last executing test programs: 6m41.380223539s ago: executing program 0 (id=154): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) 6m41.124317807s ago: executing program 0 (id=157): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m40.919526354s ago: executing program 0 (id=159): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xc, 0x4, "ea57bb76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0x4, "32e90f04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x20, 0x16, 0x25, "4b25f5b1c89ecb86c429f8b99eed2b8de501003ade1072446f126510b10a1bce52d0ab5fc6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m38.220476499s ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x1214040, 0x0) stat(&(0x7f0000000400)='./file0/../file0\x00', 0x0) 6m37.969639318s ago: executing program 0 (id=174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x6e) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 6m35.922663781s ago: executing program 0 (id=187): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmsg(r0, 0x0, 0x1) syz_emit_ethernet(0x9a, &(0x7f0000000ac0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "29624e40c6e6d79b1911f4834b435dd2518f63061278f30c5371048e8e0b180f", "73e1acf1dea2d14aface79d29d1c09f7", {"6bc6cfc3555269e081b5c52d82dc7563", "83337f41945f3a2ae6928d0ba0bfa400"}}}}}}}}, 0x0) ioctl(0xffffffffffffffff, 0xd, 0x0) 6m35.59726047s ago: executing program 32 (id=187): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmsg(r0, 0x0, 0x1) syz_emit_ethernet(0x9a, &(0x7f0000000ac0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "29624e40c6e6d79b1911f4834b435dd2518f63061278f30c5371048e8e0b180f", "73e1acf1dea2d14aface79d29d1c09f7", {"6bc6cfc3555269e081b5c52d82dc7563", "83337f41945f3a2ae6928d0ba0bfa400"}}}}}}}}, 0x0) ioctl(0xffffffffffffffff, 0xd, 0x0) 5m29.245140983s ago: executing program 2 (id=692): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/185, 0xb9}], 0x1, &(0x7f00000013c0)}, 0xc}], 0x1, 0x22, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m28.909210663s ago: executing program 2 (id=698): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000a40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000b00)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000b40)=0xa, 0x4) 5m28.082439355s ago: executing program 2 (id=705): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48000) read(r1, &(0x7f0000000040)=""/186, 0xba) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f0000000100)={0x80, 0x2, {0x1, 0x3, 0x8b2c, 0x3, 0x2c3}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000180)={0x3ff, 0x1, {0x2, 0x0, 0x207b, 0x2, 0x9}, 0x100}) tkill(r0, 0x7) 5m27.640937121s ago: executing program 2 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001100)='./dev\x00', &(0x7f0000001140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001180)='./dev/sda\x00', 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000011c0)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000001200)='./file2\x00', 0x161181, 0x10dd722b6e14c3dc) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) 5m27.42514242s ago: executing program 2 (id=715): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 5m26.12280017s ago: executing program 2 (id=725): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)="d100", 0x2, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 5m25.473722377s ago: executing program 33 (id=725): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)="d100", 0x2, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 3m35.435991897s ago: executing program 6 (id=1501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000380)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0xc7e, 0x4) 3m35.17984583s ago: executing program 6 (id=1504): r0 = syz_open_dev$radio(&(0x7f0000000480), 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0x4f, 0xfff5) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f00000000c0)={0x0, 0x0, 0x800}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000004c0)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 3m34.904722572s ago: executing program 6 (id=1509): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)) 3m33.933323911s ago: executing program 6 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 3m33.743624298s ago: executing program 6 (id=1522): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4b, 0x1800007, 0x81, 0x4, 0xfff8, 0x0, 0x5, 0x4000000000a, 0x4bfb, 0x3, 0x200200000002, 0xffff, 0x3, 0x5, 0x9, 0x100000090], 0x4000, 0x28657}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 3m32.918426735s ago: executing program 6 (id=1531): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000400)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x0, 0x0, 0x0, 0x8000e5}) 3m32.48637504s ago: executing program 34 (id=1531): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000400)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x0, 0x0, 0x0, 0x8000e5}) 1m32.740239077s ago: executing program 3 (id=2074): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x4) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m31.059980534s ago: executing program 3 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000380)='e', 0x1) accept$alg(r1, 0x0, 0x0) 1m30.305532476s ago: executing program 3 (id=2081): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0xf06, &(0x7f0000000100)={0x0, 0x4969, 0x1000, 0x0, 0x15b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x48, 0x2004, @fd_index=0x6, 0x1, 0x0, 0x0, 0x1c, 0x1, {0x1, 0x0, 0x2, '\x00', &(0x7f0000000380)={0x89e0, 0x5, 0x0, 0x0, 0x1}, 0x1}}) socket$inet6_sctp(0xa, 0x801, 0x84) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}], 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m28.968168261s ago: executing program 3 (id=2085): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) futex(r1, 0x6, 0x1, 0x0, r1, 0x1) futex(r1, 0xd, 0x1, 0x0, 0x0, 0x4000000) 1m24.219201721s ago: executing program 3 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 1m21.914943666s ago: executing program 3 (id=2100): openat(0xffffffffffffff9c, 0x0, 0x58342, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1m20.754239292s ago: executing program 1 (id=2103): syz_open_dev$char_usb(0xc, 0xb4, 0x9) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4de33400002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m19.080870505s ago: executing program 5 (id=2106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvfrom(r0, &(0x7f0000000440)=""/164, 0xa4, 0x10000, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1003}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x1fd0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x20, {0xa, 0x25, 0x25, 0x4, 0x2, 0x4}}}}}}}}]}}, 0x0) 1m17.521759807s ago: executing program 1 (id=2108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x24, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000ec0), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f00)='ns/net\x00') setns(0xc9, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x24, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001080)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x0, 0xe, 0x0, &(0x7f0000001180)="fffff000"/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.016750338s ago: executing program 1 (id=2111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m14.880629s ago: executing program 5 (id=2113): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000140), 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f00000002c0)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) 1m12.594041647s ago: executing program 5 (id=2114): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 1m11.722590723s ago: executing program 7 (id=2116): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) sendfile(r2, r2, 0x0, 0x7a680000) 1m11.654935434s ago: executing program 1 (id=2117): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="2399cb113ccd", 0xfefc}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/23, 0x17}], 0x44}, 0x15}], 0x1, 0x40000040, 0x0) 1m10.386299184s ago: executing program 7 (id=2119): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000011c0)={0xf, 0xfffffffffffffffa, 0x8, 0x8, 0x7, 0x3, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0) 1m10.037730059s ago: executing program 5 (id=2121): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.35592236s ago: executing program 1 (id=2122): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1m8.867674386s ago: executing program 7 (id=2123): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x17a, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000340)={0x20000014}) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000400)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 1m8.03471964s ago: executing program 1 (id=2124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000003c0)=""/186) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1m7.784338023s ago: executing program 5 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xf32}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000640), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000680)) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000700)={0x0, {0x0, 0x0, @qam}}) 1m6.332691315s ago: executing program 35 (id=2100): openat(0xffffffffffffff9c, 0x0, 0x58342, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1m5.973290781s ago: executing program 5 (id=2129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000340)={0x200001fe0000, 0x2}) mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, 0x930, 0x3000008, 0x12, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000580)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) 1m0.403694019s ago: executing program 7 (id=2132): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x19, 0x7f, 0x9, 0x1, 0x7, 0x7, 0xc0, 0x2, 0x8, 0x7, 0x4, 0x9, 0x2, 0x1, 0xf8, 0x5, [0xffff, 0xa]}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000040), 0x1d0) bind$can_raw(r1, &(0x7f0000000140), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f00000000c0), 0x1d0) bind$can_raw(r2, &(0x7f0000000100), 0x10) dup3(r0, r1, 0x0) 57.679620972s ago: executing program 7 (id=2134): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000080) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)="b8", 0x1) 51.990410938s ago: executing program 36 (id=2124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000003c0)=""/186) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 51.863350504s ago: executing program 7 (id=2137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001240)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001280)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.958548164s ago: executing program 37 (id=2129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000340)={0x200001fe0000, 0x2}) mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, 0x930, 0x3000008, 0x12, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000580)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) 36.54680425s ago: executing program 38 (id=2137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001240)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001280)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.12693638s ago: executing program 4 (id=2151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x80, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x400000000, 0x4}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@private=0xa010102, 0x2, 0x4, 0x3, 0xe0, 0x1}]}]}, 0xfc}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 26.57762893s ago: executing program 4 (id=2152): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x0, 0x2eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2208, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c59, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0xd89, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.499157351s ago: executing program 4 (id=2153): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{}, 0x0, &(0x7f0000000b40)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000c00)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f00000010c0)={'wlan1\x00', @random="0100000000eb"}) 21.533239526s ago: executing program 4 (id=2154): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x3a, r0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 19.26442129s ago: executing program 4 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) read$msr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 15.332294966s ago: executing program 4 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000c40)={'wlan0\x00', 0x1}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 39 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000c40)={'wlan0\x00', 0x1}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): T9628] RBP: 00007ff43df95ad8 R08: 0000000000000000 R09: 0000000000000000 [ 260.358138][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.358150][ T9628] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 260.358181][ T9628] [ 260.740192][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'. [ 260.794066][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'. [ 260.815645][ T3307] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.816341][ T3307] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.816376][ T3307] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.816401][ T3307] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.053791][ T5606] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.176408][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 261.176426][ T36] audit: type=1326 audit(1792497079.169:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57552be559 code=0x7ffc0000 [ 261.176742][ T36] audit: type=1326 audit(1792497079.169:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57552be559 code=0x7ffc0000 [ 261.180151][ T36] audit: type=1326 audit(1792497079.169:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57552be559 code=0x7ffc0000 [ 261.181733][ T36] audit: type=1326 audit(1792497079.169:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57552be559 code=0x7ffc0000 [ 261.181781][ T36] audit: type=1326 audit(1792497079.169:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57552be559 code=0x7ffc0000 [ 261.204955][ T5606] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 261.218739][ T5606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.218767][ T5606] usb 6-1: Product: syz [ 261.218779][ T5606] usb 6-1: Manufacturer: syz [ 261.218792][ T5606] usb 6-1: SerialNumber: syz [ 261.242203][ T36] audit: type=1326 audit(1792497079.229:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57552be559 code=0x7ffc0000 [ 261.242324][ T36] audit: type=1326 audit(1792497079.229:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57552be2c2 code=0x7ffc0000 [ 261.259225][ T5606] usb 6-1: config 0 descriptor?? [ 261.307246][ T5606] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 261.639926][ T36] audit: type=1326 audit(1792497079.629:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f57552be357 code=0x7ffc0000 [ 261.639975][ T36] audit: type=1326 audit(1792497079.629:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f575527b251 code=0x7ffc0000 [ 261.640012][ T36] audit: type=1326 audit(1792497079.629:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.6.