last executing test programs: 15m35.325140003s ago: executing program 4 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000880)="91", 0x100000, 0x40, 0x0, 0x0) 15m34.144670029s ago: executing program 4 (id=13): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x20005, 0x1a4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m33.557484286s ago: executing program 4 (id=16): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 15m32.725459525s ago: executing program 4 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 15m30.988120442s ago: executing program 4 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 15m30.627214347s ago: executing program 4 (id=28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x0, 0x404}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000380)={0x7162, r1}, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 15m15.435881991s ago: executing program 32 (id=28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x0, 0x404}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000380)={0x7162, r1}, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 15m7.980624159s ago: executing program 0 (id=132): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000002280)={0x0, 0x1, 0x100, 0x3, 0x254}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x40000, 0x1, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x80000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xfffffffe, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 15m6.628897801s ago: executing program 0 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x20, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) fanotify_mark(r1, 0x201, 0x20, r3, 0x0) r4 = fanotify_init(0x20, 0x0) r5 = fcntl$dupfd(r0, 0x0, r3) fanotify_mark(r4, 0x441, 0x1002, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m6.141377452s ago: executing program 0 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m4.713640853s ago: executing program 0 (id=140): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 15m4.309734145s ago: executing program 0 (id=144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0x200, 0x3, 0x95, 0x8, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 15m2.010387109s ago: executing program 0 (id=155): pipe2$9p(&(0x7f0000000080), 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 15m1.259403194s ago: executing program 33 (id=155): pipe2$9p(&(0x7f0000000080), 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 14m56.632639302s ago: executing program 3 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r2, @ANYBLOB="460609"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) 14m56.081247191s ago: executing program 3 (id=176): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 14m55.864934631s ago: executing program 3 (id=178): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 14m54.221232042s ago: executing program 3 (id=181): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 14m54.006558717s ago: executing program 3 (id=182): r0 = gettid() futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 14m50.849841148s ago: executing program 3 (id=187): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000a40)={r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 14m50.58999879s ago: executing program 34 (id=187): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000a40)={r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="d8001c000831cf6490b833639a99fc04a3bfe03378a5ede59a180081064e81f782db44fd56170daf5a7bdf4a68af3ecbe99e63526b08dbfcb2cc5f422acdd665f76fab5ab8dc8b5156a33f87507a7b2476421958b20ac5081e77d365025eb9b75b491f2fb7f027b69be075c0a2063964779e75b87e2f78e6d26686f4c1cb87101fb184dab2dc0425afa394284589925ce451dda9d91996857ec4178d6af97f25102ca0f2947bd1db8bdfb76fe2b0254620bb627772d833515aa02dcc188b336f212cd4522bb4f8255e88a71de6b4eaef5ab8ac6aad285e5fe6e9742bf0609121a68fa5f201cc60f5db734988f291beedfd0e80f3802c00c11deb002e18a6e0adfb4c202a3f7feadede62583ec070c7a0c4e81a73a3c0d04f", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 4m6.56669836s ago: executing program 6 (id=2172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r4, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 3m56.81806692s ago: executing program 6 (id=2189): rt_sigprocmask(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) eventfd(0x1) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000) r5 = socket(0x23, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x4000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x9000, 0x2000, &(0x7f0000017000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 3m53.791498808s ago: executing program 6 (id=2195): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 3m49.204322765s ago: executing program 6 (id=2200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) 3m44.385362819s ago: executing program 6 (id=2204): syz_emit_vhci(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 3m42.708587899s ago: executing program 6 (id=2206): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) 3m26.607344009s ago: executing program 35 (id=2206): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) 28.360809565s ago: executing program 1 (id=2484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = getpid() ioprio_get$pid(0x0, r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) 26.219601196s ago: executing program 1 (id=2485): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 25.992894082s ago: executing program 1 (id=2487): setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 22.353259941s ago: executing program 1 (id=2491): mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.420326729s ago: executing program 5 (id=2497): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/address_bits', 0x8802, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002840), r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000002980)={&(0x7f0000002800), 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0x6c, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044800}, 0x8000) finit_module(r3, 0x0, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) 15.171082511s ago: executing program 1 (id=2499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 13.319169577s ago: executing program 2 (id=2500): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.959317674s ago: executing program 7 (id=2503): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b5000000"], 0xc8) 7.569907081s ago: executing program 7 (id=2504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 6.879508366s ago: executing program 7 (id=2505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.091859576s ago: executing program 2 (id=2506): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0xfffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x4000003, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.059901523s ago: executing program 1 (id=2507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x43f, 0x6, 0x80c20048, r6}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 4.679970742s ago: executing program 5 (id=2508): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.367923968s ago: executing program 7 (id=2509): add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600), 0x0, 0xfffffffffffffffd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) getpgid(r2) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r1, 0x0, 0x0) 3.305056361s ago: executing program 2 (id=2510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) 3.02380646s ago: executing program 2 (id=2511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='slave-2', 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, 0x0, 0x0) 2.865438998s ago: executing program 5 (id=2512): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x154}}, 0x24000058) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x410040, 0x0) ptrace$cont(0x9, r0, 0x0, 0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 2.665007378s ago: executing program 7 (id=2513): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.490806371s ago: executing program 2 (id=2514): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 1.36045985s ago: executing program 5 (id=2515): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000040), 0x4080) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) keyctl$join(0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x401, 0x400, 0x0, [{0xdc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3, '\x00', 0x98}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xb, 0x8, '\x00', 0x10}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0xe5}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0x8, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0xa6}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) syz_open_dev$video(0x0, 0x8, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 308.349516ms ago: executing program 5 (id=2516): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r0, 0xc) landlock_restrict_self(r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x67) 120.705773ms ago: executing program 7 (id=2517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x656040) syz_usb_connect(0x2, 0x5a, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) syz_io_uring_setup(0xf04, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r2, 0xffffffffffffffff, 0x0) 54.830191ms ago: executing program 2 (id=2518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0xfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) 0s ago: executing program 5 (id=2519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) kernel console output (not intermixed with test programs): stop error: local softirq work is pending, handler #80!!! [ 299.267636][ T8604] fuse: Unknown parameter 'fd0x0000000000000003' [ 299.582801][ T5606] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 299.738119][ T5606] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 299.748445][ T5606] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 299.748530][ T5606] usb 8-1: config 0 has no interface number 0 [ 299.768541][ T5606] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.768604][ T5606] usb 8-1: Product: syz [ 299.768621][ T5606] usb 8-1: Manufacturer: syz [ 299.768636][ T5606] usb 8-1: SerialNumber: syz [ 299.793787][ T5606] usb 8-1: config 0 descriptor?? [ 300.217720][ T5606] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 300.226185][ T5606] gspca_m5602: Failed to find a sensor [ 300.226258][ T5606] ALi m5602 8-1:0.88: ALi m5602 webcam failed [ 300.361859][ T5606] usb 8-1: USB disconnect, device number 9 [ 300.582835][ T8616] netlink: 44 bytes leftover after parsing attributes in process `syz.6.765'. [ 300.904676][ T5712] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 301.083202][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 301.089039][ T5712] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 301.105813][ T5712] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 301.129423][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.137580][ T5712] usb 2-1: Product: syz [ 301.137596][ T5712] usb 