651][ T9286] vfs_mkdir+0x2a5/0x470 [ 766.709958][ T9286] do_mkdirat+0x1dc/0x450 [ 766.714566][ T9286] ? vfs_mkdir+0x470/0x470 [ 766.719046][ T9286] __x64_sys_mkdirat+0x89/0xa0 [ 766.723862][ T9286] do_syscall_64+0x55/0xb0 [ 766.728354][ T9286] ? clear_bhb_loop+0x40/0x90 [ 766.733086][ T9286] ? clear_bhb_loop+0x40/0x90 [ 766.737852][ T9286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.743794][ T9286] RIP: 0033:0x7fd24499e159 [ 766.749839][ T9286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.769547][ T9286] RSP: 002b:00007fd2457d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 766.778062][ T9286] RAX: ffffffffffffffda RBX: 00007fd244c26090 RCX: 00007fd24499e159 [ 766.786121][ T9286] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 766.794128][ T9286] RBP: 00007fd244a3506b R08: 0000000000000000 R09: 0000000000000000 [ 766.802166][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.810771][ T9286] R13: 00007fd244c26128 R14: 00007fd244c26090 R15: 00007ffe7c33a128 [ 766.818949][ T9286] [ 766.822001][ T9286] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 766.829311][ T9286] CPU: 0 PID: 9286 Comm: syz.3.908 Not tainted syzkaller #0 [ 766.836622][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.846701][ T9286] Call Trace: [ 766.850002][ T9286] [ 766.852954][ T9286] dump_stack_lvl+0x18c/0x250 [ 766.857673][ T9286] ? show_regs_print_info+0x20/0x20 [ 766.862904][ T9286] ? load_image+0x420/0x420 [ 766.867453][ T9286] panic+0x2ca/0x720 [ 766.871381][ T9286] ? bpf_jit_dump+0xd0/0xd0 [ 766.875926][ T9286] __warn+0x2e0/0x470 [ 766.879934][ T9286] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 766.885346][ T9286] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 766.890767][ T9286] report_bug+0x2be/0x4f0 [ 766.895212][ T9286] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 766.900617][ T9286] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 766.906027][ T9286] ? trace_rb_cpu_prepare+0x2fc/0x330 [ 766.911454][ T9286] handle_bug+0xcf/0x120 [ 766.915740][ T9286] exc_invalid_op+0x1a/0x50 [ 766.920308][ T9286] asm_exc_invalid_op+0x1a/0x20 [ 766.925197][ T9286] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 766.931214][ T9286] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 00 fd ff 48 c7 c7 e0 ef ce 8a 89 de e8 36 c4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 28 00 fd ff e9 32 ff ff ff e8 1e 00 [ 766.950849][ T9286] RSP: 0018:ffffc90002eafab8 EFLAGS: 00010246 [ 766.956951][ T9286] RAX: 45cb48588814c300 RBX: 0000000000000001 RCX: 0000000000080000 [ 766.964950][ T9286] RDX: ffffc9000dcf6000 RSI: 000000000007ffff RDI: 0000000000080000 [ 766.972965][ T9286] RBP: 0000000000000001 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 766.980977][ T9286] R10: dffffc0000000000 R11: ffffed10171e518b R12: 0000000000000000 [ 766.989041][ T9286] R13: ffff8880281daa08 R14: ffff88805e28a810 R15: ffff88805e28a8b0 [ 766.997095][ T9286] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 767.002510][ T9286] ? rb_get_reader_page+0xd90/0xd90 [ 767.007744][ T9286] cpuhp_invoke_callback+0x481/0x7e0 [ 767.013097][ T9286] ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570 [ 767.020009][ T9286] ? rb_get_reader_page+0xd90/0xd90 [ 767.025277][ T9286] ? mutex_lock_nested+0x20/0x20 [ 767.030276][ T9286] cpuhp_issue_call+0x3ed/0x740 [ 767.035175][ T9286] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 767.041891][ T9286] __cpuhp_state_add_instance+0x25/0x40 [ 767.047474][ T9286] __ring_buffer_alloc+0x30e/0x550 [ 767.052626][ T9286] allocate_trace_buffers+0x70/0x290 [ 767.057940][ T9286] ? __raw_spin_lock_init+0x45/0x100 [ 767.063263][ T9286] trace_array_create_systems+0x311/0xc70 [ 767.069040][ T9286] instance_mkdir+0xd1/0x130 [ 767.073667][ T9286] tracefs_syscall_mkdir+0x128/0x1a0 [ 767.078985][ T9286] vfs_mkdir+0x2a5/0x470 [ 767.083266][ T9286] do_mkdirat+0x1dc/0x450 [ 767.087626][ T9286] ? vfs_mkdir+0x470/0x470 [ 767.092078][ T9286] __x64_sys_mkdirat+0x89/0xa0 [ 767.096887][ T9286] do_syscall_64+0x55/0xb0 [ 767.101363][ T9286] ? clear_bhb_loop+0x40/0x90 [ 767.106076][ T9286] ? clear_bhb_loop+0x40/0x90 [ 767.110819][ T9286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.116752][ T9286] RIP: 0033:0x7fd24499e159 [ 767.121200][ T9286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.140861][ T9286] RSP: 002b:00007fd2457d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 767.149337][ T9286] RAX: ffffffffffffffda RBX: 00007fd244c26090 RCX: 00007fd24499e159 [ 767.157333][ T9286] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 767.165330][ T9286] RBP: 00007fd244a3506b R08: 0000000000000000 R09: 0000000000000000 [ 767.173330][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.181345][ T9286] R13: 00007fd244c26128 R14: 00007fd244c26090 R15: 00007ffe7c33a128 [ 767.189358][ T9286] [ 767.192986][ T9286] Kernel Offset: disabled [ 767.197478][ T9286] Rebooting in 86400 seconds..