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f57552bf349 code=0x7ffc0000 [ 262.152502][ T5606] usb 6-1: USB disconnect, device number 5 [ 262.456808][ T9546] udevd[9546]: setting mode of /dev/bus/usb/006/005 to 020664 failed: No such file or directory [ 262.456986][ T9546] udevd[9546]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 262.701450][ T9660] FAULT_INJECTION: forcing a failure. [ 262.701450][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 262.701475][ T9660] CPU: 1 UID: 0 PID: 9660 Comm: syz.6.1244 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.701490][ T9660] Tainted: [L]=SOFTLOCKUP [ 262.701494][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.701504][ T9660] Call Trace: [ 262.701512][ T9660] [ 262.701521][ T9660] dump_stack_lvl+0xe8/0x150 [ 262.701554][ T9660] should_fail_ex+0x46b/0x600 [ 262.701589][ T9660] should_failslab+0xa8/0x100 [ 262.701608][ T9660] ? __kernfs_new_node+0xe7/0xa70 [ 262.701629][ T9660] kmem_cache_alloc_noprof+0x9e/0x690 [ 262.701644][ T9660] ? __kernfs_new_node+0xe7/0xa70 [ 262.701662][ T9660] __kernfs_new_node+0xe7/0xa70 [ 262.701681][ T9660] ? __pfx___kernfs_new_node+0x10/0x10 [ 262.701696][ T9660] ? kernfs_root+0x1c/0x230 [ 262.701712][ T9660] ? kernfs_root+0x1c/0x230 [ 262.701725][ T9660] ? kernfs_root+0x1c/0x230 [ 262.701736][ T9660] ? kernfs_root+0x1c/0x230 [ 262.701751][ T9660] kernfs_create_dir_ns+0xf7/0x220 [ 262.701764][ T9660] sysfs_create_dir_ns+0x12f/0x2a0 [ 262.701779][ T9660] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 262.701794][ T9660] ? rt_spin_unlock+0x165/0x200 [ 262.701808][ T9660] kobject_add_internal+0x62c/0xce0 [ 262.701823][ T9660] kobject_add+0x163/0x240 [ 262.701836][ T9660] ? __pfx_kobject_add+0x10/0x10 [ 262.701850][ T9660] ? get_device_parent+0x370/0x3a0 [ 262.701863][ T9660] device_add+0x3fa/0xb80 [ 262.701876][ T9660] cdev_device_add+0x1c6/0x380 [ 262.701889][ T9660] nvme_add_ctrl+0x132/0x270 [ 262.701906][ T9660] nvme_loop_create_ctrl+0x20e/0x8c0 [ 262.701923][ T9660] ? nvmf_dev_write+0x221d/0x2da0 [ 262.701933][ T9660] ? nvmf_check_allowed_opts+0x186/0x1c0 [ 262.701946][ T9660] nvmf_dev_write+0x24cd/0x2da0 [ 262.701973][ T9660] ? __pfx_nvmf_dev_write+0x10/0x10 [ 262.701985][ T9660] ? __pfx___futex_wait+0x10/0x10 [ 262.702000][ T9660] ? __pfx_futex_wake_mark+0x10/0x10 [ 262.702027][ T9660] ? __pfx_futex_wait+0x10/0x10 [ 262.702038][ T9660] ? bpf_lsm_file_permission+0x9/0x20 [ 262.702050][ T9660] ? security_file_permission+0x75/0x260 [ 262.702066][ T9660] ? rw_verify_area+0x209/0x4d0 [ 262.702079][ T9660] ? __pfx_nvmf_dev_write+0x10/0x10 [ 262.702088][ T9660] vfs_write+0x29f/0xbb0 [ 262.702104][ T9660] ? __pfx_vfs_write+0x10/0x10 [ 262.702118][ T9660] ? __fget_files+0x2a/0x420 [ 262.702128][ T9660] ? __fget_files+0x3a8/0x420 [ 262.702139][ T9660] ? __fget_files+0x2a/0x420 [ 262.702152][ T9660] ? fdget+0x1b2/0x250 [ 262.702167][ T9660] ksys_write+0x156/0x270 [ 262.702181][ T9660] ? __pfx_ksys_write+0x10/0x10 [ 262.702199][ T9660] do_syscall_64+0x166/0x520 [ 262.702213][ T9660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.702223][ T9660] ? clear_bhb_loop+0x70/0xc0 [ 262.702235][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.702244][ T9660] RIP: 0033:0x7f57552be559 [ 262.702255][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.702263][ T9660] RSP: 002b:00007f5753516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.702275][ T9660] RAX: ffffffffffffffda RBX: 00007f5755545fa0 RCX: 00007f57552be559 [ 262.702282][ T9660] RDX: 0000000000000014 RSI: 0000200000000800 RDI: 0000000000000004 [ 262.702289][ T9660] RBP: 00007f5755355ad8 R08: 0000000000000000 R09: 0000000000000000 [ 262.702295][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.702302][ T9660] R13: 00007f5755546038 R14: 00007f5755545fa0 R15: 00007ffe51a0fac8 [ 262.702318][ T9660] [ 262.712540][ T9660] kobject: kobject_add_internal failed for nvme0 (error: -12 parent: ctl) [ 263.733246][ T5606] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 263.825862][ T9695] netlink: 'syz.6.1259': attribute type 1 has an invalid length. [ 263.825885][ T9695] netlink: 'syz.6.1259': attribute type 4 has an invalid length. [ 263.825898][ T9695] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1259'. [ 263.826912][ T9695] netlink: 'syz.6.1259': attribute type 1 has an invalid length. [ 263.826930][ T9695] netlink: 'syz.6.1259': attribute type 4 has an invalid length. [ 263.826942][ T9695] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1259'. [ 263.916913][ T5606] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 263.939548][ T5606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.939575][ T5606] usb 6-1: Product: syz [ 263.939589][ T5606] usb 6-1: Manufacturer: syz [ 263.939602][ T5606] usb 6-1: SerialNumber: syz [ 263.979114][ T5606] usb 6-1: config 0 descriptor?? [ 264.341233][ T5606] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 006 [ 264.918419][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 264.965991][ T9685] i2c i2c-1: failure reading status [ 264.975088][ T30] usb 6-1: USB disconnect, device number 6 [ 268.292023][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 268.292046][ T36] audit: type=1326 audit(1792497086.269:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9776 comm="syz.5.1289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7fc00000 [ 269.017261][ T36] audit: type=1326 audit(1792497087.009:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9776 comm="syz.5.1289" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff43defe559 code=0x7fc00000 [ 269.364588][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 269.434374][ T36] audit: type=1326 audit(1792497087.429:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9806 comm="syz.3.1300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5abbb3e559 code=0x0 [ 269.516131][ T35] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.517935][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.517965][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.518001][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.538064][ T35] usb 7-1: config 0 descriptor?? [ 269.743471][ T5606] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 269.938047][ T5606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 269.940126][ T5606] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.947536][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 269.947560][ T5606] usb 2-1: Product: syz [ 269.947573][ T5606] usb 2-1: Manufacturer: syz [ 269.947639][ T5606] usb 2-1: SerialNumber: syz [ 270.180692][ T35] usb 7-1: string descriptor 0 read error: -22 [ 270.350168][ T5606] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 270.483452][ T5606] usb 2-1: USB disconnect, device number 11 [ 270.650615][ T5606] usblp0: removed [ 270.789879][ T35] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0004/input/input9 [ 271.378347][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1310'. [ 271.506353][ T35] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 271.513533][ T5715] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 271.620559][ T35] usb 7-1: USB disconnect, device number 4 [ 271.685580][ T5715] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 271.687235][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 271.687266][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 271.687313][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.979272][ T9845] fido_id[9845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 273.338331][ T5715] pegasus 2-1:1.0: can't reset MAC [ 273.338644][ T5715] pegasus 2-1:1.0: probe with driver pegasus failed with error -5 [ 273.440613][ T5715] usb 2-1: USB disconnect, device number 12 [ 273.949172][ T9878] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1322'. [ 274.599381][ T9892] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1328'. [ 274.612676][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1328'. [ 275.182572][ T9899] 9p: Bad value for 'wfdno' [ 276.318152][ T9917] FAULT_INJECTION: forcing a failure. [ 276.318152][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 276.318191][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.1.1339 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.318217][ T9917] Tainted: [L]=SOFTLOCKUP [ 276.318224][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.318236][ T9917] Call Trace: [ 276.318245][ T9917] [ 276.318253][ T9917] dump_stack_lvl+0xe8/0x150 [ 276.318288][ T9917] should_fail_ex+0x46b/0x600 [ 276.318323][ T9917] should_failslab+0xa8/0x100 [ 276.318344][ T9917] ? __kernfs_new_node+0xe7/0xa70 [ 276.318371][ T9917] kmem_cache_alloc_noprof+0x9e/0x690 [ 276.318398][ T9917] ? __kernfs_new_node+0xe7/0xa70 [ 276.318431][ T9917] __kernfs_new_node+0xe7/0xa70 [ 276.318456][ T9917] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.318491][ T9917] ? __pfx___kernfs_new_node+0x10/0x10 [ 276.318519][ T9917] ? lock_acquire+0x115/0x350 [ 276.318545][ T9917] ? kernfs_root+0x1c/0x230 [ 276.318577][ T9917] ? kernfs_root+0x1c/0x230 [ 276.318600][ T9917] ? kernfs_root+0x1c/0x230 [ 276.318623][ T9917] ? kernfs_root+0x1c/0x230 [ 276.318653][ T9917] kernfs_new_node+0xeb/0x140 [ 276.318683][ T9917] __kernfs_create_file+0x4b/0x2e0 [ 276.318708][ T9917] sysfs_add_file_mode_ns+0x237/0x300 [ 276.318740][ T9917] sysfs_merge_group+0x183/0x320 [ 276.318768][ T9917] ? __pfx_sysfs_merge_group+0x10/0x10 [ 276.318793][ T9917] ? device_add_attrs+0x5c3/0x600 [ 276.318817][ T9917] ? __pfx_device_add_attrs+0x10/0x10 [ 276.318843][ T9917] dpm_sysfs_add+0xd2/0x270 [ 276.318871][ T9917] device_add+0x4ca/0xb80 [ 276.318896][ T9917] netdev_register_kobject+0x197/0x350 [ 276.318922][ T9917] register_netdevice+0x1455/0x1ed0 [ 276.318966][ T9917] ? __pfx_register_netdevice+0x10/0x10 [ 276.319000][ T9917] ? net_generic+0x1e/0x240 [ 276.319031][ T9917] vti6_tnl_create2+0x79/0x370 [ 276.319060][ T9917] vti6_locate+0x684/0x780 [ 276.319100][ T9917] ? __pfx_vti6_locate+0x10/0x10 [ 276.319126][ T9917] ? vti6_siocdevprivate+0x560/0x820 [ 276.319156][ T9917] vti6_siocdevprivate+0x6ac/0x820 [ 276.319183][ T9917] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 276.319230][ T9917] ? full_name_hash+0xb0/0xe0 [ 276.319260][ T9917] dev_ifsioc+0xb56/0x1360 [ 276.319291][ T9917] dev_ioctl+0x84c/0x1150 [ 276.319318][ T9917] sock_ioctl+0x756/0x7f0 [ 276.319340][ T9917] ? __pfx_sock_ioctl+0x10/0x10 [ 276.319362][ T9917] ? __fget_files+0x2a/0x420 [ 276.319389][ T9917] ? bpf_lsm_file_ioctl+0x9/0x20 [ 276.319412][ T9917] ? __pfx_sock_ioctl+0x10/0x10 [ 276.319431][ T9917] __se_sys_ioctl+0xff/0x170 [ 276.319461][ T9917] do_syscall_64+0x166/0x520 [ 276.319487][ T9917] ? trace_irq_disable+0x3b/0x140 [ 276.319511][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.319530][ T9917] ? clear_bhb_loop+0x70/0xc0 [ 276.319553][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.319571][ T9917] RIP: 0033:0x7f4a6366e559 [ 276.319589][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.319606][ T9917] RSP: 002b:00007f4a618c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.319627][ T9917] RAX: ffffffffffffffda RBX: 00007f4a638f5fa0 RCX: 00007f4a6366e559 [ 276.319641][ T9917] RDX: 0000200000000840 RSI: 00000000000089f1 RDI: 0000000000000004 [ 276.319654][ T9917] RBP: 00007f4a63705ad8 R08: 0000000000000000 R09: 0000000000000000 [ 276.319667][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.319678][ T9917] R13: 00007f4a638f6038 R14: 00007f4a638f5fa0 R15: 00007ffd8afb0668 [ 276.319710][ T9917] [ 279.373122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 280.061695][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1357'. [ 282.447873][ T36] audit: type=1326 audit(1792497100.439:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10017 comm="syz.1.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a6366e559 code=0x0 [ 282.878891][T10060] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1378'. [ 284.192600][ T36] audit: type=1326 audit(1792497102.179:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10086 comm="syz.5.1388" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff43defe559 code=0x0 [ 286.034282][T10116] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 286.147216][T10116] bond4: entered promiscuous mode [ 286.149054][T10116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.261743][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1398'. [ 286.432963][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 286.432996][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1399'. [ 286.562388][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 286.562411][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1399'. [ 286.586651][ T999] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587434][ T999] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587515][ T999] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587534][ T999] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587553][ T999] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587570][ T999] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587587][ T999] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.587605][ T999] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.952377][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1403'. [ 286.997507][T10138] gretap0: entered promiscuous mode [ 287.242190][T10145] FAULT_INJECTION: forcing a failure. [ 287.242190][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 287.242227][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.5.1405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.242253][T10145] Tainted: [L]=SOFTLOCKUP [ 287.242259][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.242270][T10145] Call Trace: [ 287.242278][T10145] [ 287.242287][T10145] dump_stack_lvl+0xe8/0x150 [ 287.242321][T10145] should_fail_ex+0x46b/0x600 [ 287.242356][T10145] should_failslab+0xa8/0x100 [ 287.242378][T10145] ? security_inode_alloc+0x39/0x310 [ 287.242401][T10145] kmem_cache_alloc_noprof+0x9e/0x690 [ 287.242462][T10145] ? security_inode_alloc+0x39/0x310 [ 287.242505][T10145] security_inode_alloc+0x39/0x310 [ 287.242532][T10145] inode_init_always_gfp+0x983/0xd40 [ 287.242559][T10145] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 287.242668][T10145] alloc_inode+0x82/0x1b0 [ 287.242697][T10145] new_inode+0x1f/0x170 [ 287.242722][T10145] __debugfs_create_file+0xb8/0x400 [ 287.242772][T10145] debugfs_create_file_full+0x3f/0x60 [ 287.242802][T10145] ref_tracker_dir_debugfs+0x19d/0x370 [ 287.242825][T10145] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 287.242894][T10145] preinit_net+0x1cf/0x780 [ 287.242925][T10145] copy_net_ns+0x2c8/0x780 [ 287.242950][T10145] create_new_namespaces+0x3f0/0x6b0 [ 287.242980][T10145] ? security_capable+0x7e/0x2c0 [ 287.243009][T10145] unshare_nsproxy_namespaces+0x149/0x190 [ 287.243038][T10145] ksys_unshare+0x532/0x890 [ 287.243067][T10145] ? __pfx_ksys_unshare+0x10/0x10 [ 287.243092][T10145] ? rcu_is_watching+0x16/0xb0 [ 287.243135][T10145] __x64_sys_unshare+0x38/0x50 [ 287.243174][T10145] do_syscall_64+0x166/0x520 [ 287.243201][T10145] ? trace_irq_disable+0x3b/0x140 [ 287.243227][T10145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.243246][T10145] ? clear_bhb_loop+0x70/0xc0 [ 287.243269][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.243288][T10145] RIP: 0033:0x7ff43defe559 [ 287.243364][T10145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.243380][T10145] RSP: 002b:00007ff43c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.243401][T10145] RAX: ffffffffffffffda RBX: 00007ff43e185fa0 RCX: 00007ff43defe559 [ 287.243415][T10145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000600 [ 287.243427][T10145] RBP: 00007ff43df95ad8 R08: 0000000000000000 R09: 0000000000000000 [ 287.243439][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.243450][T10145] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 287.243481][T10145] [ 287.248016][T10145] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888012588380' [ 287.547245][T10145] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.249326][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 288.497919][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 288.513363][ T999] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.513410][ T999] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.513443][ T999] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.513474][ T999] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.743602][T10180] fuse: Bad value for 'fd' [ 289.669971][T10204] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 289.676766][T10203] FAULT_INJECTION: forcing a failure. [ 289.676766][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 289.676809][T10203] CPU: 1 UID: 0 PID: 10203 Comm: syz.6.1423 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 289.676836][T10203] Tainted: [L]=SOFTLOCKUP [ 289.676843][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.676855][T10203] Call Trace: [ 289.676862][T10203] [ 289.676869][T10203] dump_stack_lvl+0xe8/0x150 [ 289.676901][T10203] should_fail_ex+0x46b/0x600 [ 289.676935][T10203] should_failslab+0xa8/0x100 [ 289.676957][T10203] __kmalloc_cache_noprof+0xa1/0x680 [ 289.676984][T10203] ? snd_seq_timer_new+0x55/0x6e0 [ 289.677007][T10203] ? snd_seq_timer_new+0x55/0x6e0 [ 289.677034][T10203] snd_seq_timer_new+0x55/0x6e0 [ 289.677057][T10203] ? __asan_memset+0x22/0x50 [ 289.677084][T10203] snd_seq_queue_alloc+0x17c/0x730 [ 289.677112][T10203] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 289.677142][T10203] snd_seq_oss_open+0x657/0xf40 [ 289.677173][T10203] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 289.677208][T10203] ? __lock_acquire+0x747/0x2de0 [ 289.677252][T10203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.677308][T10203] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 289.677326][T10203] ? __pfx_free_devinfo+0x10/0x10 [ 289.677345][T10203] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.677372][T10203] ? mutex_lock_nested+0x152/0x1d0 [ 289.677392][T10203] ? odev_open+0x5c/0xa0 [ 289.677419][T10203] odev_open+0x67/0xa0 [ 289.677445][T10203] chrdev_open+0x4dc/0x600 [ 289.677465][T10203] ? __pfx_chrdev_open+0x10/0x10 [ 289.677482][T10203] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 289.677513][T10203] ? __pfx_chrdev_open+0x10/0x10 [ 289.677530][T10203] do_dentry_open+0x841/0x1410 [ 289.677558][T10203] vfs_open_consume+0x4a/0x360 [ 289.677575][T10203] ? path_openat+0x16ea/0x2100 [ 289.677601][T10203] path_openat+0x1705/0x2100 [ 289.677642][T10203] do_file_open+0x23e/0x4a0 [ 289.677664][T10203] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.677695][T10203] ? __pfx_do_file_open+0x10/0x10 [ 289.677742][T10203] ? alloc_fd+0x6b2/0x760 [ 289.677775][T10203] do_sys_openat2+0x115/0x200 [ 289.677803][T10203] ? __se_sys_futex+0x3a8/0x450 [ 289.677823][T10203] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.677849][T10203] ? rcu_is_watching+0x16/0xb0 [ 289.677873][T10203] __x64_sys_openat+0x138/0x170 [ 289.677897][T10203] do_syscall_64+0x166/0x520 [ 289.677921][T10203] ? trace_irq_disable+0x3b/0x140 [ 289.677944][T10203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.677962][T10203] ? clear_bhb_loop+0x70/0xc0 [ 289.677984][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.678003][T10203] RIP: 0033:0x7f57552be559 [ 289.678020][T10203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.678036][T10203] RSP: 002b:00007f5753516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.678057][T10203] RAX: ffffffffffffffda RBX: 00007f5755545fa0 RCX: 00007f57552be559 [ 289.678070][T10203] RDX: 0000000000080a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 289.678083][T10203] RBP: 00007f5755355ad8 R08: 0000000000000000 R09: 0000000000000000 [ 289.678095][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.678107][T10203] R13: 00007f5755546038 R14: 00007f5755545fa0 R15: 00007ffe51a0fac8 [ 289.678139][T10203] [ 290.230131][T10204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.321549][T10206] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.336619][T10206] bond5: (slave team0): Enslaving as a backup interface with a down link [ 290.560269][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1431'. [ 290.560306][T10224] netlink: 'syz.4.1431': attribute type 7 has an invalid length. [ 290.560318][T10224] netlink: 'syz.4.1431': attribute type 8 has an invalid length. [ 290.560328][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 292.063240][ T5850] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 292.214137][ T5850] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 292.215542][ T5850] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 292.215586][ T5850] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 292.218024][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.218047][ T5850] usb 7-1: Product: syz [ 292.218061][ T5850] usb 7-1: Manufacturer: syz [ 292.218074][ T5850] usb 7-1: SerialNumber: syz [ 292.266251][T10271] lo: entered allmulticast mode [ 292.356157][T10272] lo: left allmulticast mode [ 292.599039][ T5850] usb 7-1: disable ehci-hcd to run US-144 [ 292.610461][ T5850] usb 7-1: disable ehci-hcd to run US-144 [ 292.629793][ T5850] usb 7-1: USB disconnect, device number 5 [ 292.785799][T10281] udevd[10281]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.043362][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 293.204487][ T30] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 293.238948][ T30] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 293.238976][ T30] usb 6-1: config 1 has no interface number 0 [ 293.242220][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.242245][ T30] usb 6-1: Product: syz [ 293.242260][ T30] usb 6-1: Manufacturer: syz [ 293.242272][ T30] usb 6-1: SerialNumber: syz [ 293.307395][ T30] usb 6-1: 3:1 : does not exist [ 293.307420][ T30] usb 6-1: 3:2 : does not exist [ 294.184321][ T30] usb 6-1: USB disconnect, device number 7 [ 295.273201][T10376] FAULT_INJECTION: forcing a failure. [ 295.273201][T10376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.273242][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.6.1482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.273267][T10376] Tainted: [L]=SOFTLOCKUP [ 295.273273][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.273283][T10376] Call Trace: [ 295.273289][T10376] [ 295.273298][T10376] dump_stack_lvl+0xe8/0x150 [ 295.273331][T10376] should_fail_ex+0x46b/0x600 [ 295.273365][T10376] prepare_alloc_pages+0x223/0x650 [ 295.273400][T10376] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 295.273425][T10376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.273449][T10376] ? __pfx_policy_nodemask+0x10/0x10 [ 295.273474][T10376] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.273509][T10376] alloc_pages_mpol+0xd4/0x280 [ 295.273534][T10376] alloc_pages_noprof+0xd2/0x2f0 [ 295.273557][T10376] pte_alloc_one+0x22/0x380 [ 295.273584][T10376] do_pte_missing+0x128d/0x28f0 [ 295.273605][T10376] ? rt_spin_unlock+0x165/0x200 [ 295.273631][T10376] ? __pmd_alloc+0x41b/0x5e0 [ 295.273675][T10376] handle_mm_fault+0xf64/0x28c0 [ 295.273706][T10376] ? handle_mm_fault+0xeb/0x28c0 [ 295.273739][T10376] ? futex_unqueue+0x22/0x240 [ 295.273768][T10376] ? __pfx_handle_mm_fault+0x10/0x10 [ 295.273806][T10376] ? __lock_acquire+0x747/0x2de0 [ 295.273835][T10376] ? lock_mm_and_find_vma+0xa7/0x340 [ 295.273866][T10376] do_user_addr_fault+0x7f6/0x1480 [ 295.273904][T10376] exc_page_fault+0x6a/0xc0 [ 295.273932][T10376] asm_exc_page_fault+0x26/0x30 [ 295.273950][T10376] RIP: 0010:strncpy_from_user+0xb7/0x2c0 [ 295.273978][T10376] Code: 00 00 4c 89 f6 e8 79 ad ba fc 49 83 fe 07 0f 86 9d 00 00 00 4c 89 24 24 4c 89 74 24 08 48 c7 c5 f8 ff ff ff 45 31 ff 49 89 dc <4e> 8b 34 3b 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 06 4d 89 f5 49 [ 295.273994][T10376] RSP: 0018:ffffc9000c6bfc98 EFLAGS: 00050246 [ 295.274012][T10376] RAX: ffffffff850c5697 RBX: 0000000000000000 RCX: ffff888099293e80 [ 295.274025][T10376] RDX: 0000000000000002 RSI: 0000000000000100 RDI: 0000000000000007 [ 295.274037][T10376] RBP: fffffffffffffff8 R08: 0000000000000000 R09: 0000000000000000 [ 295.274049][T10376] R10: dffffc0000000000 R11: fffff520018d7fc8 R12: 0000000000000000 [ 295.274062][T10376] R13: 1ffff920018d7fa4 R14: 0000000000000100 R15: 0000000000000000 [ 295.274101][T10376] ? strncpy_from_user+0x97/0x2c0 [ 295.274137][T10376] ? strncpy_from_user+0x97/0x2c0 [ 295.274167][T10376] path_getxattrat+0x162/0x460 [ 295.274201][T10376] ? __pfx_path_getxattrat+0x10/0x10 [ 295.274254][T10376] ? rcu_is_watching+0x16/0xb0 [ 295.274286][T10376] do_syscall_64+0x166/0x520 [ 295.274310][T10376] ? trace_irq_disable+0x3b/0x140 [ 295.274332][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.274351][T10376] ? clear_bhb_loop+0x70/0xc0 [ 295.274371][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.274389][T10376] RIP: 0033:0x7f57552be559 [ 295.274407][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.274423][T10376] RSP: 002b:00007f5753516028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 295.274443][T10376] RAX: ffffffffffffffda RBX: 00007f5755545fa0 RCX: 00007f57552be559 [ 295.274457][T10376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 295.274470][T10376] RBP: 00007f5755355ad8 R08: 0000000000000000 R09: 0000000000000000 [ 295.274482][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.274494][T10376] R13: 00007f5755546038 R14: 00007f5755545fa0 R15: 00007ffe51a0fac8 [ 295.274528][T10376] [ 295.654854][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 295.809752][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 295.821795][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.829246][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 295.829312][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.829333][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.829355][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.829376][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.829415][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.143801][ T30] usb 6-1: usb_control_msg returned -32 [ 296.143853][ T30] usbtmc 6-1:16.0: can't read capabilities [ 296.312081][T10389] FAULT_INJECTION: forcing a failure. [ 296.312081][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 296.312118][T10389] CPU: 1 UID: 0 PID: 10389 Comm: syz.1.1487 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 296.312145][T10389] Tainted: [L]=SOFTLOCKUP [ 296.312152][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.312162][T10389] Call Trace: [ 296.312170][T10389] [ 296.312178][T10389] dump_stack_lvl+0xe8/0x150 [ 296.312212][T10389] should_fail_ex+0x46b/0x600 [ 296.312248][T10389] should_failslab+0xa8/0x100 [ 296.312269][T10389] ? __inet_hash_connect+0xecf/0x25c0 [ 296.312297][T10389] kmem_cache_alloc_noprof+0x9e/0x690 [ 296.312324][T10389] ? __inet_hash_connect+0xecf/0x25c0 [ 296.312359][T10389] __inet_hash_connect+0xecf/0x25c0 [ 296.312389][T10389] ? __pfx___inet_check_established+0x10/0x10 [ 296.312421][T10389] ? __inet_hash_connect+0x5fe/0x25c0 [ 296.312459][T10389] ? __pfx___inet_hash_connect+0x10/0x10 [ 296.312482][T10389] ? lockdep_hardirqs_on+0x7b/0x110 [ 296.312515][T10389] ? inet_hash_connect+0xf1/0x380 [ 296.312546][T10389] tcp_v4_connect+0xcee/0x1950 [ 296.312566][T10389] ? tcp_sendmsg_locked+0x4b08/0x5400 [ 296.312605][T10389] ? __pfx_tcp_v4_connect+0x10/0x10 [ 296.312639][T10389] __inet_stream_connect+0x28c/0xf50 [ 296.312677][T10389] ? __pfx___inet_stream_connect+0x10/0x10 [ 296.312697][T10389] ? __kasan_kmalloc+0x93/0xb0 [ 296.312718][T10389] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 296.312745][T10389] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 296.312775][T10389] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 296.312804][T10389] tcp_sendmsg_locked+0x4b08/0x5400 [ 296.312850][T10389] ? __lock_acquire+0x747/0x2de0 [ 296.312883][T10389] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.312913][T10389] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 296.312940][T10389] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 296.312973][T10389] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 296.313010][T10389] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 296.313035][T10389] ? lockdep_hardirqs_on+0x7b/0x110 [ 296.313073][T10389] tcp_sendmsg+0x2f/0x50 [ 296.313093][T10389] ? __pfx_inet_sendmsg+0x10/0x10 [ 296.313109][T10389] sock_sendmsg_nosec+0x10e/0x180 [ 296.313132][T10389] __sys_sendto+0x41e/0x5d0 [ 296.313162][T10389] ? __pfx___sys_sendto+0x10/0x10 [ 296.313217][T10389] ? rcu_is_watching+0x16/0xb0 [ 296.313242][T10389] __x64_sys_sendto+0xde/0x100 [ 296.313269][T10389] do_syscall_64+0x166/0x520 [ 296.313295][T10389] ? trace_irq_disable+0x3b/0x140 [ 296.313319][T10389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.313339][T10389] ? clear_bhb_loop+0x70/0xc0 [ 296.313362][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.313381][T10389] RIP: 0033:0x7f4a6366e559 [ 296.313399][T10389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.313415][T10389] RSP: 002b:00007f4a618c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.313436][T10389] RAX: ffffffffffffffda RBX: 00007f4a638f5fa0 RCX: 00007f4a6366e559 [ 296.313450][T10389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 296.313462][T10389] RBP: 00007f4a63705ad8 R08: 00002000000003c0 R09: 0000000000000010 [ 296.313475][T10389] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000000 [ 296.313487][T10389] R13: 00007f4a638f6038 R14: 00007f4a638f5fa0 R15: 00007ffd8afb0668 [ 296.313522][T10389] [ 297.506437][T10411] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned f [ 297.620446][T10417] veth2: entered promiscuous mode [ 297.620472][T10417] veth2: entered allmulticast mode [ 297.634549][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 297.634581][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 297.716802][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 297.716835][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 297.723362][ T146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.724656][ T146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.724696][ T146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.724729][ T146] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.790912][ T5850] usb 6-1: USB disconnect, device number 8 [ 298.436721][T10453] syz_tun: entered allmulticast mode [ 298.438540][T10452] syz_tun: left allmulticast mode [ 300.934706][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.985561][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.988958][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.989936][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.990588][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.247868][ T3308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.676671][T10543] binder: BINDER_SET_CONTEXT_MGR already set [ 301.676688][T10543] binder: 10541:10543 ioctl 4018620d 200000000180 returned -16 [ 301.789504][T10542] tipc: Started in network mode [ 301.789535][T10542] tipc: Node identity 8ab8ca88c057, cluster identity 4711 [ 301.789959][T10542] tipc: Enabled bearer , priority 1 [ 302.234869][ T3308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.296502][T10540] tipc: Resetting bearer [ 302.699946][T10540] tipc: Disabling bearer [ 303.169473][ T36] audit: type=1326 audit(1792497377.152:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169534][ T36] audit: type=1326 audit(1792497377.152:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169573][ T36] audit: type=1326 audit(1792497377.162:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169610][ T36] audit: type=1326 audit(1792497377.162:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5abbb3e2c2 code=0x7ffc0000 [ 303.169648][ T36] audit: type=1326 audit(1792497377.162:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5abbb3e2c2 code=0x7ffc0000 [ 303.169685][ T36] audit: type=1326 audit(1792497377.162:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169721][ T36] audit: type=1326 audit(1792497377.162:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169759][ T36] audit: type=1326 audit(1792497377.162:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169805][ T36] audit: type=1326 audit(1792497377.162:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.169846][ T36] audit: type=1326 audit(1792497377.162:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10586 comm="syz.3.1553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbb3e559 code=0x7ffc0000 [ 303.203324][ T4906] Bluetooth: hci4: command tx timeout [ 303.441618][ T3308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.790961][T10598] sock: sock_set_timeout: `syz.1.1554' (pid 10598) tries to set negative timeout [ 303.953590][T10524] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.375614][ T3308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.864897][T10608] FAULT_INJECTION: forcing a failure. [ 304.864897][T10608] name failslab, interval 1, probability 0, space 0, times 0 [ 304.865525][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.5.1559 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 304.865555][T10608] Tainted: [L]=SOFTLOCKUP [ 304.865562][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.865573][T10608] Call Trace: [ 304.865581][T10608] [ 304.865590][T10608] dump_stack_lvl+0xe8/0x150 [ 304.865624][T10608] should_fail_ex+0x46b/0x600 [ 304.865659][T10608] should_failslab+0xa8/0x100 [ 304.865680][T10608] ? __kernfs_new_node+0xe7/0xa70 [ 304.865707][T10608] kmem_cache_alloc_noprof+0x9e/0x690 [ 304.865735][T10608] ? __kernfs_new_node+0xe7/0xa70 [ 304.865769][T10608] __kernfs_new_node+0xe7/0xa70 [ 304.865799][T10608] ? lock_acquire+0x115/0x350 [ 304.865827][T10608] ? __pfx___kernfs_new_node+0x10/0x10 [ 304.865854][T10608] ? kernfs_root+0x1c/0x230 [ 304.865885][T10608] ? kernfs_root+0x1c/0x230 [ 304.865909][T10608] ? kernfs_root+0x1c/0x230 [ 304.865935][T10608] ? kernfs_root+0x1c/0x230 [ 304.865963][T10608] kernfs_new_node+0xeb/0x140 [ 304.865993][T10608] kernfs_create_link+0xe3/0x240 [ 304.866019][T10608] sysfs_do_create_link_sd+0x83/0x110 [ 304.866046][T10608] device_add_class_symlinks+0x1d2/0x240 [ 304.866074][T10608] device_add+0x467/0xb80 [ 304.866098][T10608] netdev_register_kobject+0x197/0x350 [ 304.866131][T10608] register_netdevice+0x1455/0x1ed0 [ 304.866177][T10608] ? __pfx_register_netdevice+0x10/0x10 [ 304.866202][T10608] ? alloc_netdev_mqs+0xd59/0x12c0 [ 304.866228][T10608] ? alloc_netdev_mqs+0xf0e/0x12c0 [ 304.866247][T10608] ? __ip_tunnel_create+0x3bb/0x550 [ 304.866274][T10608] __ip_tunnel_create+0x3e8/0x550 [ 304.866297][T10608] ? __pfx___ip_tunnel_create+0x10/0x10 [ 304.866319][T10608] ? bpf_lsm_capable+0x9/0x20 [ 304.866353][T10608] ip_tunnel_ctl+0x4fc/0xc50 [ 304.866377][T10608] vif_add+0x372/0x1690 [ 304.866414][T10608] ? __pfx_vif_add+0x10/0x10 [ 304.866440][T10608] ? lock_acquire+0x115/0x350 [ 304.866494][T10608] ip_mroute_setsockopt+0xf8a/0x10d0 [ 304.866527][T10608] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 304.866568][T10608] ? __lock_acquire+0x747/0x2de0 [ 304.866601][T10608] do_ip_setsockopt+0xeba/0x2e30 [ 304.866630][T10608] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 304.866650][T10608] ? do_futex+0x3e7/0x4e0 [ 304.866674][T10608] ? lock_acquire+0x115/0x350 [ 304.866707][T10608] ? __fget_files+0x2a/0x420 [ 304.866735][T10608] ip_setsockopt+0x66/0x110 [ 304.866756][T10608] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 304.866780][T10608] do_sock_setsockopt+0x17c/0x1b0 [ 304.866810][T10608] __x64_sys_setsockopt+0x143/0x1b0 [ 304.866842][T10608] do_syscall_64+0x166/0x520 [ 304.866868][T10608] ? trace_irq_disable+0x3b/0x140 [ 304.866892][T10608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.866911][T10608] ? clear_bhb_loop+0x70/0xc0 [ 304.866934][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.866953][T10608] RIP: 0033:0x7ff43defe559 [ 304.866971][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.866987][T10608] RSP: 002b:00007ff43c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.867008][T10608] RAX: ffffffffffffffda RBX: 00007ff43e185fa0 RCX: 00007ff43defe559 [ 304.867022][T10608] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 304.867034][T10608] RBP: 00007ff43df95ad8 R08: 0000000000000010 R09: 0000000000000000 [ 304.867047][T10608] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 304.867059][T10608] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 304.867091][T10608] [ 305.293435][ T4906] Bluetooth: hci4: command tx timeout [ 306.121527][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.121709][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.121861][T10524] bridge_slave_0: entered allmulticast mode [ 306.127455][T10524] bridge_slave_0: entered promiscuous mode [ 306.173839][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.175357][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.175550][T10524] bridge_slave_1: entered allmulticast mode [ 306.177904][T10524] bridge_slave_1: entered promiscuous mode [ 306.382915][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.417999][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.584160][T10524] team0: Port device team_slave_0 added [ 306.596800][T10524] team0: Port device team_slave_1 added [ 306.894978][ T5850] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 306.965028][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.965045][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.965068][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.983340][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.983356][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.983380][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.143847][ T5850] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 307.145123][ T5850] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.145151][ T5850] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 307.147316][ T5850] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.147344][ T5850] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 307.151859][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.151884][ T5850] usb 2-1: Product: syz [ 307.151906][ T5850] usb 2-1: Manufacturer: syz [ 307.151919][ T5850] usb 2-1: SerialNumber: syz [ 307.256393][ T5850] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 307.309455][ T5850] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 307.323186][ T5850] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 307.373541][ T4906] Bluetooth: hci4: command tx timeout [ 307.549989][T10645] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 307.611415][ T9] usb 2-1: USB disconnect, device number 13 [ 307.735817][T10665] overlayfs: failed to clone lowerpath [ 307.800499][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 307.852217][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 307.863287][ T9] ti_usb_3410_5052 2-1:2.0: device disconnected [ 307.972577][T10524] hsr_slave_0: entered promiscuous mode [ 307.976843][T10524] hsr_slave_1: entered promiscuous mode [ 307.978996][T10524] debugfs: 'hsr0' already exists in 'hsr' [ 307.979020][T10524] Cannot create hsr debugfs directory [ 308.514027][ T3308] bridge_slave_1: left allmulticast mode [ 308.514064][ T3308] bridge_slave_1: left promiscuous mode [ 308.514311][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.838303][ T3308] bridge_slave_0: left allmulticast mode [ 308.838334][ T3308] bridge_slave_0: left promiscuous mode [ 308.841574][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.142215][ T3308] batman_adv: batadv0: Interface deactivated: gretap1 [ 309.443439][ T4906] Bluetooth: hci4: command tx timeout [ 310.217980][T10717] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1594'. [ 310.316202][ T3308] batman_adv: batadv0: Removing interface: gretap1 [ 310.744042][ T3308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.827774][ T3308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.912157][ T3308] bond0 (unregistering): Released all slaves [ 314.371209][ T5251] 8021q: adding VLAN 0 to HW filter on device eth9 [ 314.553960][ T3307] netdevsim netdevsim6 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.553994][ T3307] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.554520][ T3307] netdevsim netdevsim6 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.554548][ T3307] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.554643][ T3307] netdevsim netdevsim6 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.554667][ T3307] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.554699][ T3307] netdevsim netdevsim6 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.554722][ T3307] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.650825][T10753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.650916][T10753] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 314.988978][T10753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.989222][T10753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 314.989404][T10753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.989578][T10753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 314.989654][T10753] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.168332][T10753] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.964003][T10795] input: syz0 as /devices/virtual/input/input10 [ 316.628080][ T5251] 8021q: adding VLAN 0 to HW filter on device eth11 [ 316.974544][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 317.043347][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.043397][ T4906] Bluetooth: hci0: command 0x0406 tx timeout [ 317.043427][ T4906] Bluetooth: hci1: command 0x0406 tx timeout [ 317.043547][ T5595] Bluetooth: hci3: command 0x0406 tx timeout [ 317.136512][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.136577][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.164172][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.165955][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.179830][ T9] usb 2-1: config 0 descriptor?? [ 317.195287][ T9] cp210x 2-1:0.0: cp210x converter detected [ 317.203186][ T5598] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.254627][ T3308] hsr_slave_0: left promiscuous mode [ 317.387540][ T3308] hsr_slave_1: left promiscuous mode [ 317.391822][ T3308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.391855][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.443639][ T3308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.443659][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.695843][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 317.757893][ T3308] veth1_macvtap: left promiscuous mode [ 317.758012][ T3308] veth0_macvtap: left promiscuous mode [ 317.759973][ T3308] veth1_vlan: left promiscuous mode [ 317.760188][ T3308] veth0_vlan: left promiscuous mode [ 317.813598][ T9] usb 2-1: USB disconnect, device number 14 [ 318.110308][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.115173][ T9] cp210x 2-1:0.0: device disconnected [ 318.523563][T10833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1624'. [ 318.576793][T10836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1624'. [ 319.133234][ T5598] Bluetooth: hci0: command 0x0406 tx timeout [ 319.152299][ T3308] team0 (unregistering): Port device team_slave_1 removed [ 319.234644][ T3308] team0 (unregistering): Port device team_slave_0 removed [ 319.283196][ T5598] Bluetooth: hci4: command 0x0c1a tx timeout [ 319.945651][T10833] ip6gre2: entered promiscuous mode [ 319.945680][T10833] ip6gre2: entered allmulticast mode [ 320.638702][T10524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 320.890541][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.931871][T10524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.107970][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.139363][T10524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.188604][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.190739][T10524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.351180][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.356300][ T5251] 8021q: adding VLAN 0 to HW filter on device eth10 [ 321.363391][ T5598] Bluetooth: hci4: command 0x0c1a tx timeout [ 322.223985][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.435891][T10524] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.520542][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.524568][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.574261][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.574396][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.367718][T10965] io-wq is not configured for unbound workers [ 325.707207][ T5251] 8021q: adding VLAN 0 to HW filter on device eth12 [ 326.834098][T10524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.876441][ T35] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 326.958341][T11015] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 327.222518][T11015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.229909][ T35] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 327.263850][T11004] ceph: No mds server is up or the cluster is laggy [ 327.694780][T11018] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 329.918110][T10524] veth0_vlan: entered promiscuous mode [ 329.972333][T10524] veth1_vlan: entered promiscuous mode [ 330.060622][T10524] veth0_macvtap: entered promiscuous mode [ 330.073489][T10524] veth1_macvtap: entered promiscuous mode [ 330.122562][T10524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.153758][T10524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.822398][ T3307] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.827033][T10001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.968527][T10010] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.017437][ T3307] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.808462][ T3284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.808486][ T3284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.510993][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 333.544791][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 333.717843][T10010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.717866][T10010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.737926][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 333.815832][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 334.015059][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 334.091247][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 334.154124][T11097] handle_userfault: 889 callbacks suppressed [ 334.154261][T11097] FAULT_FLAG_ALLOW_RETRY missing 801 [ 334.154283][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.5.1684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.154310][T11097] Tainted: [L]=SOFTLOCKUP [ 334.154317][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.154329][T11097] Call Trace: [ 334.154336][T11097] [ 334.154346][T11097] dump_stack_lvl+0xe8/0x150 [ 334.154380][T11097] handle_userfault+0x123d/0x1990 [ 334.154401][T11097] ? preempt_count_add+0x6a/0x140 [ 334.154440][T11097] ? __folio_put+0x30f/0x3c0 [ 334.154467][T11097] ? __pfx___folio_put+0x10/0x10 [ 334.154490][T11097] ? __pfx_handle_userfault+0x10/0x10 [ 334.154519][T11097] ? do_pte_missing+0x26ce/0x28f0 [ 334.154555][T11097] handle_mm_fault+0xf64/0x28c0 [ 334.154587][T11097] ? handle_mm_fault+0xeb/0x28c0 [ 334.154619][T11097] ? follow_page_pte+0x663/0xf20 [ 334.154644][T11097] ? __pfx_handle_mm_fault+0x10/0x10 [ 334.154674][T11097] ? follow_page_pte+0x74b/0xf20 [ 334.154708][T11097] ? __pfx_follow_page_pte+0x10/0x10 [ 334.154743][T11097] __get_user_pages+0x1676/0x2650 [ 334.154800][T11097] populate_vma_page_range+0x2be/0x3c0 [ 334.154827][T11097] ? __pfx_populate_vma_page_range+0x10/0x10 [ 334.154850][T11097] ? vma_wants_writenotify+0xb2/0x340 [ 334.154875][T11097] ? vma_set_page_prot+0xc3/0x100 [ 334.154902][T11097] mprotect_fixup+0x937/0xad0 [ 334.154927][T11097] ? __pfx_mprotect_fixup+0x10/0x10 [ 334.154949][T11097] ? mas_next_slot+0xc94/0xd70 [ 334.155000][T11097] do_mprotect_pkey+0x8e7/0xd10 [ 334.155034][T11097] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 334.155083][T11097] ? rcu_is_watching+0x16/0xb0 [ 334.155110][T11097] __x64_sys_mprotect+0x80/0x90 [ 334.155131][T11097] do_syscall_64+0x166/0x520 [ 334.155164][T11097] ? trace_irq_disable+0x3b/0x140 [ 334.155190][T11097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.155210][T11097] ? clear_bhb_loop+0x70/0xc0 [ 334.155233][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.155252][T11097] RIP: 0033:0x7ff43defe559 [ 334.155271][T11097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.155286][T11097] RSP: 002b:00007ff43c135028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 334.155308][T11097] RAX: ffffffffffffffda RBX: 00007ff43e186090 RCX: 00007ff43defe559 [ 334.155322][T11097] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 334.155334][T11097] RBP: 00007ff43df95ad8 R08: 0000000000000000 R09: 0000000000000000 [ 334.155345][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.155356][T11097] R13: 00007ff43e186128 R14: 00007ff43e186090 R15: 00007ffc21c889e8 [ 334.155388][T11097] [ 334.346708][T11083] ceph: No mds server is up or the cluster is laggy [ 334.361260][T11087] ceph: No mds server is up or the cluster is laggy [ 334.662608][ T1238] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 334.691864][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 335.470655][T11115] netlink: 'syz.3.1689': attribute type 4 has an invalid length. [ 336.877457][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1693'. [ 337.335281][T11137] FAULT_INJECTION: forcing a failure. [ 337.335281][T11137] name failslab, interval 1, probability 0, space 0, times 0 [ 337.335323][T11137] CPU: 0 UID: 0 PID: 11137 Comm: syz.1.1696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.335350][T11137] Tainted: [L]=SOFTLOCKUP [ 337.335357][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.335368][T11137] Call Trace: [ 337.335376][T11137] [ 337.335385][T11137] dump_stack_lvl+0xe8/0x150 [ 337.335427][T11137] should_fail_ex+0x46b/0x600 [ 337.335465][T11137] should_failslab+0xa8/0x100 [ 337.335488][T11137] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 337.335518][T11137] ? __kernfs_new_node+0xac/0xa70 [ 337.335543][T11137] ? __kernfs_new_node+0xac/0xa70 [ 337.335575][T11137] kstrdup+0x42/0x100 [ 337.335598][T11137] __kernfs_new_node+0xac/0xa70 [ 337.335635][T11137] ? __pfx___kernfs_new_node+0x10/0x10 [ 337.335660][T11137] ? kernfs_root+0x1c/0x230 [ 337.335692][T11137] ? kernfs_root+0x1c/0x230 [ 337.335740][T11137] ? kernfs_root+0x1c/0x230 [ 337.335772][T11137] kernfs_new_node+0xeb/0x140 [ 337.335804][T11137] kernfs_create_link+0xe3/0x240 [ 337.335830][T11137] sysfs_do_create_link_sd+0x83/0x110 [ 337.335858][T11137] device_add_class_symlinks+0x1d2/0x240 [ 337.335886][T11137] device_add+0x467/0xb80 [ 337.335910][T11137] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 337.335939][T11137] wakeup_source_register+0x17f/0x390 [ 337.335965][T11137] ep_insert+0x1034/0x1990 [ 337.336007][T11137] ? __pfx_ep_insert+0x10/0x10 [ 337.336042][T11137] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 337.336070][T11137] ? mutex_lock_nested+0x152/0x1d0 [ 337.336091][T11137] ? do_epoll_ctl_file+0xc94/0xf00 [ 337.336120][T11137] do_epoll_ctl_file+0x8d5/0xf00 [ 337.336150][T11137] ? do_epoll_ctl_file+0xae6/0xf00 [ 337.336178][T11137] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 337.336208][T11137] ? __fget_files+0x3a8/0x420 [ 337.336230][T11137] ? __fget_files+0x2a/0x420 [ 337.336256][T11137] ? fdget+0x1b2/0x250 [ 337.336281][T11137] __se_sys_epoll_ctl+0x162/0x230 [ 337.336312][T11137] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 337.336352][T11137] do_syscall_64+0x166/0x520 [ 337.336377][T11137] ? trace_irq_disable+0x3b/0x140 [ 337.336402][T11137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.336429][T11137] ? clear_bhb_loop+0x70/0xc0 [ 337.336453][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.336473][T11137] RIP: 0033:0x7f4a6366e559 [ 337.336492][T11137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.336508][T11137] RSP: 002b:00007f4a618c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 337.336529][T11137] RAX: ffffffffffffffda RBX: 00007f4a638f5fa0 RCX: 00007f4a6366e559 [ 337.336543][T11137] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 337.336555][T11137] RBP: 00007f4a63705ad8 R08: 0000000000000000 R09: 0000000000000000 [ 337.336567][T11137] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 337.336580][T11137] R13: 00007f4a638f6038 R14: 00007f4a638f5fa0 R15: 00007ffd8afb0668 [ 337.336614][T11137] [ 338.153005][T11152] ubi: mtd0 is already attached to ubi0 [ 338.296364][ T36] audit: type=1326 audit(1792497668.293:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.296497][ T36] audit: type=1326 audit(1792497668.293:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.303168][ T36] audit: type=1326 audit(1792497668.293:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.303214][ T36] audit: type=1326 audit(1792497668.293:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.303249][ T36] audit: type=1326 audit(1792497668.293:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.543161][ T36] audit: type=1326 audit(1792497668.533:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.543214][ T36] audit: type=1326 audit(1792497668.533:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.543250][ T36] audit: type=1326 audit(1792497668.533:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.5.1703" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43defe559 code=0x7ffc0000 [ 338.899011][T11158] team0: Port device xfrm0 added [ 338.972274][T11168] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 339.358905][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1710'. [ 339.929974][T11156] bond5: (slave syz_tun): Removing an active aggregator [ 340.002054][T11156] bond5: (slave syz_tun): Releasing backup interface [ 340.548146][ T35] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 340.581248][T11156] bond0: (slave team0): Releasing backup interface [ 340.775150][ T35] usb 2-1: Using ep0 maxpacket: 16 [ 340.783249][ T35] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 340.823317][ T35] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 340.823364][ T35] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 340.823390][ T35] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.823421][ T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.937081][ T35] usb 2-1: config 0 descriptor?? [ 341.046942][T11156] team0: Port device xfrm0 removed [ 341.049029][T11156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 341.685660][ T35] usbhid 2-1:0.0: can't add hid device: -71 [ 341.685780][ T35] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 341.724906][T11156] syz.4.1704 (11156) used greatest stack depth: 17864 bytes left [ 341.755681][ T35] usb 2-1: USB disconnect, device number 15 [ 341.881106][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 343.655961][T11241] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 343.815949][T11246] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1729'. [ 