2-1: Manufacturer: syz [ 301.137605][ T5712] usb 2-1: SerialNumber: syz [ 301.169482][ T5712] r8152-cfgselector 2-1: Unknown version 0x0000 [ 301.169514][ T5712] r8152-cfgselector 2-1: config 0 descriptor?? [ 301.694353][ T31] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 302.448905][ T37] audit: type=1326 audit(1788356026.207:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3e4d3e159 code=0x0 [ 302.955581][ T8667] kvm: emulating exchange as write [ 302.961530][ T8667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.735051][ T5693] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 304.472646][ T5693] usb 3-1: Using ep0 maxpacket: 16 [ 304.966675][ T5693] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 305.007108][ T5693] usb 3-1: config 251 has an invalid interface number: 48 but max is 0 [ 305.007183][ T5693] usb 3-1: config 251 has no interface number 0 [ 305.007241][ T5693] usb 3-1: config 251 interface 48 has no altsetting 0 [ 305.097759][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.097833][ T5693] usb 3-1: Product: syz [ 305.097850][ T5693] usb 3-1: Manufacturer: syz [ 305.097865][ T5693] usb 3-1: SerialNumber: syz [ 305.677229][ T5693] qmi_wwan 3-1:251.48: bogus CDC Union: master=0, slave=0 [ 305.679048][ T5693] qmi_wwan 3-1:251.48: probe with driver qmi_wwan failed with error -22 [ 305.832424][ T5693] usb 3-1: USB disconnect, device number 8 [ 306.193577][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.790'. [ 306.203453][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.790'. [ 307.105963][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.796'. [ 307.349567][ T8729] lo: entered allmulticast mode [ 307.677431][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 308.376351][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 308.477086][ T8746] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 309.463063][ T5606] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 309.645811][ T5606] usb 3-1: not running at top speed; connect to a high speed hub [ 309.652030][ T5606] usb 3-1: New USB device found, idVendor=18c5, idProduct=0008, bcdDevice=cb.ec [ 309.673134][ T5606] usb 3-1: config 96 has an invalid interface number: 230 but max is 2 [ 309.710061][ T5606] usb 3-1: config 96 has an invalid interface number: 233 but max is 2 [ 309.710093][ T5606] usb 3-1: config 96 has an invalid interface number: 61 but max is 2 [ 309.710113][ T5606] usb 3-1: config 96 has no interface number 0 [ 309.710131][ T5606] usb 3-1: config 96 has no interface number 1 [ 309.710147][ T5606] usb 3-1: config 96 has no interface number 2 [ 309.710234][ T5606] usb 3-1: config 96 interface 230 altsetting 8 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 309.710266][ T5606] usb 3-1: config 96 interface 230 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 309.710293][ T5606] usb 3-1: config 96 interface 230 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 309.710316][ T5606] usb 3-1: config 96 interface 230 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 309.710341][ T5606] usb 3-1: config 96 interface 230 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 309.710366][ T5606] usb 3-1: config 96 interface 230 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 309.710408][ T5606] usb 3-1: config 96 interface 233 altsetting 192 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 309.710447][ T5606] usb 3-1: config 96 interface 61 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 309.710470][ T5606] usb 3-1: config 96 interface 61 altsetting 203 has a duplicate endpoint with address 0xB, skipping [ 309.710493][ T5606] usb 3-1: config 96 interface 230 has no altsetting 0 [ 309.710514][ T5606] usb 3-1: config 96 interface 233 has no altsetting 0 [ 309.710533][ T5606] usb 3-1: config 96 interface 61 has no altsetting 0 [ 309.879498][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.887672][ T5606] usb 3-1: Product: syz [ 309.887697][ T5606] usb 3-1: Manufacturer: syz [ 309.887713][ T5606] usb 3-1: SerialNumber: syz [ 309.893414][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 310.361147][ T5606] usb 3-1: USB disconnect, device number 9 [ 310.665734][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 310.665850][ T31] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 310.665903][ T31] usb 7-1: no configurations [ 310.665917][ T31] usb 7-1: can't read configurations, error -22 [ 310.785054][ T5693] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 310.982857][ T5693] usb 6-1: Using ep0 maxpacket: 8 [ 310.983786][ T5693] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 310.988976][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.989002][ T5693] usb 6-1: Product: syz [ 310.989016][ T5693] usb 6-1: Manufacturer: syz [ 310.989030][ T5693] usb 6-1: SerialNumber: syz [ 311.019407][ T5693] usb 6-1: config 0 descriptor?? [ 311.259487][ T5693] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 311.977012][ T5693] usb write operation failed. (-71) [ 312.011903][ T8791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.097366][ T5693] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.101329][ T5693] dvbdev: DVB: registering new adapter (Terratec H7) [ 312.101399][ T5693] usb 6-1: media controller created [ 312.120466][ T5693] usb read operation failed. (-71) [ 312.121744][ T5693] usb write operation failed. (-71) [ 312.281837][ T8801] FAULT_INJECTION: forcing a failure. [ 312.281837][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 312.304554][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.1.822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.304596][ T8801] Tainted: [L]=SOFTLOCKUP [ 312.304606][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.304618][ T8801] Call Trace: [ 312.304626][ T8801] [ 312.304636][ T8801] dump_stack_lvl+0xe8/0x150 [ 312.304676][ T8801] should_fail_ex+0x46b/0x600 [ 312.304707][ T8801] should_failslab+0xa8/0x100 [ 312.304741][ T8801] __kmalloc_cache_node_noprof+0xac/0x670 [ 312.304783][ T8801] ? __get_vm_area_node+0x155/0x2f0 [ 312.304808][ T8801] ? __get_vm_area_node+0x155/0x2f0 [ 312.304842][ T8801] __get_vm_area_node+0x155/0x2f0 [ 312.304873][ T8801] __vmalloc_node_range_noprof+0x343/0x1540 [ 312.304901][ T8801] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.304999][ T8801] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 312.305039][ T8801] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.305066][ T8801] __vmalloc_noprof+0xd2/0x120 [ 312.305093][ T8801] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.305123][ T8801] kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.305151][ T8801] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.305177][ T8801] ? mutex_lock_nested+0x152/0x1d0 [ 312.305208][ T8801] ? kvm_set_memslot+0x3c/0x1320 [ 312.305245][ T8801] kvm_set_memslot+0x581/0x1320 [ 312.305279][ T8801] ? kvm_set_memory_region+0x708/0xb90 [ 312.305312][ T8801] kvm_set_memory_region+0x958/0xb90 [ 312.305350][ T8801] kvm_vm_ioctl_set_memory_region+0x72/0xa0 [ 312.305386][ T8801] kvm_vm_ioctl+0xb98/0xd30 [ 312.305420][ T8801] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 312.305485][ T8801] ? tomoyo_path_number_perm+0x219/0x5f0 [ 312.305535][ T8801] ? tomoyo_path_number_perm+0x219/0x5f0 [ 312.305563][ T8801] ? do_vfs_ioctl+0x1184/0x1550 [ 312.305594][ T8801] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 312.305638][ T8801] ? hook_file_ioctl+0x1f5/0x610 [ 312.305680][ T8801] ? __asan_memset+0x22/0x50 [ 312.305706][ T8801] ? smack_file_ioctl+0x335/0x370 [ 312.305745][ T8801] ? __pfx_smack_file_ioctl+0x10/0x10 [ 312.305820][ T8801] ? __fget_files+0x2a/0x420 [ 312.305843][ T8801] ? __fget_files+0x3a8/0x420 [ 312.305865][ T8801] ? __fget_files+0x2a/0x420 [ 312.305891][ T8801] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.305917][ T8801] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 312.305951][ T8801] __se_sys_ioctl+0xff/0x170 [ 312.305983][ T8801] do_syscall_64+0x166/0x520 [ 312.306008][ T8801] ? trace_irq_disable+0x3b/0x140 [ 312.306034][ T8801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.306057][ T8801] ? clear_bhb_loop+0x70/0xc0 [ 312.306085][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.306109][ T8801] RIP: 0033:0x7fd3d6a2e159 [ 312.306133][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.306154][ T8801] RSP: 002b:00007fd3d4c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.306180][ T8801] RAX: ffffffffffffffda RBX: 00007fd3d6cb5fa0 RCX: 00007fd3d6a2e159 [ 312.306197][ T8801] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 312.306212][ T8801] RBP: 00007fd3d6ac5024 R08: 0000000000000000 R09: 0000000000000000 [ 312.306227][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.306241][ T8801] R13: 00007fd3d6cb6038 R14: 00007fd3d6cb5fa0 R15: 00007fff66fa0ad8 [ 312.306278][ T8801] [ 312.306321][ T8801] syz.1.822: vmalloc error: size 1028, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 312.306489][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.1.822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.306521][ T8801] Tainted: [L]=SOFTLOCKUP [ 312.306529][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.306543][ T8801] Call Trace: [ 312.306552][ T8801] [ 312.306562][ T8801] dump_stack_lvl+0xe8/0x150 [ 312.306598][ T8801] warn_alloc+0x24d/0x270 [ 312.306629][ T8801] ? __kasan_kmalloc+0x22/0xb0 [ 312.306680][ T8801] ? __pfx_warn_alloc+0x10/0x10 [ 312.306710][ T8801] ? __get_vm_area_node+0x155/0x2f0 [ 312.306742][ T8801] ? __get_vm_area_node+0x2a9/0x2f0 [ 312.306798][ T8801] __vmalloc_node_range_noprof+0x36b/0x1540 [ 312.306860][ T8801] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 312.306897][ T8801] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.306923][ T8801] __vmalloc_noprof+0xd2/0x120 [ 312.306950][ T8801] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.306981][ T8801] kvm_arch_prepare_memory_region+0x335/0x1010 [ 312.307010][ T8801] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.307036][ T8801] ? mutex_lock_nested+0x152/0x1d0 [ 312.307067][ T8801] ? kvm_set_memslot+0x3c/0x1320 [ 312.307103][ T8801] kvm_set_memslot+0x581/0x1320 [ 312.307138][ T8801] ? kvm_set_memory_region+0x708/0xb90 [ 312.307168][ T8801] kvm_set_memory_region+0x958/0xb90 [ 312.307204][ T8801] kvm_vm_ioctl_set_memory_region+0x72/0xa0 [ 312.307244][ T8801] kvm_vm_ioctl+0xb98/0xd30 [ 312.307279][ T8801] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 312.307347][ T8801] ? tomoyo_path_number_perm+0x219/0x5f0 [ 312.307373][ T8801] ? tomoyo_path_number_perm+0x219/0x5f0 [ 312.307401][ T8801] ? do_vfs_ioctl+0x1184/0x1550 [ 312.307432][ T8801] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 312.307475][ T8801] ? hook_file_ioctl+0x1f5/0x610 [ 312.307512][ T8801] ? __asan_memset+0x22/0x50 [ 312.307539][ T8801] ? smack_file_ioctl+0x335/0x370 [ 312.307575][ T8801] ? __pfx_smack_file_ioctl+0x10/0x10 [ 312.307620][ T8801] ? __fget_files+0x2a/0x420 [ 312.307639][ T8801] ? __fget_files+0x3a8/0x420 [ 312.307658][ T8801] ? __fget_files+0x2a/0x420 [ 312.307682][ T8801] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.307705][ T8801] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 312.307734][ T8801] __se_sys_ioctl+0xff/0x170 [ 312.307761][ T8801] do_syscall_64+0x166/0x520 [ 312.307795][ T8801] ? trace_irq_disable+0x3b/0x140 [ 312.307820][ T8801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.307844][ T8801] ? clear_bhb_loop+0x70/0xc0 [ 312.307872][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.307894][ T8801] RIP: 0033:0x7fd3d6a2e159 [ 312.307913][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.307930][ T8801] RSP: 002b:00007fd3d4c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.307951][ T8801] RAX: ffffffffffffffda RBX: 00007fd3d6cb5fa0 RCX: 00007fd3d6a2e159 [ 312.307966][ T8801] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 312.307979][ T8801] RBP: 00007fd3d6ac5024 R08: 0000000000000000 R09: 0000000000000000 [ 312.307992][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.308004][ T8801] R13: 00007fd3d6cb6038 R14: 00007fd3d6cb5fa0 R15: 00007fff66fa0ad8 [ 312.308036][ T8801] [ 312.308044][ T8801] Mem-Info: [ 312.308055][ T8801] active_anon:2403 inactive_anon:7836 isolated_anon:0 [ 312.308055][ T8801] active_file:16266 inactive_file:38963 isolated_file:0 [ 312.308055][ T8801] unevictable:0 dirty:335 writeback:0 [ 312.308055][ T8801] slab_reclaimable:7267 slab_unreclaimable:105438 [ 312.308055][ T8801] mapped:31108 shmem:3380 pagetables:1480 [ 312.308055][ T8801] sec_pagetables:0 bounce:0 [ 312.308055][ T8801] kernel_misc_reclaimable:0 [ 312.308055][ T8801] free:1307886 free_pcp:2783 free_cma:0 [ 312.308113][ T8801] Node 0 active_anon:9612kB inactive_anon:31344kB active_file:64856kB inactive_file:155852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124432kB dirty:1336kB writeback:0kB shmem:13520kB kernel_stack:14648kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 312.308168][ T8801] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 312.308219][ T8801] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.308280][ T8801] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 312.308320][ T8801] Node 0 DMA32 free:1287448kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9612kB inactive_anon:31344kB active_file:64856kB inactive_file:155852kB unevictable:0kB writepending:1336kB zspages:0kB present:3129332kB managed:2558900kB mlocked:0kB bounce:0kB free_pcp:8600kB local_pcp:4784kB free_cma:0kB [ 312.308390][ T8801] lowmem_reserve[]: 0 0 1 1 1 [ 312.308430][ T8801] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 312.308495][ T8801] lowmem_reserve[]: 0 0 0 0 0 [ 312.308534][ T8801] Node 1 Normal free:3928736kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2524kB local_pcp:0kB free_cma:0kB [ 312.308599][ T8801] lowmem_reserve[]: 0 0 0 0 0 [ 312.308637][ T8801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 312.308763][ T8801] Node 0 DMA32: 292*4kB (UME) 189*8kB (U) 339*16kB (UM) 417*32kB (UME) 266*64kB (UME) 149*128kB (UME) 48*256kB (UME) 20*512kB (UME) 19*1024kB (UME) 6*2048kB (UME) 287*4096kB (M) = 1287368kB [ 312.308957][ T8801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 312.309069][ T8801] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3928736kB [ 312.309255][ T8801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.309274][ T8801] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.309292][ T8801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.309312][ T8801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.309330][ T8801] 58630 total pagecache pages [ 312.309339][ T8801] 0 pages in swap cache [ 312.309346][ T8801] Free swap = 124996kB [ 312.309354][ T8801] Total swap = 124996kB [ 312.309364][ T8801] 2097051 pages RAM [ 312.309372][ T8801] 0 pages HighMem/MovableOnly [ 312.309379][ T8801] 425256 pages reserved [ 312.309387][ T8801] 0 pages cma reserved [ 312.357219][ T5693] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 312.388953][ T5693] usb 6-1: USB disconnect, device number 9 [ 317.626325][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.788478][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 318.797345][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.797379][ T59] Tainted: [L]=SOFTLOCKUP [ 318.797387][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.797401][ T59] Workqueue: hci0 hci_rx_work [ 318.797562][ T59] Call Trace: [ 318.797571][ T59] [ 318.797581][ T59] dump_stack_lvl+0xe8/0x150 [ 318.797613][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 318.797640][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 318.797677][ T59] ? rt_spin_unlock+0x165/0x200 [ 318.797709][ T59] kobject_add_internal+0x62c/0xce0 [ 318.797810][ T59] kobject_add+0x163/0x240 [ 318.797854][ T59] ? rt_spin_unlock+0x159/0x200 [ 318.797886][ T59] ? __pfx_kobject_add+0x10/0x10 [ 318.797919][ T59] ? get_device_parent+0x370/0x3a0 [ 318.797982][ T59] device_add+0x3fa/0xb80 [ 318.798009][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 318.798081][ T59] le_conn_complete_evt+0xfe3/0x16d0 [ 318.798129][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 318.798153][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.798175][ T59] ? rt_mutex_slowunlock+0x219/0x460 [ 318.798203][ T59] ? skb_pull_data+0xf0/0x200 [ 318.798236][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 318.798266][ T59] hci_event_packet+0x67a/0xf10 [ 318.798293][ T59] ? reacquire_held_locks+0x117/0x1a0 [ 318.798325][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 318.798362][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 318.798388][ T59] ? rt_spin_unlock+0x159/0x200 [ 318.798424][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 318.798451][ T59] hci_rx_work+0x3ee/0x1020 [ 318.798486][ T59] ? process_scheduled_works+0x97a/0x1630 [ 318.798513][ T59] process_scheduled_works+0xc3d/0x1630 [ 318.798570][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.798603][ T59] ? assign_work+0x3cf/0x5d0 [ 318.798634][ T59] worker_thread+0xa47/0xfb0 [ 318.798696][ T59] kthread+0x38b/0x470 [ 318.798717][ T59] ? __pfx_worker_thread+0x10/0x10 [ 318.798741][ T59] ? __pfx_kthread+0x10/0x10 [ 318.798763][ T59] ret_from_fork+0x514/0xb70 [ 318.798793][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 318.798814][ T59] ? __switch_to+0xc89/0x1420 [ 318.798844][ T59] ? __pfx_kthread+0x10/0x10 [ 318.798866][ T59] ret_from_fork_asm+0x1a/0x30 [ 318.798902][ T59] [ 318.798939][ T59] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 318.798982][ T59] Bluetooth: hci0: failed to register connection device [ 319.625219][ T8876] trusted_key: encrypted_key: key trusted:syz not found [ 320.117838][ T8889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 320.152699][ T8889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 321.340287][ T8906] lo: entered promiscuous mode [ 321.448678][ T59] Bluetooth: hci0: ACL packet for unknown connection handle 2825 [ 321.586060][ T8906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.061184][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 322.075641][ T8925] hsr_slave_0: left promiscuous mode [ 322.094752][ T8925] hsr_slave_1: left promiscuous mode [ 322.132649][ T6809] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 322.295098][ T6809] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 322.308129][ T6809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.308176][ T6809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.311715][ T6809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 322.311746][ T6809] usb 7-1: Product: syz [ 322.311761][ T6809] usb 7-1: Manufacturer: syz [ 322.407488][ T6809] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 322.573166][ T4909] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 324.555661][ T6809] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 324.621615][ T6809] usb 7-1: USB disconnect, device number 7 [ 324.657831][ T6809] mos7840 7-1:1.0: device disconnected [ 324.682248][ T8435] udevd[8435]: setting mode of /dev/bus/usb/007/007 to 020664 failed: No such file or directory [ 324.682577][ T8435] udevd[8435]: setting owner of /dev/bus/usb/007/007 to uid=0, gid=0 failed: No such file or directory [ 325.082682][ T6811] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 326.708926][ T6811] usb 6-1: unable to get BOS descriptor or descriptor too short [ 326.721313][ T6811] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 326.730845][ T6811] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 326.731926][ T6811] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 326.731965][ T6811] usb 6-1: can't read configurations, error -71 [ 327.841946][ T8975] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 328.632693][ T4977] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 328.664393][ T37] audit: type=1800 audit(1788356052.457:8): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.870" name="file1" dev="ramfs" ino=21914 res=0 errno=0 [ 328.782739][ T6811] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 328.783405][ T4977] usb 8-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 328.801651][ T4977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.812867][ T4977] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 328.812928][ T4977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.857175][ T4977] usb 8-1: config 0 descriptor?? [ 329.014851][ T6811] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 329.028151][ T6811] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.034880][ T6811] usb 2-1: config 0 has no interface number 0 [ 329.060311][ T6811] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.069049][ T6811] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.069095][ T6811] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.079177][ T6811] usb 2-1: config 0 interface 1 has no altsetting 0 [ 329.119500][ T6811] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 329.122601][ T6811] usb 2-1: Manufacturer: syz [ 329.157383][ T6811] usb 2-1: config 0 descriptor?? [ 329.468899][ T4977] hid-led 0003:1294:1320.0003: reserved main item tag 0xd [ 329.476780][ T4977] hid-led 0003:1294:1320.0003: unbalanced collection at end of report description [ 329.479905][ T4977] hid-led 0003:1294:1320.0003: probe with driver hid-led failed with error -22 [ 329.570336][ T4977] usb 8-1: USB disconnect, device number 10 [ 329.830334][ T6811] uclogic 0003:145F:0212.0004: pen parameters not found [ 329.837547][ T6811] uclogic 0003:145F:0212.0004: interface is invalid, ignoring [ 329.867185][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.939940][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.991019][ T6811] usb 2-1: USB disconnect, device number 8 [ 331.339238][ T37] audit: type=1800 audit(1788356055.057:9): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.885" name="/" dev="fuse" ino=1 res=0 errno=0 [ 332.632651][ T6811] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 332.837484][ T6811] usb 7-1: unable to get BOS descriptor or descriptor too short [ 332.845664][ T6811] usb 7-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 332.860260][ T6811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.862046][ T6811] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.955691][ T6811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.967265][ T6811] usb 7-1: Product: syz [ 332.967290][ T6811] usb 7-1: Manufacturer: syz [ 332.967307][ T6811] usb 7-1: SerialNumber: syz [ 333.217223][ T9075] netlink: 'syz.7.896': attribute type 2 has an invalid length. [ 333.231909][ T9075] netlink: 'syz.7.896': attribute type 2 has an invalid length. [ 333.838451][ T9079] netlink: 'syz.5.900': attribute type 1 has an invalid length. [ 334.453138][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.895'. [ 334.520212][ T9079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.730509][ T9081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.754056][ T9081] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 334.816325][ T9081] bond1: (slave gre1): Error -95 calling set_mac_address [ 335.613696][ T9083] gretap1: entered promiscuous mode [ 335.626660][ T9083] bond1: (slave gretap1): making interface the new active one [ 335.716828][ T9083] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 335.951365][ T6811] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 335.978146][ T6811] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 337.116374][ T6811] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 337.150550][ T6811] usb 7-1: USB disconnect, device number 8 [ 337.399012][ T8435] udevd[8435]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.821707][ T9183] batman_adv: batadv0: Adding interface: dummy0 [ 339.821790][ T9183] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.821833][ T9183] batman_adv: batadv0: Interface activated: dummy0 [ 340.820566][ T9183] Set syz1 is full, maxelem 2 reached [ 342.972795][ T5606] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 343.284797][ T5606] usb 6-1: Using ep0 maxpacket: 16 [ 343.296880][ T5606] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 343.311626][ T5606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.320160][ T5606] usb 6-1: Product: syz [ 343.320184][ T5606] usb 6-1: Manufacturer: syz [ 343.320201][ T5606] usb 6-1: SerialNumber: syz [ 344.455699][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.941'. [ 344.660967][ T9246] bridge1: port 1(dummy0) entered blocking state [ 344.664815][ T9246] bridge1: port 1(dummy0) entered disabled state [ 344.665033][ T9246] dummy0: entered allmulticast mode [ 344.695016][ T9246] dummy0: entered promiscuous mode [ 344.784576][ T9246] bridge1: port 1(dummy0) entered blocking state [ 344.791481][ T9246] bridge1: port 1(dummy0) entered forwarding state [ 344.939862][ T9256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 344.993010][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.993948][ T9257] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 344.993973][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 345.073881][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 345.101334][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 345.260736][ T5606] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.260897][ T5606] usb 6-1: MIDIStreaming interface descriptor not found [ 345.422584][ T6811] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 345.669011][ T9261] vhci_hcd: connection closed [ 345.679010][ T9258] vhci_hcd: connection reset by peer [ 345.819497][ T67] vhci_hcd vhci_hcd.1: stop threads [ 345.837540][ T67] vhci_hcd vhci_hcd.1: release socket [ 346.191903][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 346.232735][ T67] vhci_hcd vhci_hcd.1: stop threads [ 346.232816][ T67] vhci_hcd vhci_hcd.1: release socket [ 346.232893][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 346.295104][ T5606] usb 6-1: USB disconnect, device number 12 [ 348.053715][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.319290][ T9284] bond0: (slave bond_slave_0): Releasing backup interface [ 348.626804][ T9284] bond0: (slave bond_slave_1): Releasing backup interface [ 348.739170][ T9284] team0: Port device team_slave_1 removed [ 348.747885][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.861212][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.937654][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 348.938830][ T9284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.094078][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.126250][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.174780][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.197544][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.241440][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.335927][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.349008][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.369518][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.388749][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.404252][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.419084][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.421793][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.444533][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.487656][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 349.675673][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 349.833621][ T31] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 349.873262][ T31] usb 7-1: config 0 has no interfaces? [ 349.873351][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.803662][ T6811] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 351.231914][ T9316] tipc: Failed to remove unknown binding: 66,0,0/0:3927776138/3927776140 [ 351.250132][ T9316] tipc: Failed to remove unknown binding: 66,0,0/0:3927776138/3927776139 [ 352.752842][ T31] usb 7-1: config 0 descriptor?? [ 352.861293][ T9296] 9pnet_fd: p9_fd_create_tcp (9296): problem connecting socket to 127.0.0.1 [ 352.965661][ T31] usb 7-1: can't set config #0, error -71 [ 353.050401][ T31] usb 7-1: USB disconnect, device number 9 [ 353.250534][ T9324] netlink: 32 bytes leftover after parsing attributes in process `syz.7.962'. [ 354.693615][ T9351] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.970'. [ 354.877284][ T37] audit: type=1326 audit(1788356078.667:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb95fcfdec2 code=0x7ffc0000 [ 354.878492][ T37] audit: type=1326 audit(1788356078.667:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95fcfe159 code=0x7ffc0000 [ 354.878523][ T37] audit: type=1326 audit(1788356078.667:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95fcfe159 code=0x7ffc0000 [ 354.878988][ T37] audit: type=1326 audit(1788356078.667:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb95fcfdf57 code=0x7ffc0000 [ 354.879030][ T37] audit: type=1326 audit(1788356078.667:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb95fcbae51 code=0x7ffc0000 [ 354.879070][ T37] audit: type=1326 audit(1788356078.667:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb95fcfef49 code=0x7ffc0000 [ 354.879110][ T37] audit: type=1326 audit(1788356078.667:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb95fcbaebb code=0x7ffc0000 [ 354.879150][ T37] audit: type=1326 audit(1788356078.667:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb95fcba5ac code=0x7ffc0000 [ 354.879868][ T37] audit: type=1326 audit(1788356078.667:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95fcfe159 code=0x7ffc0000 [ 354.882046][ T37] audit: type=1326 audit(1788356078.667:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.6.971" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb95fcba60e code=0x7ffc0000 [ 355.803206][ T4977] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 355.964367][ T4977] usb 6-1: not running at top speed; connect to a high speed hub [ 355.972306][ T4977] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 355.987995][ T4977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 356.003397][ T4977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.011586][ T4977] usb 6-1: Product: syz [ 356.011609][ T4977] usb 6-1: Manufacturer: syz [ 356.011626][ T4977] usb 6-1: SerialNumber: syz [ 356.051915][ T4977] oti6858 6-1:1.0: oti6858 converter detected [ 356.080920][ T4977] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 357.209134][ T4977] usb 6-1: USB disconnect, device number 13 [ 357.361085][ T4977] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 357.378375][ T4977] oti6858 6-1:1.0: device disconnected [ 359.681035][ T9418] input: syz0 as /devices/virtual/input/input11 [ 360.121897][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 360.122244][ T37] audit: type=1800 audit(1788356083.907:33): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.994" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 360.920356][ T4909] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 360.920392][ T4909] CPU: 1 UID: 0 PID: 4909 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 360.920436][ T4909] Tainted: [L]=SOFTLOCKUP [ 360.920444][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.920459][ T4909] Workqueue: hci3 hci_rx_work [ 360.920502][ T4909] Call Trace: [ 360.920512][ T4909] [ 360.920522][ T4909] dump_stack_lvl+0xe8/0x150 [ 360.920555][ T4909] sysfs_create_dir_ns+0x271/0x2a0 [ 360.920579][ T4909] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 360.920603][ T4909] ? rt_spin_unlock+0x165/0x200 [ 360.920642][ T4909] kobject_add_internal+0x62c/0xce0 [ 360.920677][ T4909] kobject_add+0x163/0x240 [ 360.920703][ T4909] ? rt_spin_unlock+0x159/0x200 [ 360.920738][ T4909] ? __pfx_kobject_add+0x10/0x10 [ 360.920772][ T4909] ? get_device_parent+0x370/0x3a0 [ 360.920804][ T4909] device_add+0x3fa/0xb80 [ 360.920833][ T4909] hci_conn_add_sysfs+0xd5/0x210 [ 360.920869][ T4909] le_conn_complete_evt+0xfe3/0x16d0 [ 360.920901][ T4909] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 360.921096][ T4909] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 360.921247][ T4909] ? rt_mutex_slowunlock+0x219/0x460 [ 360.921281][ T4909] ? skb_pull_data+0xf0/0x200 [ 360.921323][ T4909] hci_le_conn_complete_evt+0x187/0x470 [ 360.921359][ T4909] hci_event_packet+0x67a/0xf10 [ 360.921392][ T4909] ? reacquire_held_locks+0x117/0x1a0 [ 360.921432][ T4909] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 360.921463][ T4909] ? __pfx_hci_event_packet+0x10/0x10 [ 360.921494][ T4909] ? rt_spin_unlock+0x159/0x200 [ 360.921540][ T4909] ? hci_send_to_monitor+0xe2/0x590 [ 360.921577][ T4909] hci_rx_work+0x3ee/0x1020 [ 360.921619][ T4909] ? process_scheduled_works+0x97a/0x1630 [ 360.921652][ T4909] process_scheduled_works+0xc3d/0x1630 [ 360.921718][ T4909] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.921756][ T4909] ? assign_work+0x3cf/0x5d0 [ 360.921791][ T4909] worker_thread+0xa47/0xfb0 [ 360.921834][ T4909] ? __kthread_parkme+0x71/0x1f0 [ 360.921875][ T4909] kthread+0x38b/0x470 [ 360.921897][ T4909] ? __pfx_worker_thread+0x10/0x10 [ 360.921921][ T4909] ? __pfx_kthread+0x10/0x10 [ 360.921943][ T4909] ret_from_fork+0x514/0xb70 [ 360.921989][ T4909] ? __pfx_ret_from_fork+0x10/0x10 [ 360.922010][ T4909] ? __switch_to+0xc89/0x1420 [ 360.922041][ T4909] ? __pfx_kthread+0x10/0x10 [ 360.922061][ T4909] ret_from_fork_asm+0x1a/0x30 [ 360.922097][ T4909] [ 360.922327][ T4909] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 360.922376][ T4909] Bluetooth: hci3: failed to register connection device [ 361.575765][ T9446] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1001'. [ 361.843845][ T9446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.891487][ T37] audit: type=1800 audit(1788356085.677:34): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1004" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 361.997314][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'. [ 362.087546][ T9446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.350837][ T9446] bond0 (unregistering): Released all slaves [ 363.467290][ T9471] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1011'. [ 363.811289][ T9475] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1011'. [ 363.815097][ T4909] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 363.815127][ T4909] CPU: 1 UID: 0 PID: 4909 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 363.815154][ T4909] Tainted: [L]=SOFTLOCKUP [ 363.815162][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.815174][ T4909] Workqueue: hci2 hci_rx_work [ 363.815211][ T4909] Call Trace: [ 363.815219][ T4909] [ 363.815229][ T4909] dump_stack_lvl+0xe8/0x150 [ 363.815261][ T4909] sysfs_create_dir_ns+0x271/0x2a0 [ 363.815286][ T4909] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 363.815314][ T4909] ? rt_spin_unlock+0x165/0x200 [ 363.815345][ T4909] kobject_add_internal+0x62c/0xce0 [ 363.815379][ T4909] kobject_add+0x163/0x240 [ 363.815402][ T4909] ? rt_spin_unlock+0x159/0x200 [ 363.815434][ T4909] ? __pfx_kobject_add+0x10/0x10 [ 363.815469][ T4909] ? get_device_parent+0x370/0x3a0 [ 363.815512][ T4909] device_add+0x3fa/0xb80 [ 363.815540][ T4909] hci_conn_add_sysfs+0xd5/0x210 [ 363.815573][ T4909] le_conn_complete_evt+0xfe3/0x16d0 [ 363.815604][ T4909] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 363.815631][ T4909] ? rt_mutex_slowunlock+0x219/0x460 [ 363.815658][ T4909] ? skb_pull_data+0xf0/0x200 [ 363.815691][ T4909] hci_le_enh_conn_complete_evt+0x189/0x490 [ 363.815715][ T4909] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 363.815741][ T4909] hci_event_packet+0x67a/0xf10 [ 363.815768][ T4909] ? reacquire_held_locks+0x117/0x1a0 [ 363.815800][ T4909] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 363.815820][ T4909] ? __pfx_hci_event_packet+0x10/0x10 [ 363.815846][ T4909] ? rt_spin_unlock+0x159/0x200 [ 363.815886][ T4909] ? hci_send_to_monitor+0xe2/0x590 [ 363.815915][ T4909] hci_rx_work+0x3ee/0x1020 [ 363.815951][ T4909] ? process_scheduled_works+0x97a/0x1630 [ 363.815977][ T4909] process_scheduled_works+0xc3d/0x1630 [ 363.816035][ T4909] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.816067][ T4909] ? assign_work+0x3cf/0x5d0 [ 363.816098][ T4909] worker_thread+0xa47/0xfb0 [ 363.816139][ T4909] ? __kthread_parkme+0x71/0x1f0 [ 363.816176][ T4909] kthread+0x38b/0x470 [ 363.816196][ T4909] ? __pfx_worker_thread+0x10/0x10 [ 363.816222][ T4909] ? __pfx_kthread+0x10/0x10 [ 363.816245][ T4909] ret_from_fork+0x514/0xb70 [ 363.816270][ T4909] ? __pfx_ret_from_fork+0x10/0x10 [ 363.816289][ T4909] ? __switch_to+0xc89/0x1420 [ 363.816318][ T4909] ? __pfx_kthread+0x10/0x10 [ 363.816339][ T4909] ret_from_fork_asm+0x1a/0x30 [ 363.816376][ T4909] [ 363.820642][ T4909] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 363.820699][ T4909] Bluetooth: hci2: failed to register connection device [ 363.987382][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 364.664180][ T9482] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.686105][ T9482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.878046][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'. [ 365.205271][ T4909] Bluetooth: hci0: unexpected event for opcode 0x203c [ 365.238931][ T9482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 365.578807][ T9482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.583957][ T9482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 365.785703][ T9482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 365.863858][ T9482] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 365.870155][ T9482] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 365.941913][ T9482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.942170][ T9482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 365.998090][ T9482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.998335][ T9482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 366.060796][ T9482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 366.408325][ T9516] tipc: Failed to remove unknown binding: 66,0,0/0:785494199/785494200 [ 366.435817][ T9516] tipc: Failed to remove unknown binding: 66,0,0/0:785494199/785494200 [ 366.682762][ T1236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 366.844599][ T1236] usb 2-1: unable to get BOS descriptor or descriptor too short [ 366.844723][ T1236] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 366.855688][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.855716][ T1236] usb 2-1: Product: syz [ 366.855729][ T1236] usb 2-1: Manufacturer: syz [ 366.855743][ T1236] usb 2-1: SerialNumber: syz [ 367.173630][ T9518] input: syz1 as /devices/virtual/input/input12 [ 367.282948][ T9518] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1026'. [ 367.304274][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 367.621218][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 367.932712][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 368.012620][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 368.012643][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 368.326659][ T1236] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 368.331793][ T1236] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 369.652864][ T37] audit: type=1804 audit(1788356092.337:35): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1030" name="/newroot/160/file0" dev="tmpfs" ino=876 res=1 errno=0 [ 369.708777][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 369.708870][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 370.013783][ T4909] Bluetooth: hci5: command 0x0406 tx timeout [ 370.092712][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 370.099416][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 371.121775][ T9547] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 371.215165][ T9547] ref_ctr increment failed for inode: 0x36c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037f51b00 [ 371.793517][ T4909] Bluetooth: hci3: command 0x0406 tx timeout [ 372.168091][ T9542] uprobe: syz.6.1030:9542 failed to unregister, leaking uprobe [ 372.173114][ T4909] Bluetooth: hci2: command 0x0406 tx timeout [ 373.082836][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 373.210832][ T1236] usb 2-1: USB disconnect, device number 9 [ 373.550601][ T8435] udevd[8435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.251733][ T37] audit: type=1800 audit(1788356098.037:36): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1048" name=8006 dev="sda1" ino=2059 res=0 errno=0 [ 374.300997][ T9582] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 374.450449][ T5606] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 374.604710][ T5606] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 374.616809][ T5606] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 374.616876][ T5606] usb 7-1: config 1 has no interface number 0 [ 374.616937][ T5606] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 374.616963][ T5606] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 374.616987][ T5606] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.684502][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.684583][ T5606] usb 7-1: Product: syz [ 374.684599][ T5606] usb 7-1: Manufacturer: syz [ 374.684615][ T5606] usb 7-1: SerialNumber: syz [ 374.717943][ T9583] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 374.969235][ T9583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.990540][ T9583] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 375.224304][ T5606] usb 7-1: Incompatible driver and firmware versions [ 375.327920][ T5606] usb 7-1: USB disconnect, device number 10 [ 376.372152][ T9611] tipc: Failed to remove unknown binding: 66,0,0/0:1734658366/1734658367 [ 376.384108][ T9611] tipc: Failed to remove unknown binding: 66,0,0/0:1734658366/1734658367 [ 376.918949][ T9625] jffs2: notice: (9625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 377.622675][ T1236] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 377.789402][ T1236] usb 6-1: Using ep0 maxpacket: 32 [ 377.798534][ T1236] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 377.801093][ T1236] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 377.801122][ T1236] usb 6-1: config 0 has no interface number 0 [ 377.801175][ T1236] usb 6-1: config 0 interface 12 has no altsetting 0 [ 377.852002][ T1236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.860426][ T1236] usb 6-1: Product: syz [ 377.860449][ T1236] usb 6-1: Manufacturer: syz [ 377.860465][ T1236] usb 6-1: SerialNumber: syz [ 378.251277][ T1236] usb 6-1: config 0 descriptor?? [ 379.125217][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.955817][ T37] audit: type=1800 audit(1788356103.747:37): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1071" name="nl80211" dev="sda1" ino=2060 res=0 errno=0 [ 381.426130][ T1236] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 381.433983][ T1236] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 381.434011][ T1236] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 381.434121][ T1236] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 381.562639][ T1236] usb 6-1: USB disconnect, device number 15 [ 381.820085][ T8435] udevd[8435]: setting mode of /dev/bus/usb/006/015 to 020664 failed: No such file or directory [ 381.822867][ T8435] udevd[8435]: setting owner of /dev/bus/usb/006/015 to uid=0, gid=0 failed: No such file or directory [ 382.368807][ T9687] netlink: 'syz.7.1078': attribute type 2 has an invalid length. [ 382.368887][ T9687] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1078'. [ 382.368915][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1078'. [ 383.641298][ T9713] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1088'. [ 383.709610][ T9713] bond0 (unregistering): Released all slaves [ 383.842658][ T5606] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 384.056779][ T5606] usb 8-1: Using ep0 maxpacket: 8 [ 384.057971][ T5606] usb 8-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 384.070924][ T5606] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 384.070978][ T5606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.107950][ T5606] usb 8-1: config 0 descriptor?? [ 384.796230][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.813804][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.813842][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x4 [ 384.813868][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.813911][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.813937][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.813963][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.813989][ T5606] chicony 0003:04F2:1421.0005: unknown main item tag 0x0 [ 384.814088][ T5606] chicony 0003:04F2:1421.0005: item fetching failed at offset 21/38 [ 384.815741][ T5606] chicony 0003:04F2:1421.0005: Chicony hid parse failed: -22 [ 384.815827][ T5606] chicony 0003:04F2:1421.0005: probe with driver chicony failed with error -22 [ 385.220014][ T5606] usb 8-1: USB disconnect, device number 11 [ 386.282631][ T5606] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 386.434220][ T5606] usb 3-1: Using ep0 maxpacket: 8 [ 386.440471][ T5606] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.442116][ T5606] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 386.442186][ T5606] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.442211][ T5606] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.442237][ T5606] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.442262][ T5606] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.442306][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.774196][ T5606] usb 3-1: usb_control_msg returned -32 [ 386.780126][ T5606] usbtmc 3-1:16.0: can't read capabilities [ 387.223534][ T9767] capability: warning: `syz.7.1106' uses 32-bit capabilities (legacy support in use) [ 388.471681][ T9786] tls_set_device_offload: netdev not found [ 388.568195][ T37] audit: type=1800 audit(1788356112.357:38): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1113" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 389.173814][ T1236] usb 3-1: USB disconnect, device number 10 [ 389.242678][ T6811] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 389.412626][ T6811] usb 7-1: Using ep0 maxpacket: 16 [ 389.418939][ T6811] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 389.420886][ T6811] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 389.420915][ T6811] usb 7-1: config 0 has no interface number 0 [ 389.420962][ T6811] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 389.420990][ T6811] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 389.480231][ T6811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.488573][ T6811] usb 7-1: Product: syz [ 389.488597][ T6811] usb 7-1: Manufacturer: syz [ 389.488611][ T6811] usb 7-1: SerialNumber: syz [ 389.547140][ T6811] usb 7-1: config 0 descriptor?? [ 389.560966][ T9802] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 389.562152][ T9802] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 389.608387][ T9808] FAULT_INJECTION: forcing a failure. [ 389.608387][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 389.608586][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.5.1118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.608622][ T9808] Tainted: [L]=SOFTLOCKUP [ 389.608628][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.608638][ T9808] Call Trace: [ 389.608645][ T9808] [ 389.608651][ T9808] dump_stack_lvl+0xe8/0x150 [ 389.608687][ T9808] should_fail_ex+0x46b/0x600 [ 389.608719][ T9808] should_failslab+0xa8/0x100 [ 389.608755][ T9808] __kmalloc_noprof+0xfb/0x790 [ 389.608782][ T9808] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 389.608812][ T9808] ? unix_create_addr+0x24/0x140 [ 389.608915][ T9808] ? unix_create_addr+0x24/0x140 [ 389.608945][ T9808] unix_create_addr+0x24/0x140 [ 389.608971][ T9808] unix_bind+0x2d1/0x1260 [ 389.609000][ T9808] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 389.609031][ T9808] ? __pfx_unix_bind+0x10/0x10 [ 389.609057][ T9808] ? bpf_lsm_socket_bind+0x9/0x20 [ 389.609094][ T9808] __sys_bind+0x2e9/0x410 [ 389.609121][ T9808] ? __pfx___sys_bind+0x10/0x10 [ 389.609158][ T9808] ? rcu_is_watching+0x16/0xb0 [ 389.609201][ T9808] __x64_sys_bind+0x7a/0x90 [ 389.609226][ T9808] do_syscall_64+0x166/0x520 [ 389.609251][ T9808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.609275][ T9808] ? clear_bhb_loop+0x70/0xc0 [ 389.609301][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.609324][ T9808] RIP: 0033:0x7fa5bfbbe159 [ 389.609344][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.609363][ T9808] RSP: 002b:00007fa5bde16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 389.609387][ T9808] RAX: ffffffffffffffda RBX: 00007fa5bfe45fa0 RCX: 00007fa5bfbbe159 [ 389.609405][ T9808] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000005 [ 389.609419][ T9808] RBP: 00007fa5bfc55024 R08: 0000000000000000 R09: 0000000000000000 [ 389.609433][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.609447][ T9808] R13: 00007fa5bfe46038 R14: 00007fa5bfe45fa0 R15: 00007ffd928265a8 [ 389.609484][ T9808] [ 389.893895][ T9802] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 389.894103][ T9802] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 390.104956][ T6811] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 393.057963][ T6811] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 393.069324][ T6811] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 393.069648][ T6811] asix 7-1:0.34: probe with driver asix failed with error -71 [ 393.340268][ T6811] usb 7-1: USB disconnect, device number 11 [ 394.616042][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1130'. [ 397.134976][ T152] IPVS: starting estimator thread 0... [ 397.959685][ T9875] IPVS: using max 7 ests per chain, 16800 per kthread [ 397.977910][ T37] audit: type=1800 audit(1788356121.767:39): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1139" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 401.971742][ T9928] jffs2: notice: (9928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 402.396060][ T9937] input: syz0 as /devices/virtual/input/input13 [ 402.895184][ T37] audit: type=1800 audit(1788356126.687:40): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1161" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 405.944337][ T9979] netlink: 'syz.7.1170': attribute type 2 has an invalid length. [ 405.946469][ T9983] binder: 9981:9983 ioctl c0306201 200000000080 returned -14 [ 405.982149][ T9983] binder: 9981:9983 ioctl c0306201 2000000003c0 returned -14 [ 407.005956][ T31] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 407.289065][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 407.291124][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 407.291157][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.308115][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.308143][ T31] usb 3-1: Product: syz [ 407.308157][ T31] usb 3-1: Manufacturer: syz [ 407.308170][ T31] usb 3-1: SerialNumber: syz [ 407.335635][ T31] usb 3-1: config 0 descriptor?? [ 407.430905][ T9993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 407.930056][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 408.090546][ T31] port100 3-1:0.0: NFC: Could not get supported command types [ 408.224221][ T31] usb 3-1: USB disconnect, device number 11 [ 408.654485][ T4909] Bluetooth: hci0: command 0x0406 tx timeout [ 408.667016][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1178'. [ 408.706650][ T1236] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 408.756872][ T1236] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 409.112731][ T5693] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 409.322748][ T5693] usb 6-1: Using ep0 maxpacket: 8 [ 409.329097][ T5693] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.331040][ T5693] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 409.331103][ T5693] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.331128][ T5693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.331153][ T5693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.331177][ T5693] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.331233][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.876280][ T5693] usb 6-1: usb_control_msg returned -32 [ 409.876439][ T5693] usbtmc 6-1:16.0: can't read capabilities [ 410.359708][T10022] hub 1-0:1.0: USB hub found [ 410.363516][T10022] hub 1-0:1.0: 1 port detected [ 411.031570][T10035] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 411.119945][ T5606] usb 6-1: USB disconnect, device number 16 [ 411.212618][ T4909] Bluetooth: hci3: command 0x0406 tx timeout [ 411.212744][ T1236] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 411.212764][ T1236] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 416.315068][T10097] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1196'. [ 420.014520][ T37] audit: type=1326 audit(1788356143.797:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 420.014617][ T37] audit: type=1326 audit(1788356143.807:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 420.063142][ T37] audit: type=1326 audit(1788356143.857:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 420.066830][ T37] audit: type=1326 audit(1788356143.857:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 420.101138][ T37] audit: type=1326 audit(1788356143.857:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 420.118998][ T37] audit: type=1326 audit(1788356143.907:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5bfb7e98e code=0x7ffc0000 [ 420.123697][ T37] audit: type=1326 audit(1788356143.917:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5bfb7e98e code=0x7ffc0000 [ 420.128768][ T37] audit: type=1326 audit(1788356143.917:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5bfb7e98e code=0x7ffc0000 [ 420.137331][ T37] audit: type=1326 audit(1788356143.927:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5bfb7e98e code=0x7ffc0000 [ 420.139684][ T37] audit: type=1326 audit(1788356143.927:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz.5.1212" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5bfb7e98e code=0x7ffc0000 [ 420.794306][ T4909] Bluetooth: hci5: command 0x0406 tx timeout [ 420.831993][ T1236] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 420.832171][ T1236] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 423.661362][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 423.667738][ T1236] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 423.667767][ T1236] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 424.120420][T10224] netlink: 'syz.2.1226': attribute type 3 has an invalid length. [ 424.482615][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 424.642770][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 424.649127][ T31] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.671545][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.679818][ T31] usb 6-1: Product: syz [ 424.679843][ T31] usb 6-1: Manufacturer: syz [ 424.679859][ T31] usb 6-1: SerialNumber: syz [ 424.708827][ T31] usb 6-1: config 0 descriptor?? [ 424.959540][ T31] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.089039][T10251] binder: BINDER_SET_CONTEXT_MGR already set [ 425.140227][T10251] binder: 10249:10251 ioctl 4018620d 200000004a80 