343.881042][T11248] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1729'. [ 344.080293][T11250] FAULT_INJECTION: forcing a failure. [ 344.080293][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 344.080333][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.7.1730 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.080361][T11250] Tainted: [L]=SOFTLOCKUP [ 344.080368][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.080379][T11250] Call Trace: [ 344.080387][T11250] [ 344.080396][T11250] dump_stack_lvl+0xe8/0x150 [ 344.080432][T11250] should_fail_ex+0x46b/0x600 [ 344.080468][T11250] should_failslab+0xa8/0x100 [ 344.080488][T11250] ? vm_area_dup+0x28/0x750 [ 344.080506][T11250] kmem_cache_alloc_noprof+0x9e/0x690 [ 344.080535][T11250] ? vm_area_dup+0x28/0x750 [ 344.080560][T11250] vm_area_dup+0x28/0x750 [ 344.080583][T11250] copy_vma+0x680/0xb50 [ 344.080612][T11250] ? __pfx_copy_vma+0x10/0x10 [ 344.080640][T11250] ? __vma_start_exclude_readers+0x6dd/0x9b0 [ 344.080685][T11250] ? move_vma+0x9a0/0x1bc0 [ 344.080717][T11250] move_vma+0xbed/0x1bc0 [ 344.080770][T11250] ? __pfx_move_vma+0x10/0x10 [ 344.080799][T11250] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 344.080822][T11250] ? mtree_load+0x12a/0x780 [ 344.080848][T11250] ? mtree_load+0x12a/0x780 [ 344.080875][T11250] ? cap_mmap_addr+0xaf/0x100 [ 344.080894][T11250] ? bpf_lsm_mmap_addr+0x9/0x50 [ 344.080915][T11250] ? security_mmap_addr+0x71/0x240 [ 344.080943][T11250] mremap_to+0x7f9/0x8d0 [ 344.080969][T11250] ? __pfx_mremap_to+0x10/0x10 [ 344.080990][T11250] ? __pfx_mtree_load+0x10/0x10 [ 344.081008][T11250] ? __pfx_check_prep_vma+0x10/0x10 [ 344.081046][T11250] __se_sys_mremap+0xf71/0x12e0 [ 344.081080][T11250] ? __pfx___se_sys_mremap+0x10/0x10 [ 344.081099][T11250] ? do_futex+0x3e7/0x4e0 [ 344.081124][T11250] ? __pfx_do_futex+0x10/0x10 [ 344.081144][T11250] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 344.081174][T11250] ? __se_sys_futex+0x3a8/0x450 [ 344.081212][T11250] ? __x64_sys_mremap+0x20/0xc0 [ 344.081239][T11250] do_syscall_64+0x166/0x520 [ 344.081272][T11250] ? trace_irq_disable+0x3b/0x140 [ 344.081297][T11250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.081322][T11250] ? clear_bhb_loop+0x70/0xc0 [ 344.081345][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.081363][T11250] RIP: 0033:0x7f97b6f1e559 [ 344.081382][T11250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.081398][T11250] RSP: 002b:00007f97b5176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 344.081420][T11250] RAX: ffffffffffffffda RBX: 00007f97b71a5fa0 RCX: 00007f97b6f1e559 [ 344.081435][T11250] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000 [ 344.081448][T11250] RBP: 00007f97b6fb5ad8 R08: 0000200000a00000 R09: 0000000000000000 [ 344.081462][T11250] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 344.081474][T11250] R13: 00007f97b71a6038 R14: 00007f97b71a5fa0 R15: 00007ffc3d7aa898 [ 344.081505][T11250] [ 344.557651][T11241] bond6 (unregistering): Released all slaves [ 344.814842][T11254] netlink: zone id is out of range [ 344.814879][T11254] netlink: zone id is out of range [ 344.814884][T11254] netlink: zone id is out of range [ 345.634616][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 345.800800][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 346.234089][T11273] hsr0: entered allmulticast mode [ 346.234115][T11273] hsr_slave_0: entered allmulticast mode [ 346.234140][T11273] hsr_slave_1: entered allmulticast mode [ 346.363347][T11274] batman_adv: batadv0: Adding interface: syzkaller0 [ 346.363366][T11274] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.363398][T11274] batman_adv: batadv0: Interface activated: syzkaller0 [ 346.420154][T11276] hsr_slave_0: left promiscuous mode [ 346.456721][T11276] hsr_slave_1: left promiscuous mode [ 346.774506][T11276] hsr0 (unregistering): left allmulticast mode [ 346.871333][T11295] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 346.994874][T11266] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 347.277472][T11266] batman_adv: batadv0: Removing interface: syzkaller0 [ 347.579035][T11295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.696448][T11296] bond6: (slave geneve2): making interface the new active one [ 347.729588][T11296] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 347.731094][T11304] FAULT_INJECTION: forcing a failure. [ 347.731094][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 347.731128][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.5.1746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.731155][T11304] Tainted: [L]=SOFTLOCKUP [ 347.731162][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.731174][T11304] Call Trace: [ 347.731182][T11304] [ 347.731190][T11304] dump_stack_lvl+0xe8/0x150 [ 347.731225][T11304] should_fail_ex+0x46b/0x600 [ 347.731261][T11304] should_failslab+0xa8/0x100 [ 347.731283][T11304] __kmalloc_noprof+0xfb/0x790 [ 347.731312][T11304] ? sock_kmalloc+0xd6/0x160 [ 347.731337][T11304] ? sock_kmalloc+0xd6/0x160 [ 347.731369][T11304] sock_kmalloc+0xd6/0x160 [ 347.731399][T11304] __ip_mc_join_group+0x372/0x500 [ 347.731432][T11304] do_ip_setsockopt+0x2013/0x2e30 [ 347.731461][T11304] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 347.731482][T11304] ? do_futex+0x3e7/0x4e0 [ 347.731501][T11304] ? __asan_memcpy+0x40/0x70 [ 347.731529][T11304] ? lock_acquire+0x115/0x350 [ 347.731563][T11304] ? __fget_files+0x2a/0x420 [ 347.731592][T11304] ip_setsockopt+0x66/0x110 [ 347.731612][T11304] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 347.731637][T11304] do_sock_setsockopt+0x17c/0x1b0 [ 347.731667][T11304] __x64_sys_setsockopt+0x143/0x1b0 [ 347.731698][T11304] do_syscall_64+0x166/0x520 [ 347.731724][T11304] ? trace_irq_disable+0x3b/0x140 [ 347.731749][T11304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.731768][T11304] ? clear_bhb_loop+0x70/0xc0 [ 347.731799][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.731817][T11304] RIP: 0033:0x7ff43defe559 [ 347.731836][T11304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.731852][T11304] RSP: 002b:00007ff43c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.731873][T11304] RAX: ffffffffffffffda RBX: 00007ff43e185fa0 RCX: 00007ff43defe559 [ 347.731887][T11304] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 347.731899][T11304] RBP: 00007ff43df95ad8 R08: 000000000000000c R09: 0000000000000000 [ 347.731911][T11304] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 347.731923][T11304] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 347.731956][T11304] [ 348.915408][T11324] sctp: [Deprecated]: syz.3.1753 (pid 11324) Use of int in max_burst socket option. [ 348.915408][T11324] Use struct sctp_assoc_value instead [ 349.247444][T11333] bridge_slave_0: left allmulticast mode [ 349.247478][T11333] bridge_slave_0: left promiscuous mode [ 349.247730][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.397519][T10028] IPVS: starting estimator thread 0... [ 349.523275][T11349] IPVS: using max 8 ests per chain, 19200 per kthread [ 350.310222][T11333] bridge_slave_1: left allmulticast mode [ 350.310256][T11333] bridge_slave_1: left promiscuous mode [ 350.332502][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.026124][T11333] bond0: (slave bond_slave_0): Releasing backup interface [ 351.402038][T11333] bond0: (slave bond_slave_1): Releasing backup interface [ 351.822695][T11333] team0: Port device team_slave_0 removed [ 352.069954][T11333] team0: Port device team_slave_1 removed [ 352.071502][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.071529][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.158900][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.158929][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.199247][T11333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 352.326709][T11337] team0: Port device xfrm0 added [ 352.588883][T11353] syzkaller1: entered promiscuous mode [ 352.588911][T11353] syzkaller1: entered allmulticast mode [ 355.141568][T11447] Option 'dnserror' to dns_resolver key: bad/missing value [ 355.238407][T11450] FAULT_INJECTION: forcing a failure. [ 355.238407][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 355.238445][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.5.1792 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.238472][T11450] Tainted: [L]=SOFTLOCKUP [ 355.238479][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.238490][T11450] Call Trace: [ 355.238497][T11450] [ 355.238505][T11450] dump_stack_lvl+0xe8/0x150 [ 355.238538][T11450] should_fail_ex+0x46b/0x600 [ 355.238574][T11450] should_failslab+0xa8/0x100 [ 355.238597][T11450] __kmalloc_noprof+0xfb/0x790 [ 355.238625][T11450] ? security_inode_init_security+0x102/0x3e0 [ 355.238649][T11450] ? security_inode_init_security+0x102/0x3e0 [ 355.238681][T11450] security_inode_init_security+0x102/0x3e0 [ 355.238706][T11450] ? __pfx_shmem_initxattrs+0x10/0x10 [ 355.238738][T11450] ? __pfx_security_inode_init_security+0x10/0x10 [ 355.238765][T11450] ? set_cached_acl+0xd2/0x180 [ 355.238792][T11450] ? simple_acl_create+0x184/0x1b0 [ 355.238825][T11450] shmem_mknod+0x1ea/0x340 [ 355.238850][T11450] shmem_mkdir+0x33/0x70 [ 355.238872][T11450] vfs_mkdir+0x408/0x620 [ 355.238907][T11450] filename_mkdirat+0x289/0x520 [ 355.238940][T11450] ? __pfx_filename_mkdirat+0x10/0x10 [ 355.238971][T11450] ? do_getname+0x151/0x250 [ 355.238995][T11450] __se_sys_mkdirat+0x35/0x150 [ 355.239026][T11450] do_syscall_64+0x166/0x520 [ 355.239053][T11450] ? trace_irq_disable+0x3b/0x140 [ 355.239077][T11450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.239098][T11450] ? clear_bhb_loop+0x70/0xc0 [ 355.239122][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.239142][T11450] RIP: 0033:0x7ff43defe559 [ 355.239160][T11450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.239176][T11450] RSP: 002b:00007ff43c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 355.239197][T11450] RAX: ffffffffffffffda RBX: 00007ff43e185fa0 RCX: 00007ff43defe559 [ 355.239211][T11450] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: ffffffffffffff9c [ 355.239224][T11450] RBP: 00007ff43df95ad8 R08: 0000000000000000 R09: 0000000000000000 [ 355.239237][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.239248][T11450] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 355.239280][T11450] [ 357.050204][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 358.150551][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 358.150577][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 358.486801][ T999] IPVS: starting estimator thread 0... [ 358.573252][T11517] IPVS: using max 10 ests per chain, 24000 per kthread [ 358.721016][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1811'. [ 360.355995][T11550] netlink: 'syz.5.1822': attribute type 1 has an invalid length. [ 360.656474][T11555] bond3: (slave gretap1): making interface the new active one [ 360.664604][T11555] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 363.293325][T11583] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.338238][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1861'. [ 370.303557][T11690] FAULT_INJECTION: forcing a failure. [ 370.303557][T11690] name failslab, interval 1, probability 0, space 0, times 0 [ 370.303606][T11690] CPU: 1 UID: 0 PID: 11690 Comm: syz.7.1864 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 370.303621][T11690] Tainted: [L]=SOFTLOCKUP [ 370.303625][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.303634][T11690] Call Trace: [ 370.303639][T11690] [ 370.303644][T11690] dump_stack_lvl+0xe8/0x150 [ 370.303665][T11690] should_fail_ex+0x46b/0x600 [ 370.303685][T11690] should_failslab+0xa8/0x100 [ 370.303698][T11690] __kmalloc_noprof+0xfb/0x790 [ 370.303719][T11690] ? do_handle_open+0x4f1/0xb10 [ 370.303735][T11690] ? do_handle_open+0x4f1/0xb10 [ 370.303749][T11690] do_handle_open+0x4f1/0xb10 [ 370.303763][T11690] ? __pfx_do_handle_open+0x10/0x10 [ 370.303776][T11690] ? ksys_write+0x248/0x270 [ 370.303794][T11690] ? __pfx_ksys_write+0x10/0x10 [ 370.303812][T11690] do_syscall_64+0x166/0x520 [ 370.303825][T11690] ? trace_irq_disable+0x3b/0x140 [ 370.303839][T11690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.303849][T11690] ? clear_bhb_loop+0x70/0xc0 [ 370.303861][T11690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.303874][T11690] RIP: 0033:0x7f97b6f1e559 [ 370.303885][T11690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.303893][T11690] RSP: 002b:00007f97b5176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 370.303904][T11690] RAX: ffffffffffffffda RBX: 00007f97b71a5fa0 RCX: 00007f97b6f1e559 [ 370.303912][T11690] RDX: 0000000000000400 RSI: 0000200000000340 RDI: 0000000000000003 [ 370.303918][T11690] RBP: 00007f97b6fb5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 370.303925][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.303931][T11690] R13: 00007f97b71a6038 R14: 00007f97b71a5fa0 R15: 00007ffc3d7aa898 [ 370.303948][T11690] [ 371.555189][T11705] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 373.061791][T11722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1874'. [ 374.533319][ T5597] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 374.687165][ T5597] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 374.689002][ T5597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.018534][ T5597] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 375.331814][ T5597] usb 8-1: USB disconnect, device number 2 [ 376.521452][T11768] uprobe: syz.5.1888:11768 failed to unregister, leaking uprobe [ 377.372543][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 378.525164][T11808] overlayfs: failed to clone lowerpath [ 378.587067][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.587126][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.699452][T11810] overlayfs: failed to clone lowerpath [ 383.371580][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 384.537910][T11938] netlink: 'syz.7.1941': attribute type 5 has an invalid length. [ 386.302046][T11960] FAULT_INJECTION: forcing a failure. [ 386.302046][T11960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.302083][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz.5.1949 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.302110][T11960] Tainted: [L]=SOFTLOCKUP [ 386.302116][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.302127][T11960] Call Trace: [ 386.302136][T11960] [ 386.302144][T11960] dump_stack_lvl+0xe8/0x150 [ 386.302178][T11960] should_fail_ex+0x46b/0x600 [ 386.302213][T11960] _copy_from_user+0x2d/0xb0 [ 386.302239][T11960] do_fcntl+0x987/0x1a50 [ 386.302270][T11960] ? smack_file_fcntl+0x27c/0x320 [ 386.302296][T11960] ? __pfx_do_fcntl+0x10/0x10 [ 386.302322][T11960] ? __pfx_smack_file_fcntl+0x10/0x10 [ 386.302358][T11960] ? __fget_files+0x2a/0x420 [ 386.302386][T11960] ? bpf_lsm_file_fcntl+0x9/0x20 [ 386.302410][T11960] __se_sys_fcntl+0xcb/0x160 [ 386.302435][T11960] do_syscall_64+0x166/0x520 [ 386.302458][T11960] ? trace_irq_disable+0x3b/0x140 [ 386.302482][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.302501][T11960] ? clear_bhb_loop+0x70/0xc0 [ 386.302524][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.302542][T11960] RIP: 0033:0x7ff43defe559 [ 386.302557][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.302572][T11960] RSP: 002b:00007ff43c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 386.302592][T11960] RAX: ffffffffffffffda RBX: 00007ff43e185fa0 RCX: 00007ff43defe559 [ 386.302605][T11960] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 386.302617][T11960] RBP: 00007ff43df95ad8 R08: 0000000000000000 R09: 0000000000000000 [ 386.302629][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.302640][T11960] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 386.302672][T11960] [ 387.453085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 388.422875][T11975] overlayfs: failed to clone upperpath [ 388.697434][T11978] FAULT_INJECTION: forcing a failure. [ 388.697434][T11978] name failslab, interval 1, probability 0, space 0, times 0 [ 388.697472][T11978] CPU: 0 UID: 0 PID: 11978 Comm: syz.5.1953 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.697499][T11978] Tainted: [L]=SOFTLOCKUP [ 388.697506][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.697518][T11978] Call Trace: [ 388.697525][T11978] [ 388.697534][T11978] dump_stack_lvl+0xe8/0x150 [ 388.697568][T11978] should_fail_ex+0x46b/0x600 [ 388.697603][T11978] should_failslab+0xa8/0x100 [ 388.697624][T11978] ? mas_alloc_nodes+0x291/0x350 [ 388.697651][T11978] kmem_cache_alloc_noprof+0x9e/0x690 [ 388.697680][T11978] ? mas_alloc_nodes+0x291/0x350 [ 388.697712][T11978] mas_alloc_nodes+0x291/0x350 [ 388.697742][T11978] mas_preallocate+0x42d/0x840 [ 388.697774][T11978] ? __pfx_mas_preallocate+0x10/0x10 [ 388.697818][T11978] ? __mas_set_range+0x11a/0x3a0 [ 388.697844][T11978] __split_vma+0x2f3/0xa00 [ 388.697872][T11978] ? __pfx___split_vma+0x10/0x10 [ 388.697901][T11978] ? kernel_text_address+0xa5/0xe0 [ 388.697933][T11978] vma_modify+0x157f/0x1ba0 [ 388.697971][T11978] vma_modify_flags_uffd+0x2a5/0x360 [ 388.697994][T11978] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 388.698035][T11978] ? __pfx_vma_can_userfault+0x10/0x10 [ 388.698069][T11978] userfaultfd_register_range+0x3fd/0x5f0 [ 388.698105][T11978] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 388.698145][T11978] ? mas_find+0x451/0xcb0 [ 388.698177][T11978] userfaultfd_register+0xa85/0xc90 [ 388.698224][T11978] ? __pfx_userfaultfd_register+0x10/0x10 [ 388.698261][T11978] ? smack_file_ioctl+0x2c4/0x370 [ 388.698292][T11978] ? __pfx_smack_file_ioctl+0x10/0x10 [ 388.698322][T11978] userfaultfd_ioctl+0x264/0x560 [ 388.698349][T11978] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 388.698374][T11978] ? __fget_files+0x2a/0x420 [ 388.698401][T11978] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.698425][T11978] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 388.698448][T11978] __se_sys_ioctl+0xff/0x170 [ 388.698476][T11978] do_syscall_64+0x166/0x520 [ 388.698502][T11978] ? trace_irq_disable+0x3b/0x140 [ 388.698526][T11978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.698545][T11978] ? clear_bhb_loop+0x70/0xc0 [ 388.698568][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.698586][T11978] RIP: 0033:0x7ff43defe559 [ 388.698605][T11978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.698621][T11978] RSP: 002b:00007ff43c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.698642][T11978] RAX: ffffffffffffffda RBX: 00007ff43e185fa0 RCX: 00007ff43defe559 [ 388.698666][T11978] RDX: 0000200000000180 RSI: 00000000c020aa00 RDI: 0000000000000004 [ 388.698679][T11978] RBP: 00007ff43df95ad8 R08: 0000000000000000 R09: 0000000000000000 [ 388.698691][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.698702][T11978] R13: 00007ff43e186038 R14: 00007ff43e185fa0 R15: 00007ffc21c889e8 [ 388.698734][T11978] [ 388.701440][T11974] netlink: 'syz.1.1954': attribute type 8 has an invalid length. [ 388.701462][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 388.739265][T11974] veth1_to_batadv: entered promiscuous mode [ 388.740849][T11974] gretap0: entered promiscuous mode [ 389.231400][T11974] veth1_to_batadv: left promiscuous mode [ 389.300499][T11974] gretap0: left promiscuous mode [ 391.276477][ T36] audit: type=1326 audit(1792497721.273:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.5.1965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff43defe559 code=0x0 [ 391.883062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 394.513398][T12042] netlink: 'syz.5.1979': attribute type 1 has an invalid length. [ 394.824316][T12042] bond4: entered promiscuous mode [ 394.824856][T12042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.873079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 398.143552][T12085] FAULT_INJECTION: forcing a failure. [ 398.143552][T12085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.143577][T12085] CPU: 1 UID: 0 PID: 12085 Comm: syz.7.1988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.143592][T12085] Tainted: [L]=SOFTLOCKUP [ 398.143595][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.143602][T12085] Call Trace: [ 398.143607][T12085] [ 398.143613][T12085] dump_stack_lvl+0xe8/0x150 [ 398.143633][T12085] should_fail_ex+0x46b/0x600 [ 398.143675][T12085] copy_fpstate_to_sigframe+0xac0/0xd80 [ 398.143695][T12085] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 398.143712][T12085] ? lock_acquire+0x115/0x350 [ 398.143730][T12085] ? do_raw_spin_lock+0x12b/0x2f0 [ 398.143744][T12085] ? fpu__alloc_mathframe+0xac/0x130 [ 398.143759][T12085] get_sigframe+0x603/0x830 [ 398.143777][T12085] ? __pfx_get_sigframe+0x10/0x10 [ 398.143792][T12085] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 398.143831][T12085] x64_setup_rt_frame+0x164/0xc50 [ 398.143845][T12085] ? rt_spin_unlock+0x159/0x200 [ 398.143859][T12085] ? rt_spin_unlock+0x165/0x200 [ 398.143872][T12085] ? get_signal+0x10de/0x12c0 [ 398.143889][T12085] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 398.143909][T12085] arch_do_signal_or_restart+0x45b/0x860 [ 398.143925][T12085] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 398.143947][T12085] exit_to_user_mode_loop+0x10e/0x770 [ 398.143960][T12085] ? rcu_is_watching+0x16/0xb0 [ 398.143972][T12085] do_syscall_64+0x328/0x520 [ 398.143986][T12085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.143996][T12085] ? clear_bhb_loop+0x70/0xc0 [ 398.144007][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.144016][T12085] RIP: 0033:0x7f97b6f1e559 [ 398.144027][T12085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.144036][T12085] RSP: 002b:00007f97b5176028 EFLAGS: 00000246 [ 398.144046][T12085] RAX: 0000000000000000 RBX: 00007f97b71a5fa0 RCX: 00007f97b6f1e559 [ 398.144053][T12085] RDX: 0000200000000300 RSI: 236bd4336e4642df RDI: 0000000000000000 [ 398.144059][T12085] RBP: 00007f97b6fb5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 398.144065][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.144071][T12085] R13: 00007f97b71a6038 R14: 00007f97b71a5fa0 R15: 00007ffc3d7aa898 [ 398.144086][T12085] [ 400.719548][T12120] netlink: 'syz.4.1997': attribute type 12 has an invalid length. [ 401.896682][T12128] netdevsim netdevsim7 : renamed from netdevsim0 (while UP) [ 401.997077][T12133] overlayfs: failed to clone upperpath [ 402.983337][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 403.188270][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 403.189844][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.189976][ T9] usb 8-1: config 0 has no interfaces? [ 403.261629][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.261656][ T9] usb 8-1: Product: syz [ 403.261670][ T9] usb 8-1: Manufacturer: syz [ 403.261684][ T9] usb 8-1: SerialNumber: syz [ 403.311093][ T9] usb 8-1: config 0 descriptor?? [ 403.463440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 403.483093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 403.547271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 403.563103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 403.823278][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 404.050926][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 404.069856][ T9] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 404.069883][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 404.072454][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.072479][ T9] usb 6-1: Product: syz [ 404.072487][ T9] usb 6-1: Manufacturer: syz [ 404.072495][ T9] usb 6-1: SerialNumber: syz [ 404.116854][ T9] usb 6-1: config 0 descriptor?? [ 404.178742][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 404.298767][ T35] usb 8-1: USB disconnect, device number 3 [ 404.323912][ T9] gspca_sunplus: reg_r err -32 [ 404.324003][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 405.117991][T12162] vlan1: entered promiscuous mode [ 405.118009][T12162] bridge0: entered promiscuous mode [ 405.272612][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 406.375717][ T5597] usb 6-1: USB disconnect, device number 9 [ 408.353267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 412.682756][T12260] netlink: 'syz.7.2045': attribute type 1 has an invalid length. [ 412.875919][T12260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.962609][T12264] bond1: (slave gretap1): making interface the new active one [ 413.077690][T12264] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 413.491207][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 417.403411][T12297] uprobe: syz.7.2058:12297 failed to unregister, leaking uprobe [ 417.656680][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 418.249099][T12326] overlayfs: failed to resolve './bus': -2 [ 427.361305][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2088'. [ 428.581678][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 429.078437][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2094'. [ 429.078563][T12406] netlink: 'syz.7.2094': attribute type 6 has an invalid length. [ 430.138728][ T35] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 430.926298][ T35] usb 6-1: unable to get BOS descriptor or descriptor too short [ 430.927072][ T35] usb 6-1: not running at top speed; connect to a high speed hub [ 430.927110][ T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.927160][ T35] usb 6-1: too many configurations: 24, using maximum allowed: 8 [ 430.930203][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.931452][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.933725][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.940064][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.941299][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.942983][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.530889][T12406] @: entered promiscuous mode [ 431.891377][T12429] overlayfs: failed to clone upperpath [ 432.184783][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.186711][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.187443][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2094'. [ 432.187673][T12406] netlink: 'syz.7.2094': attribute type 6 has an invalid length. [ 432.203728][ T35] usb 6-1: New USB device strings: Mfr=131, Product=136, SerialNumber=144 [ 432.203758][ T35] usb 6-1: Product: syz [ 432.203772][ T35] usb 6-1: Manufacturer: syz [ 432.203785][ T35] usb 6-1: SerialNumber: syz [ 432.359447][T11884] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.359497][T11884] netdevsim netdevsim7 : set [0, 0] type 1 family 0 port 8472 - 0 [ 432.359532][T11884] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.359566][T11884] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.626288][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2100'. [ 433.626326][T12432] netlink: 'syz.3.2100': attribute type 7 has an invalid length. [ 433.626339][T12432] netlink: 'syz.3.2100': attribute type 8 has an invalid length. [ 433.626350][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'. [ 433.669660][ T35] usb 6-1: USB disconnect, device number 10 [ 433.742347][T12432] 0ªî{X¹¦: entered promiscuous mode [ 433.905129][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 433.972018][T12432] 0ªî{X¹¦: left promiscuous mode [ 434.873165][ T30] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 435.473102][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 435.473916][ T30] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 435.510356][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.510384][ T30] usb 6-1: Product: syz [ 435.510398][ T30] usb 6-1: Manufacturer: syz [ 435.510411][ T30] usb 6-1: SerialNumber: syz [ 438.121020][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.122053][ T30] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 438.259747][ T30] usb 6-1: USB disconnect, device number 11 [ 440.023266][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.023337][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.308553][T12499] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 448.876260][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.108547][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.151611][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.167375][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.168119][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.373904][ T5598] Bluetooth: hci5: command tx timeout [ 453.487936][ T5598] Bluetooth: hci5: command tx timeout [ 455.523269][ T5598] Bluetooth: hci5: command tx timeout [ 456.410453][T12527] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.646595][ T5598] Bluetooth: hci5: command tx timeout [ 464.518673][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.573815][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.582491][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.604840][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.856034][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 465.731712][ T5595] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 465.767123][ T5595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 465.845410][ T5595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 465.948968][ T5595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 466.005363][ T5595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 466.242479][T12432] tipc: Resetting bearer [ 467.123236][ T5595] Bluetooth: hci6: command tx timeout [ 467.359231][T12432] tipc: Disabling bearer [ 468.316638][ T5595] Bluetooth: hci7: command tx timeout [ 469.203334][ T5595] Bluetooth: hci6: command tx timeout [ 470.323771][ T5595] Bluetooth: hci7: command tx timeout [ 471.283170][ T5595] Bluetooth: hci6: command tx timeout [ 472.403540][ T5595] Bluetooth: hci7: command tx timeout [ 473.363204][ T5595] Bluetooth: hci6: command tx timeout [ 474.483684][ T5595] Bluetooth: hci7: command tx timeout [ 476.241326][T12527] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.241440][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.241620][T12527] bridge_slave_0: entered allmulticast mode [ 476.328978][T12527] bridge_slave_0: entered promiscuous mode [ 476.349789][T12527] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.373375][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.373575][T12527] bridge_slave_1: entered allmulticast mode [ 476.375894][T12527] bridge_slave_1: entered promiscuous mode [ 478.196110][T12527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.314411][T12565] rxe_eth0 speed is unknown, defaulting to 1000 [ 478.339043][T12527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.329429][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 480.488769][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.502706][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.519698][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.520652][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.794683][T12527] team0: Port device team_slave_0 added [ 480.831837][T12527] team0: Port device team_slave_1 added [ 481.947968][T12527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.947985][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.948011][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.983148][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.983167][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.983192][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.883285][ T5595] Bluetooth: hci0: command tx timeout [ 484.144751][T12572] rxe_eth0 speed is unknown, defaulting to 1000 [ 484.300930][T12527] hsr_slave_0: entered promiscuous mode [ 484.307729][T12527] hsr_slave_1: entered promiscuous mode [ 484.314140][T12527] debugfs: 'hsr0' already exists in 'hsr' [ 484.314168][T12527] Cannot create hsr debugfs directory [ 484.963318][ T5598] Bluetooth: hci0: command tx timeout [ 487.044477][ T5598] Bluetooth: hci0: command tx timeout [ 489.133349][ T5598] Bluetooth: hci0: command tx timeout [ 491.439722][T12624] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.456574][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.456650][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.719004][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 507.762284][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 507.771112][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 507.772116][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 507.773488][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.006829][ T5598] Bluetooth: hci3: command tx timeout [ 512.083110][ T5598] Bluetooth: hci3: command tx timeout [ 512.335625][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.335752][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.348549][T12565] bridge_slave_0: entered allmulticast mode [ 512.361779][T12565] bridge_slave_0: entered promiscuous mode [ 512.660454][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.660579][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.660786][T12565] bridge_slave_1: entered allmulticast mode [ 512.965733][T12565] bridge_slave_1: entered promiscuous mode [ 514.163173][ T5598] Bluetooth: hci3: command tx timeout [ 514.614181][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.872011][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.430694][T12672] rxe_eth0 speed is unknown, defaulting to 1000 [ 515.702905][ T5595] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 515.782190][ T5595] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 515.800420][ T5595] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 515.822257][ T5595] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 515.853938][ T5595] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 516.243088][ T5595] Bluetooth: hci3: command tx timeout [ 517.952457][T12572] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.952666][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.952880][T12572] bridge_slave_0: entered allmulticast mode [ 518.002358][T12572] bridge_slave_0: entered promiscuous mode [ 518.491986][ T5595] Bluetooth: hci8: command tx timeout [ 520.573789][ T5595] Bluetooth: hci8: command tx timeout [ 522.663079][ T5595] Bluetooth: hci8: command tx timeout [ 523.110364][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.165948][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.218742][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.234674][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.238181][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.709662][T12565] team0: Port device team_slave_0 added [ 523.729933][T12572] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.730073][T12572] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.730271][T12572] bridge_slave_1: entered allmulticast mode [ 523.743278][T12572] bridge_slave_1: entered promiscuous mode [ 524.723112][ T5595] Bluetooth: hci8: command tx timeout [ 525.523720][ T5595] Bluetooth: hci4: command tx timeout [ 526.069143][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.217946][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.238622][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.244659][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.248234][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.603139][ T5595] Bluetooth: hci4: command tx timeout [ 528.643101][ T5595] Bluetooth: hci5: command tx timeout [ 529.683485][ T5595] Bluetooth: hci4: command tx timeout [ 530.723142][ T5595] Bluetooth: hci5: command tx timeout [ 531.777332][ T5595] Bluetooth: hci4: command tx timeout [ 534.160679][ T5595] Bluetooth: hci5: command tx timeout [ 536.240221][T11889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.240257][T11889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.253373][ T5595] Bluetooth: hci5: command tx timeout [ 539.651199][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 539.698245][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 539.699911][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 539.701397][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 539.702135][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.876216][ T5595] Bluetooth: hci6: command tx timeout [ 543.923224][ T5595] Bluetooth: hci6: command tx timeout [ 546.003144][ T5595] Bluetooth: hci6: command tx timeout [ 547.252345][T12697] rxe_eth0 speed is unknown, defaulting to 1000 [ 548.083222][ T5595] Bluetooth: hci6: command tx timeout [ 551.228229][T12705] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.441076][T12713] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.724978][T12672] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.725115][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.725322][T12672] bridge_slave_0: entered allmulticast mode [ 554.761231][T12672] bridge_slave_0: entered promiscuous mode [ 555.195956][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.196081][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.196296][T12672] bridge_slave_1: entered allmulticast mode [ 555.225772][T12672] bridge_slave_1: entered promiscuous mode [ 557.062181][T12672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.266094][T12672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.446339][T12726] rxe_eth0 speed is unknown, defaulting to 1000 [ 559.255073][T12672] team0: Port device team_slave_0 added [ 560.057617][T12672] team0: Port device team_slave_1 added [ 561.391208][T12672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.391228][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.391253][T12672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.285234][T12672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.285252][T12672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.285278][T12672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.994598][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.994669][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.567151][T12672] hsr_slave_0: entered promiscuous mode [ 566.578344][T12672] hsr_slave_1: entered promiscuous mode [ 566.585395][T12672] debugfs: 'hsr0' already exists in 'hsr' [ 566.585423][T12672] Cannot create hsr debugfs directory [ 567.167995][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.168208][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.168749][T12697] bridge_slave_0: entered allmulticast mode [ 567.237706][T12697] bridge_slave_0: entered promiscuous mode [ 567.476868][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.476967][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.477159][T12697] bridge_slave_1: entered allmulticast mode [ 567.506136][T12697] bridge_slave_1: entered promiscuous mode [ 570.056681][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.124047][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 570.157265][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 570.159037][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 570.159742][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.045301][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.263315][ T5595] Bluetooth: hci0: command tx timeout [ 574.454453][ T5595] Bluetooth: hci0: command tx timeout [ 574.780076][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.822736][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.898171][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.923175][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.953346][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.970105][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.483108][ T5598] Bluetooth: hci0: command tx timeout [ 577.399088][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.399211][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.399425][T12705] bridge_slave_0: entered allmulticast mode [ 577.401761][T12705] bridge_slave_0: entered promiscuous mode [ 577.767369][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.767504][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.767721][T12705] bridge_slave_1: entered allmulticast mode [ 577.777932][T12705] bridge_slave_1: entered promiscuous mode [ 578.163201][ T5598] Bluetooth: hci3: command tx timeout [ 578.575064][ T5598] Bluetooth: hci0: command tx timeout [ 580.243172][ T5598] Bluetooth: hci3: command tx timeout [ 582.323135][ T5598] Bluetooth: hci3: command tx timeout [ 583.354296][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 583.471734][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 583.492354][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 583.501266][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 583.511438][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.512423][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.403066][ T5598] Bluetooth: hci3: command tx timeout [ 585.888240][ T5598] Bluetooth: hci1: command tx timeout [ 586.778193][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.835384][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.858268][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.874528][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.876337][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.144514][T12713] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 587.923038][ T5598] Bluetooth: hci1: command tx timeout [ 589.123108][ T5598] Bluetooth: hci2: command tx timeout [ 590.003081][ T5598] Bluetooth: hci1: command tx timeout [ 591.204098][ T5598] Bluetooth: hci2: command tx timeout [ 592.083261][ T5598] Bluetooth: hci1: command tx timeout [ 592.419058][T12776] rxe_eth0 speed is unknown, defaulting to 1000 [ 593.144442][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.144578][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.144789][T12726] bridge_slave_0: entered allmulticast mode [ 593.193842][T12726] bridge_slave_0: entered promiscuous mode [ 593.284559][ T5598] Bluetooth: hci2: command tx timeout [ 594.139682][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.139809][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.140025][T12726] bridge_slave_1: entered allmulticast mode [ 594.197258][T12726] bridge_slave_1: entered promiscuous mode [ 595.403213][ T5598] Bluetooth: hci2: command tx timeout [ 599.596306][T12786] rxe_eth0 speed is unknown, defaulting to 1000 [ 602.164300][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 602.226226][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 602.240969][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 602.263484][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 602.264244][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 604.370370][ T5598] Bluetooth: hci4: command tx timeout [ 604.727220][T12813] rxe_eth0 speed is unknown, defaulting to 1000 [ 606.433229][ T5598] Bluetooth: hci4: command tx timeout [ 608.001782][T10022] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 608.485152][ T5595] Bluetooth: hci4: command tx timeout [ 610.563130][ T5595] Bluetooth: hci4: command tx timeout [ 613.305364][T12821] rxe_eth0 speed is unknown, defaulting to 1000 [ 617.001336][T12845] rxe_eth0 speed is unknown, defaulting to 1000 [ 620.423114][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.423236][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.423460][T12776] bridge_slave_0: entered allmulticast mode [ 620.441317][T12776] bridge_slave_0: entered promiscuous mode [ 621.002824][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.003136][T12776] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.003349][T12776] bridge_slave_1: entered allmulticast mode [ 621.137819][T12776] bridge_slave_1: entered promiscuous mode [ 623.774111][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.055861][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.333149][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.333220][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.995449][T12776] team0: Port device team_slave_0 added [ 626.128647][T12776] team0: Port device team_slave_1 added [ 628.310574][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.368931][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.382768][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.392529][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.400455][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.723075][ T5598] Bluetooth: hci5: command tx timeout [ 632.813095][ T5598] Bluetooth: hci5: command tx timeout [ 634.477822][T12786] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.477946][T12786] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.478180][T12786] bridge_slave_0: entered allmulticast mode [ 634.803459][T12786] bridge_slave_0: entered promiscuous mode [ 634.883052][ T5598] Bluetooth: hci5: command tx timeout [ 636.963013][ T5598] Bluetooth: hci5: command tx timeout [ 637.449734][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.501346][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.514173][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.627706][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.630794][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.843159][ T5595] Bluetooth: hci0: command tx timeout [ 641.933529][ T5595] Bluetooth: hci0: command tx timeout [ 644.015915][ T5595] Bluetooth: hci0: command tx timeout [ 645.344289][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 645.401375][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 645.441477][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 645.451145][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 645.451887][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.085818][ T5598] Bluetooth: hci0: command tx timeout [ 646.414926][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 646.450590][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 646.548249][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 646.552722][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 646.574387][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 647.933123][ T5595] Bluetooth: hci6: command tx timeout [ 648.706024][T12876] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.763079][ T5595] Bluetooth: hci3: command tx timeout [ 650.013036][ T5595] Bluetooth: hci6: command tx timeout [ 651.893132][ T5595] Bluetooth: hci3: command tx timeout [ 652.093693][ T5595] Bluetooth: hci6: command tx timeout [ 653.307887][T12901] rxe_eth0 speed is unknown, defaulting to 1000 [ 653.628512][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.628638][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.628903][T12845] bridge_slave_0: entered allmulticast mode [ 653.665172][T12845] bridge_slave_0: entered promiscuous mode [ 653.720241][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.720362][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.720589][T12845] bridge_slave_1: entered allmulticast mode [ 653.897486][T12845] bridge_slave_1: entered promiscuous mode [ 653.923004][ T5595] Bluetooth: hci3: command tx timeout [ 654.163368][ T5595] Bluetooth: hci6: command tx timeout [ 655.907186][T12845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.003343][ T5595] Bluetooth: hci3: command tx timeout [ 656.207633][T12845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.391661][T12918] rxe_eth0 speed is unknown, defaulting to 1000 [ 659.021231][T12845] team0: Port device team_slave_0 added [ 661.506690][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 661.797778][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 661.818628][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 661.830774][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 661.831543][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 664.097767][ T5598] Bluetooth: hci1: command tx timeout [ 665.439172][T12917] rxe_eth0 speed is unknown, defaulting to 1000 [ 666.173190][ T5598] Bluetooth: hci1: command tx timeout [ 668.353086][ T5598] Bluetooth: hci1: command tx timeout [ 670.403331][ T5598] Bluetooth: hci1: command tx timeout [ 674.858722][T12876] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.858848][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.859080][T12876] bridge_slave_0: entered allmulticast mode [ 674.896967][T12876] bridge_slave_0: entered promiscuous mode [ 675.061100][T12876] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.061224][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.061460][T12876] bridge_slave_1: entered allmulticast mode [ 675.087727][T12876] bridge_slave_1: entered promiscuous mode [ 677.030637][T12948] rxe_eth0 speed is unknown, defaulting to 1000 [ 677.379365][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.915565][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.509981][T12876] team0: Port device team_slave_0 added [ 680.429836][T12876] team0: Port device team_slave_1 added [ 680.497277][T12901] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.497403][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.497645][T12901] bridge_slave_0: entered allmulticast mode [ 680.505959][T12901] bridge_slave_0: entered promiscuous mode [ 681.956571][T12901] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.956738][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.956978][T12901] bridge_slave_1: entered allmulticast mode [ 682.011559][T12901] bridge_slave_1: entered promiscuous mode [ 684.424533][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.424551][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.424577][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.883779][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.883797][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.883822][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.986590][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.521814][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.765403][ T38] INFO: task kworker/u8:68:11889 blocked for more than 143 seconds. [ 685.765430][ T38] Tainted: G L syzkaller #0 [ 685.765439][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.765447][ T38] task:kworker/u8:68 state:D stack:20520 pid:11889 tgid:11889 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 685.765485][ T38] Workqueue: netns cleanup_net [ 685.765655][ T38] Call Trace: [ 685.765690][ T38] [ 685.765730][ T38] __schedule+0x171d/0x5800 [ 685.765883][ T38] ? check_noncircular+0xdb/0x150 [ 685.765993][ T38] ? __pfx___schedule+0x10/0x10 [ 685.766030][ T38] rt_mutex_schedule+0x76/0xf0 [ 685.766053][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 685.766079][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 685.766096][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 685.766112][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 685.766141][ T38] ? rcu_barrier+0x4c/0x530 [ 685.766164][ T38] ? rcu_barrier+0x4c/0x530 [ 685.766177][ T38] mutex_lock_nested+0x168/0x1d0 [ 685.766191][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.766211][ T38] rcu_barrier+0x4c/0x530 [ 685.766232][ T38] netdev_run_todo+0x2fc/0x1060 [ 685.766307][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 685.766326][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 685.766375][ T38] ? kfree+0x1c5/0x6d0 [ 685.766396][ T38] ? nsim_destroy+0x40b/0x800 [ 685.766468][ T38] nsim_destroy+0x42b/0x800 [ 685.766489][ T38] __nsim_dev_port_del+0x14e/0x200 [ 685.766536][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 685.766559][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 685.766578][ T38] devlink_reload+0x1c5/0x890 [ 685.766679][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 685.766707][ T38] devlink_pernet_pre_exit+0x1ff/0x420 [ 685.766726][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 685.766744][ T38] ? iput+0xb84/0xf00 [ 685.766777][ T38] ops_undo_list+0x17d/0x8d0 [ 685.766799][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 685.766814][ T38] ? rt_spin_unlock+0x159/0x200 [ 685.766832][ T38] ? idr_destroy+0x21b/0x2a0 [ 685.766900][ T38] ? rt_spin_unlock+0x165/0x200 [ 685.766917][ T38] cleanup_net+0x575/0x810 [ 685.766936][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 685.766956][ T38] ? rcu_is_watching+0x16/0xb0 [ 685.766971][ T38] ? process_scheduled_works+0x97a/0x1630 [ 685.766999][ T38] process_scheduled_works+0xc3d/0x1630 [ 685.767049][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 685.767074][ T38] ? assign_work+0x3cf/0x5d0 [ 685.767098][ T38] worker_thread+0xa47/0xfb0 [ 685.767135][ T38] kthread+0x38b/0x470 [ 685.767151][ T38] ? __pfx_worker_thread+0x10/0x10 [ 685.767167][ T38] ? __pfx_kthread+0x10/0x10 [ 685.767182][ T38] ret_from_fork+0x514/0xb70 [ 685.767212][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 685.767226][ T38] ? __switch_to+0xc89/0x1420 [ 685.767265][ T38] ? __pfx_kthread+0x10/0x10 [ 685.767280][ T38] ret_from_fork_asm+0x1a/0x30 [ 685.767318][ T38] [ 685.767366][ T38] INFO: task syz.7.2137:12557 blocked for more than 143 seconds. [ 685.767381][ T38] Tainted: G L syzkaller #0 [ 685.767390][ T38] Blocked by coredump. [ 685.767396][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.767404][ T38] task:syz.7.2137 state:D stack:22664 pid:12557 tgid:12557 ppid:10524 task_flags:0x40044c flags:0x00080003 [ 685.767449][ T38] Call Trace: [ 685.767455][ T38] [ 685.767465][ T38] __schedule+0x171d/0x5800 [ 685.767515][ T38] ? __pfx___schedule+0x10/0x10 [ 685.767553][ T38] rt_mutex_schedule+0x76/0xf0 [ 685.767575][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 685.767611][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 685.767634][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 685.767655][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 685.767690][ T38] ? rcu_barrier+0x4c/0x530 [ 685.767712][ T38] ? rcu_barrier+0x4c/0x530 [ 685.767725][ T38] mutex_lock_nested+0x168/0x1d0 [ 685.767739][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.767813][ T38] rcu_barrier+0x4c/0x530 [ 685.767845][ T38] netdev_run_todo+0x2fc/0x1060 [ 685.767875][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 685.767937][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 685.767960][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 685.767983][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 685.768052][ T38] ? netdev_state_change+0x1bc/0x210 [ 685.768078][ T38] tun_chr_close+0x13f/0x1c0 [ 685.768219][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 685.768238][ T38] __fput+0x41f/0xa80 [ 685.768273][ T38] fput_close_sync+0x11f/0x240 [ 685.768293][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 685.768321][ T38] filp_close_sync+0x6e/0xa0 [ 685.768342][ T38] put_files_struct+0x233/0x3d0 [ 685.768372][ T38] do_exit+0x715/0x2340 [ 685.768398][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 685.768456][ T38] ? __pfx_do_exit+0x10/0x10 [ 685.768475][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.768505][ T38] ? rt_spin_unlock+0x159/0x200 [ 685.768529][ T38] do_group_exit+0x22d/0x2f0 [ 685.768548][ T38] ? rt_spin_unlock+0x165/0x200 [ 685.768573][ T38] get_signal+0x121b/0x12c0 [ 685.768617][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 685.768648][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 685.768693][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 685.768716][ T38] ? rcu_is_watching+0x16/0xb0 [ 685.768737][ T38] do_syscall_64+0x328/0x520 [ 685.768762][ T38] ? trace_irq_disable+0x3b/0x140 [ 685.768801][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.768834][ T38] ? clear_bhb_loop+0x70/0xc0 [ 685.768857][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.768876][ T38] RIP: 0033:0x7f97b6f1e559 [ 685.768894][ T38] RSP: 002b:00007ffc3d7aa9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 685.768945][ T38] RAX: 0000000000000000 RBX: 00007ffc3d7aaae0 RCX: 00007f97b6f1e559 [ 685.768959][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 685.768970][ T38] RBP: 00000000000708f8 R08: 0000000000000001 R09: 0000000000000000 [ 685.768981][ T38] R10: 0000001b2cb20000 R11: 0000000000000246 R12: 00007ffc3d7aab20 [ 685.768994][ T38] R13: 00007f97b71a5fac R14: 0000000000070a45 R15: 00007f97b71a5fa0 [ 685.769032][ T38] [ 685.769043][ T38] INFO: task syz-executor:12572 blocked for more than 143 seconds. [ 685.769060][ T38] Tainted: G L syzkaller #0 [ 685.769070][ T38] Blocked by coredump. [ 685.769076][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.769084][ T38] task:syz-executor state:D stack:19832 pid:12572 tgid:12572 ppid:1 task_flags:0x40054c flags:0x00080003 [ 685.769129][ T38] Call Trace: [ 685.769136][ T38] [ 685.769147][ T38] __schedule+0x171d/0x5800 [ 685.769201][ T38] ? __pfx___schedule+0x10/0x10 [ 685.769241][ T38] rt_mutex_schedule+0x76/0xf0 [ 685.769264][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 685.769301][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 685.769325][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 685.769347][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 685.769387][ T38] ? rcu_barrier+0x4c/0x530 [ 685.769412][ T38] ? rcu_barrier+0x4c/0x530 [ 685.769429][ T38] mutex_lock_nested+0x168/0x1d0 [ 685.769449][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.769476][ T38] rcu_barrier+0x4c/0x530 [ 685.769505][ T38] netdev_run_todo+0x2fc/0x1060 [ 685.769532][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 685.769554][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 685.769578][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 685.769604][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 685.769636][ T38] ? netdev_state_change+0x1bc/0x210 [ 685.769661][ T38] tun_chr_close+0x13f/0x1c0 [ 685.769678][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 685.769693][ T38] __fput+0x41f/0xa80 [ 685.769719][ T38] fput_close_sync+0x11f/0x240 [ 685.769737][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 685.769766][ T38] filp_close_sync+0x6e/0xa0 [ 685.769787][ T38] put_files_struct+0x233/0x3d0 [ 685.769813][ T38] do_exit+0x715/0x2340 [ 685.769833][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 685.769860][ T38] ? __pfx_do_exit+0x10/0x10 [ 685.769877][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.769907][ T38] ? rt_spin_unlock+0x159/0x200 [ 685.769931][ T38] do_group_exit+0x22d/0x2f0 [ 685.769949][ T38] ? rt_spin_unlock+0x165/0x200 [ 685.769973][ T38] get_signal+0x121b/0x12c0 [ 685.770024][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 685.770054][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 685.770078][ T38] ? kmem_cache_free+0x539/0x6d0 [ 685.770115][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 685.770139][ T38] ? rcu_is_watching+0x16/0xb0 [ 685.770160][ T38] do_syscall_64+0x328/0x520 [ 685.770185][ T38] ? trace_irq_disable+0x3b/0x140 [ 685.770208][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.770227][ T38] ? clear_bhb_loop+0x70/0xc0 [ 685.770250][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.770268][ T38] RIP: 0033:0x7f03fb47ed8e [ 685.770284][ T38] RSP: 002b:00007ffe11dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 685.770303][ T38] RAX: 0000000000000028 RBX: 0000555575196500 RCX: 00007f03fb47ed8e [ 685.770316][ T38] RDX: 0000000000000028 RSI: 00007f03fc274670 RDI: 0000000000000003 [ 685.770327][ T38] RBP: 0000000000000001 R08: 00007ffe11dce0b4 R09: 000000000000000c [ 685.770340][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 685.770351][ T38] R13: 0000000000000000 R14: 00007f03fc274670 R15: 0000000000000000 [ 685.770381][ T38] [ 685.770444][ T38] [ 685.770444][ T38] Showing all locks held in the system: [ 685.770492][ T38] locks held by rcuc/0/19: 3, last CPU#0: [ 685.770537][ T38] #0: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 685.770622][ T38] #1: ffff8880b843dc40 ((process_queue_bh_lock)){+...}-{3:3}, at: process_backlog+0x4d4/0xc50 [ 685.770670][ T38] #2: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 685.770718][ T38] locks held by rcuc/1/27: 4, last CPU#1: [ 685.770731][ T38] #0: ffffffff8f259580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 685.770779][ T38] #1: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 685.770826][ T38] #2: ffffffff8f3c3ea0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 685.770876][ T38] #3: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 685.770924][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 685.770937][ T38] #0: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 685.771017][ T38] locks held by kworker/u8:17/3327: 3, on CPU#1: [ 685.771030][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771077][ T38] #1: ffffc9000e65fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771126][ T38] #2: ffffffff907d78f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 685.771206][ T38] locks held by getty/5345: 2, on CPU#0: [ 685.771219][ T38] #0: ffff8880372c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 685.771316][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 685.771373][ T38] locks held by kworker/u8:26/10005: 2, last CPU#1: [ 685.771385][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771430][ T38] #1: ffffc9000a317c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771477][ T38] locks held by kworker/u8:35/10018: 2, on CPU#1: [ 685.771489][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771535][ T38] #1: ffffc9000773fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771582][ T38] locks held by kworker/u8:38/10022: 3, on CPU#1: [ 685.771595][ T38] #0: ffff888033966138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771642][ T38] #1: ffffc900078ffc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771691][ T38] #2: ffffffff907d78f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 685.771795][ T38] locks held by kworker/u8:63/11884: 4, last CPU#1: [ 685.771809][ T38] #0: ffff888034068938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771857][ T38] #1: ffffc90006cdfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.771906][ T38] #2: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 685.771954][ T38] #3: ffff8880b853dc40 ((process_queue_bh_lock)){+...}-{3:3}, at: process_backlog+0x4d4/0xc50 [ 685.772001][ T38] locks held by kworker/u8:68/11889: 6, on CPU#1: [ 685.772022][ T38] #0: ffff88801bef0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.772071][ T38] #1: ffffc90006d6fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.772112][ T38] #2: ffffffff907c90a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 685.772151][ T38] #3: ffff888026ad0160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 685.772185][ T38] #4: ffff8880269b4310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 685.772228][ T38] #5: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772270][ T38] locks held by syz.5.2129/12522: 1, on CPU#0: [ 685.772283][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772321][ T38] locks held by syz-executor/12527: 1, on CPU#0: [ 685.772334][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772374][ T38] locks held by syz.7.2137/12557: 1, on CPU#1: [ 685.772387][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772429][ T38] locks held by syz-executor/12565: 1, on CPU#1: [ 685.772442][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772484][ T38] locks held by syz-executor/12572: 1, on CPU#1: [ 685.772498][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772542][ T38] locks held by syz-executor/12624: 1, on CPU#1: [ 685.772555][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772595][ T38] locks held by syz.4.2156/12667: 1, on CPU#0: [ 685.772606][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772643][ T38] locks held by syz-executor/12672: 1, on CPU#0: [ 685.772654][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772698][ T38] locks held by syz-executor/12697: 1, on CPU#0: [ 685.772711][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772755][ T38] locks held by syz-executor/12705: 1, on CPU#1: [ 685.772767][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772806][ T38] locks held by syz-executor/12713: 1, on CPU#0: [ 685.772817][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.772856][ T38] locks held by syz-executor/12726: 1, on CPU#0: [ 685.772869][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.773022][ T38] locks held by syz-executor/12776: 1, on CPU#1: [ 685.773034][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.773076][ T38] locks held by syz-executor/12786: 1, on CPU#0: [ 685.773089][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.773132][ T38] locks held by syz-executor/12813: 1, on CPU#1: [ 685.773145][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.773185][ T38] locks held by syz-executor/12821: 1, on CPU#0: [ 685.773197][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.773240][ T38] locks held by syz-executor/12845: 1, on CPU#0: [ 685.773251][ T38] #0: ffffffff8f3c9ff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 685.773293][ T38] locks held by syz-executor/12876: 1, on CPU#1: [ 685.773305][ T38] #0: ffffffff907d78f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 685.773398][ T38] locks held by syz-executor/12901: 2, on CPU#1: [ 685.773412][ T38] #0: ffffffff8ff37048 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 685.773497][ T38] #1: ffffffff907d78f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 685.773542][ T38] locks held by syz-executor/12918: 2, on CPU#1: [ 685.773555][ T38] #0: ffffffff90d40288 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 685.773607][ T38] #1: ffffffff907d78f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 685.773653][ T38] locks held by syz-executor/12948: 2, on CPU#1: [ 685.773666][ T38] #0: ffffffff907c90a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 685.773712][ T38] #1: ffffffff907d78f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 685.773763][ T38] locks held by modprobe/12982: 3, last CPU#0: [ 685.773776][ T38] #0: ffff888041785eb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 685.773835][ T38] #1: ffffffff8f511930 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 685.773884][ T38] #2: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 685.773931][ T38] [ 685.773937][ T38] ============================================= [ 685.773937][ T38] [ 685.773946][ T38] NMI backtrace for cpu 0 [ 685.773966][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.774017][ T38] Tainted: [L]=SOFTLOCKUP [ 685.774024][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.774033][ T38] Call Trace: [ 685.774041][ T38] [ 685.774048][ T38] dump_stack_lvl+0xe8/0x150 [ 685.774076][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 685.774099][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 685.774120][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 685.774145][ T38] sys_info+0x135/0x170 [ 685.774164][ T38] watchdog+0xfd7/0x1030 [ 685.774202][ T38] ? watchdog+0x1c7/0x1030 [ 685.774231][ T38] kthread+0x38b/0x470 [ 685.774250][ T38] ? __pfx_watchdog+0x10/0x10 [ 685.774271][ T38] ? __pfx_kthread+0x10/0x10 [ 685.774291][ T38] ret_from_fork+0x514/0xb70 [ 685.774312][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 685.774330][ T38] ? __switch_to+0xc89/0x1420 [ 685.774357][ T38] ? __pfx_kthread+0x10/0x10 [ 685.774377][ T38] ret_from_fork_asm+0x1a/0x30 [ 685.774409][ T38] [ 685.774415][ T38] Sending NMI from CPU 0 to CPUs 1: [ 685.774447][ C1] NMI backtrace for cpu 1 [ 685.774482][ C1] CPU: 1 UID: 0 PID: 11877 Comm: kworker/u8:56 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.774521][ C1] Tainted: [L]=SOFTLOCKUP [ 685.774527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.774536][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 685.774561][ C1] RIP: 0010:debug_check_no_obj_freed+0x19d/0x450 [ 685.774608][ C1] Code: 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 e7 67 58 fd 49 8b 2c 24 48 3b 6c 24 38 0f 92 c0 48 39 6c 24 40 0f 96 c1 <08> c1 75 92 4d 8d 67 10 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 [ 685.774621][ C1] RSP: 0018:ffffc90006bef860 EFLAGS: 00000006 [ 685.774634][ C1] RAX: 1ffff110057cb201 RBX: 0000000000000000 RCX: dffffc0000000000 [ 685.774645][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90006bef7c0 [ 685.774655][ C1] RBP: ffff88802c9e0640 R08: 0000000000000003 R09: 0000000000000004 [ 685.774665][ C1] R10: dffffc0000000000 R11: fffff52000d7def8 R12: ffff88802be59750 [ 685.774676][ C1] R13: 1ffff110057cb2e7 R14: 0000000000000013 R15: ffff88802be59738 [ 685.774688][ C1] FS: 0000000000000000(0000) GS:ffff8881248b8000(0000) knlGS:0000000000000000 [ 685.774700][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.774711][ C1] CR2: 00007fa95fb46eb8 CR3: 000000006127e000 CR4: 00000000003526f0 [ 685.774725][ C1] Call Trace: [ 685.774731][ C1] [ 685.774745][ C1] kfree+0x13e/0x6d0 [ 685.774764][ C1] ? skb_release_data+0x82e/0xa80 [ 685.774858][ C1] skb_release_data+0x82e/0xa80 [ 685.774883][ C1] __kfree_skb+0x5d/0x210 [ 685.774901][ C1] ? nsim_dev_trap_report_work+0x79d/0xcb0 [ 685.774922][ C1] nsim_dev_trap_report_work+0x879/0xcb0 [ 685.774950][ C1] ? process_scheduled_works+0x97a/0x1630 [ 685.774970][ C1] process_scheduled_works+0xc3d/0x1630 [ 685.775003][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 685.775026][ C1] ? assign_work+0x3cf/0x5d0 [ 685.775047][ C1] worker_thread+0xa47/0xfb0 [ 685.775079][ C1] kthread+0x38b/0x470 [ 685.775094][ C1] ? __pfx_worker_thread+0x10/0x10 [ 685.775111][ C1] ? __pfx_kthread+0x10/0x10 [ 685.775126][ C1] ret_from_fork+0x514/0xb70 [ 685.775142][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 685.775156][ C1] ? __switch_to+0xc89/0x1420 [ 685.775178][ C1] ? __pfx_kthread+0x10/0x10 [ 685.775193][ C1] ret_from_fork_asm+0x1a/0x30 [ 685.775214][ C1] [ 685.775451][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 687.839663][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 687.850843][ T38] Tainted: [L]=SOFTLOCKUP [ 687.855322][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.865361][ T38] Call Trace: [ 687.868635][ T38] [ 687.871572][ T38] vpanic+0x56d/0xa60 [ 687.875543][ T38] ? __pfx_vpanic+0x10/0x10 [ 687.880032][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 687.885603][ T38] panic+0xc5/0xd0 [ 687.889337][ T38] ? __pfx_panic+0x10/0x10 [ 687.893737][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 687.898754][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 687.904903][ T38] watchdog+0x1030/0x1030 [ 687.909226][ T38] ? watchdog+0x1c7/0x1030 [ 687.913641][ T38] kthread+0x38b/0x470 [ 687.917717][ T38] ? __pfx_watchdog+0x10/0x10 [ 687.922398][ T38] ? __pfx_kthread+0x10/0x10 [ 687.927013][ T38] ret_from_fork+0x514/0xb70 [ 687.931609][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 687.936711][ T38] ? __switch_to+0xc89/0x1420 [ 687.941381][ T38] ? __pfx_kthread+0x10/0x10 [ 687.945955][ T38] ret_from_fork_asm+0x1a/0x30 [ 687.950716][ T38] [ 687.954018][ T38] Kernel Offset: disabled [ 687.958339][ T38] Rebooting in 86400 seconds..