returned -16 [ 426.061597][T10270] binder: 10267:10270 ioctl c0306201 200000000180 returned -14 [ 426.092626][ T4909] Bluetooth: hci2: command 0x0406 tx timeout [ 426.106906][ T1236] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 426.110218][ T1236] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 426.482370][ T31] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 426.554567][ T31] usb 6-1: USB disconnect, device number 17 [ 427.214448][T10291] FAULT_INJECTION: forcing a failure. [ 427.214448][T10291] name failslab, interval 1, probability 0, space 0, times 0 [ 427.260613][T10291] CPU: 1 UID: 0 PID: 10291 Comm: syz.7.1240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.260659][T10291] Tainted: [L]=SOFTLOCKUP [ 427.260668][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.260682][T10291] Call Trace: [ 427.260691][T10291] [ 427.260701][T10291] dump_stack_lvl+0xe8/0x150 [ 427.260739][T10291] should_fail_ex+0x46b/0x600 [ 427.260770][T10291] should_failslab+0xa8/0x100 [ 427.260802][T10291] __kmalloc_cache_noprof+0xa1/0x680 [ 427.260830][T10291] ? snd_pcm_open+0x408/0x620 [ 427.260943][T10291] ? snd_pcm_open+0x408/0x620 [ 427.260968][T10291] ? snd_pcm_open+0x17d/0x620 [ 427.260999][T10291] snd_pcm_open+0x408/0x620 [ 427.261038][T10291] ? __pfx_snd_pcm_open+0x10/0x10 [ 427.261064][T10291] ? __pfx_default_wake_function+0x10/0x10 [ 427.261094][T10291] ? snd_lookup_minor_data+0x11e/0x150 [ 427.261191][T10291] snd_pcm_playback_open+0x5f/0xc0 [ 427.261247][T10291] chrdev_open+0x4dc/0x600 [ 427.261280][T10291] ? __pfx_chrdev_open+0x10/0x10 [ 427.261311][T10291] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 427.261345][T10291] ? __pfx_chrdev_open+0x10/0x10 [ 427.261374][T10291] do_dentry_open+0x849/0x1420 [ 427.261417][T10291] vfs_open+0x3b/0x350 [ 427.261445][T10291] ? path_openat+0x142d/0x1d60 [ 427.261474][T10291] path_openat+0x1448/0x1d60 [ 427.261522][T10291] do_file_open+0x23e/0x4a0 [ 427.261564][T10291] ? __pfx_do_file_open+0x10/0x10 [ 427.261617][T10291] ? alloc_fd+0x654/0x6d0 [ 427.261660][T10291] do_sys_openat2+0x115/0x200 [ 427.261693][T10291] ? __se_sys_futex+0x3a8/0x450 [ 427.261730][T10291] ? __pfx_do_sys_openat2+0x10/0x10 [ 427.261769][T10291] ? rcu_is_watching+0x16/0xb0 [ 427.261808][T10291] __x64_sys_openat+0x138/0x170 [ 427.261847][T10291] do_syscall_64+0x166/0x520 [ 427.261873][T10291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.261897][T10291] ? clear_bhb_loop+0x70/0xc0 [ 427.261924][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.261947][T10291] RIP: 0033:0x7fbb8e3ae98e [ 427.261969][T10291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.261990][T10291] RSP: 002b:00007fbb8c645b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 427.262014][T10291] RAX: ffffffffffffffda RBX: 00007fbb8c6466c0 RCX: 00007fbb8e3ae98e [ 427.262029][T10291] RDX: 000000000014b000 RSI: 00007fbb8c645c00 RDI: ffffffffffffff9c [ 427.262044][T10291] RBP: 00007fbb8c645c00 R08: 0000000000000000 R09: 0000000000000000 [ 427.262058][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 427.262073][T10291] R13: 00007fbb8e676038 R14: 00007fbb8e675fa0 R15: 00007fff6334e248 [ 427.262109][T10291] [ 429.006013][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 431.363956][T10379] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6399] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10379] [ 433.787865][T10396] netlink: 'syz.6.1268': attribute type 4 has an invalid length. [ 433.930477][T10396] netlink: 'syz.6.1268': attribute type 4 has an invalid length. [ 438.056290][ T6809] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 438.242559][ T6809] usb 2-1: Using ep0 maxpacket: 16 [ 438.243779][ T6809] usb 2-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 438.247818][ T6809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.247841][ T6809] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.247860][ T6809] usb 2-1: config 1 has no interface number 1 [ 438.247903][ T6809] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 438.247950][ T6809] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.282599][ T6809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.282628][ T6809] usb 2-1: Product: syz [ 438.282642][ T6809] usb 2-1: Manufacturer: syz [ 438.282654][ T6809] usb 2-1: SerialNumber: syz [ 438.662658][ T5693] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 438.673048][ T6809] usb 2-1: 0:1 : does not exist [ 438.673111][ T6809] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 438.673131][ T6809] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 438.673146][ T6809] usb 2-1: 2:1 : invalid channels 0 [ 438.853292][ T5693] usb 7-1: Using ep0 maxpacket: 8 [ 438.866599][ T5693] usb 7-1: unable to get BOS descriptor or descriptor too short [ 438.874687][ T5693] usb 7-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 438.877636][ T5693] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.877666][ T5693] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.909637][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.909668][ T5693] usb 7-1: Product: syz [ 438.909683][ T5693] usb 7-1: Manufacturer: syz [ 438.909698][ T5693] usb 7-1: SerialNumber: syz [ 439.162679][ T6809] usb 2-1: USB disconnect, device number 10 [ 439.480355][T10461] rdma_op ffff888038ea52b8 conn xmit_rdma 0000000000000000 [ 440.350972][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1287'. [ 440.544979][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.561866][ T5693] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 440.570481][ T5693] usb 7-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 440.603947][ T5693] usb 7-1: failed to enable PITCH for EP 0x1 [ 440.982843][T10477] 9p: Bad value for 'rfdno' [ 441.021239][ T8435] udevd[8435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.057223][ T5693] usb 7-1: USB disconnect, device number 12 [ 442.265956][ T6809] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 442.417974][ T6809] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 442.429560][ T6809] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 442.429649][ T6809] usb 6-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.429677][ T6809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.429709][ T6809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.470163][ T6809] usb 6-1: config 0 descriptor?? [ 442.475634][T10498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 442.483786][T10498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 442.600182][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.876708][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 442.876843][ T37] audit: type=1800 audit(1788356166.657:71): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1300" name="file0" dev="overlay" ino=1175 res=0 errno=0 [ 443.150817][ T6809] lenovo 0003:17EF:6062.0006: unknown main item tag 0x2 [ 443.150909][ T6809] lenovo 0003:17EF:6062.0006: unknown main item tag 0x3 [ 443.150937][ T6809] lenovo 0003:17EF:6062.0006: unknown main item tag 0x1 [ 443.150963][ T6809] lenovo 0003:17EF:6062.0006: unknown main item tag 0x2 [ 443.195768][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 443.715922][ T6809] lenovo 0003:17EF:6062.0006: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 443.822593][ T36] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 443.978743][ T36] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 443.990819][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.992573][ T36] usb 3-1: config 0 has no interfaces? [ 443.996706][ T6809] usb 6-1: USB disconnect, device number 18 [ 444.017620][ T36] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 444.020647][ T36] usb 3-1: Product: syz [ 444.123322][ T36] usb 3-1: config 0 descriptor?? [ 444.759355][T10523] syz.6.1305 (10523) used greatest stack depth: 15872 bytes left [ 445.208737][T10517] netlink: 'syz.7.1303': attribute type 3 has an invalid length. [ 445.340265][T10517] netlink: 'syz.7.1303': attribute type 3 has an invalid length. [ 445.591236][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1310'. [ 446.225215][ T6809] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 446.374409][ T6809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.377115][ T6809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.377141][ T6809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.377161][ T6809] usb 7-1: config 1 has no interface number 0 [ 446.377285][ T6809] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.388149][ T6809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.388178][ T6809] usb 7-1: Product: syz [ 446.388192][ T6809] usb 7-1: Manufacturer: syz [ 446.388206][ T6809] usb 7-1: SerialNumber: syz [ 446.471735][ T6809] usb 7-1: selecting invalid altsetting 1 [ 446.543806][ T37] audit: type=1326 audit(1788356170.327:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10556 comm="syz.7.1314" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8e3ee159 code=0x0 [ 446.737935][ T1236] usb 3-1: USB disconnect, device number 12 [ 446.740431][ T6809] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS [ 446.740481][ T6809] cdc_ncm 7-1:1.1: bind() failure [ 446.909837][ T6809] usb 7-1: USB disconnect, device number 13 [ 447.861961][T10571] serio: Serial port ptm0 [ 450.556656][T10621] block nbd1: shutting down sockets [ 456.291160][T10672] Driver unsupported XDP return value 0 on prog (id 138) dev N/A, expect packet loss! [ 457.069203][T10679] Bluetooth: hci0: unsupported parameter 5134 [ 457.071415][T10679] Bluetooth: hci0: unsupported parameter 8192 [ 457.071438][T10679] Bluetooth: hci0: unsupported parameter 5134 [ 457.071451][T10679] Bluetooth: hci0: unsupported parameter 8192 [ 458.099960][T10695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.394040][T10695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.777321][T10696] erspan0: entered promiscuous mode [ 458.844178][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 465.316337][ T37] audit: type=1326 audit(1788356189.107:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10802 comm="syz.7.1380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8e3ee159 code=0x0 [ 465.536557][ T5693] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 466.495285][ T5693] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.506324][ T5693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.506353][ T5693] usb 2-1: config 0 has no interfaces? [ 466.506386][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.553080][ T5693] usb 2-1: config 0 descriptor?? [ 466.728119][T10819] syz.2.1382 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 466.901586][ T4977] usb 2-1: USB disconnect, device number 11 [ 466.940798][T10821] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 467.309780][T10844] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 469.334263][T10862] binder: 10860:10862 unknown command 0 [ 469.334349][T10862] binder: 10860:10862 ioctl c0306201 2000000001c0 returned -22 [ 472.455806][T10885] cgroup: Unknown subsys name 'cpuset' [ 472.578152][T10887] bridge1: entered promiscuous mode [ 472.585416][T10887] bridge1: entered allmulticast mode [ 487.954719][T11043] IPVS: Error connecting to the multicast addr [ 495.251823][T11112] FAULT_INJECTION: forcing a failure. [ 495.251823][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 495.268429][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.7.1471 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.268479][T11112] Tainted: [L]=SOFTLOCKUP [ 495.268487][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.268499][T11112] Call Trace: [ 495.268508][T11112] [ 495.268518][T11112] dump_stack_lvl+0xe8/0x150 [ 495.268574][T11112] should_fail_ex+0x46b/0x600 [ 495.268610][T11112] should_failslab+0xa8/0x100 [ 495.268645][T11112] __kmalloc_noprof+0xfb/0x790 [ 495.268675][T11112] ? io_cache_alloc_new+0x40/0x100 [ 495.268702][T11112] ? io_cache_alloc_new+0x40/0x100 [ 495.268736][T11112] io_cache_alloc_new+0x40/0x100 [ 495.268762][T11112] io_uring_cmd_prep+0x39a/0x600 [ 495.268825][T11112] io_submit_sqes+0xbde/0x2310 [ 495.268883][T11112] __se_sys_io_uring_enter+0x364/0x1bb0 [ 495.268903][T11112] ? up_write+0x5a/0x190 [ 495.268932][T11112] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 495.268959][T11112] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 495.268989][T11112] ? rcu_is_watching+0x16/0xb0 [ 495.269020][T11112] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 495.269044][T11112] do_syscall_64+0x166/0x520 [ 495.269067][T11112] ? trace_irq_disable+0x3b/0x140 [ 495.269097][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.269115][T11112] ? clear_bhb_loop+0x70/0xc0 [ 495.269136][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.269153][T11112] RIP: 0033:0x7fbb8e3ee159 [ 495.269170][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.269185][T11112] RSP: 002b:00007fbb8c645f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 495.269205][T11112] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fbb8e3ee159 [ 495.269219][T11112] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 495.269229][T11112] RBP: 000000000000009b R08: 0000000000000000 R09: 0000000000000008 [ 495.269241][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 495.269252][T11112] R13: 0000200000000808 R14: 0000000000000e26 R15: 0000000000000000 [ 495.269278][T11112] [ 499.210577][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1481'. [ 501.943197][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.024794][T11294] fuse: fd is not a fuse device [ 518.957941][T11405] ./file0: Can't lookup blockdev [ 521.259709][T11424] futex_wake_op: syz.2.1540 tries to shift op by 144; fix this program [ 521.335727][T11424] futex_wake_op: syz.2.1540 tries to shift op by 144; fix this program [ 521.499445][T11426] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 522.883641][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1550'. [ 522.892816][T11445] IPv6: NLM_F_CREATE should be specified when creating new route [ 522.893440][T11445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.893457][T11445] IPv6: NLM_F_CREATE should be set when creating new route [ 522.893705][T11445] IPv6: NLM_F_CREATE should be set when creating new route [ 524.291941][T11453] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1552'. [ 524.292470][T11453] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1552'. [ 526.896623][ T10] kworker/0:1 (10) used greatest stack depth: 13984 bytes left [ 527.128439][T11475] binder: 11474:11475 ioctl c0306201 200000000080 returned -14 [ 530.330869][T11494] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1564'. [ 537.528433][T11581] netlink: 'syz.6.1593': attribute type 1 has an invalid length. [ 537.835290][T11581] bond0: option mode: invalid value (8) [ 538.268453][T11581] bond0 (unregistering): Released all slaves [ 539.540461][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805597cc00: rx timeout, send abort [ 542.113872][T11616] binder: 11615:11616 ioctl c0046209 100000000000000 returned -22 [ 542.229802][T11621] netlink: 'syz.2.1607': attribute type 11 has an invalid length. [ 543.792078][T11619] input: syz0 as /devices/virtual/input/input14 [ 544.012753][T11632] netlink: 'syz.5.1610': attribute type 1 has an invalid length. [ 544.111078][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1610'. [ 544.280597][T11636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.341522][T11637] bridge1: entered promiscuous mode [ 544.341554][T11637] bridge1: entered allmulticast mode [ 544.377148][T11637] bond2: (slave bridge1): making interface the new active one [ 544.401332][T11637] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 545.889062][T11661] ./file0: Can't lookup blockdev [ 546.233658][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1619'. [ 547.472760][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1619'. [ 552.579994][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1637'. [ 559.112447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 559.122430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 563.995305][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.984769][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1668'. [ 567.031810][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1668'. [ 567.064046][T11843] hsr_slave_0: left promiscuous mode [ 567.104077][T11843] hsr_slave_1: left promiscuous mode [ 567.562746][ T37] audit: type=1326 audit(2000000056.360:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11847 comm="syz.1.1671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x0 [ 568.712593][ T37] audit: type=1326 audit(2000000057.760:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.5.1672" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x0 [ 569.902412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 570.564826][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1676'. [ 573.122608][ T4977] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 573.197419][T11891] fuse: fd is not a fuse device [ 573.259686][T11893] jffs2: notice: (11893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 573.283969][ T4977] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 573.303255][ T4977] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.305235][ T4977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 573.305262][ T4977] usb 7-1: Product: syz [ 573.305276][ T4977] usb 7-1: Manufacturer: syz [ 573.385158][T11899] binder: 11894:11899 ioctl c0306201 0 returned -14 [ 573.468098][T11897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1683'. [ 574.991795][ T36] usb 7-1: USB disconnect, device number 14 [ 576.875665][ T5890] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 577.042572][ T5890] usb 8-1: Using ep0 maxpacket: 32 [ 577.049303][ T5890] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 577.053975][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.054003][ T5890] usb 8-1: Product: syz [ 577.054017][ T5890] usb 8-1: Manufacturer: syz [ 577.054031][ T5890] usb 8-1: SerialNumber: syz [ 577.110334][ T5890] usb 8-1: config 0 descriptor?? [ 577.143183][ T5890] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 577.446942][ T5890] gspca_topro: reg_w err -71 [ 577.472709][ T5890] gspca_topro: Sensor soi763a [ 577.550468][T11910] ALSA: mixer_oss: invalid OSS volume '' [ 579.506782][ T5890] usb 8-1: USB disconnect, device number 12 [ 579.941035][T11957] netlink: 'syz.6.1701': attribute type 6 has an invalid length. [ 580.606921][T11973] coredump: 1164(syz.2.1705): Core dump to core aborted: cannot preserve file permissions [ 581.119260][T11979] comedi comedi3: dt2817: I/O base address or length out of range [ 582.042422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 582.072422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 582.082429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 582.092419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 582.102413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 582.112420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 584.812742][T11992] fuse: fd is not a fuse device [ 586.423710][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 587.696746][T12002] bridge0: port 1(erspan0) entered blocking state [ 587.794082][T12002] bridge0: port 1(erspan0) entered disabled state [ 587.801427][T12002] erspan0: entered allmulticast mode [ 588.063292][T12002] erspan0: entered promiscuous mode [ 589.729201][T12002] bridge0: port 1(erspan0) entered blocking state [ 589.770090][T12002] bridge0: port 1(erspan0) entered forwarding state [ 589.853481][T12007] erspan0: left allmulticast mode [ 589.859148][T12007] erspan0: left promiscuous mode [ 589.859471][T12007] bridge0: port 1(erspan0) entered disabled state [ 605.358790][ T2341] IPVS: starting estimator thread 0... [ 605.948250][ T5257] veth1_vlan: left promiscuous mode [ 606.481535][T12182] IPVS: using max 8 ests per chain, 19200 per kthread [ 614.641287][ T5257] veth1_vlan: entered promiscuous mode [ 614.696617][T12266] netlink: 'syz.7.1781': attribute type 1 has an invalid length. [ 614.855485][T12268] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1781'. [ 615.211012][T12266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.020755][T12268] bond2: entered promiscuous mode [ 616.020794][T12268] bond2: entered allmulticast mode [ 617.877953][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 617.940338][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1787'. [ 618.032720][T12273] bridge1: port 1(dummy0) entered disabled state [ 618.048975][T12273] dummy0: left allmulticast mode [ 618.049081][T12273] dummy0: left promiscuous mode [ 618.049442][T12273] bridge1: port 1(dummy0) entered disabled state [ 618.289939][T12273] bond2: (slave dummy0): making interface the new active one [ 618.290049][T12273] dummy0: entered promiscuous mode [ 618.290355][T12273] dummy0: entered allmulticast mode [ 618.382295][T12273] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 618.605332][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.263235][T12300] bond0: entered promiscuous mode [ 619.268506][T12300] bond0: entered allmulticast mode [ 620.328988][T12303] dummy0: entered promiscuous mode [ 620.341995][T12303] dummy0: entered allmulticast mode [ 620.408159][T12303] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 624.847726][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.055351][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1812'. [ 627.009943][ T37] audit: type=1326 audit(2000000116.060:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 627.010062][ T37] audit: type=1326 audit(2000000116.060:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 627.028995][ T37] audit: type=1326 audit(2000000116.080:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 627.029049][ T37] audit: type=1326 audit(2000000116.080:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 627.029097][ T37] audit: type=1326 audit(2000000116.080:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 627.052535][ T37] audit: type=1326 audit(2000000116.100:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5bfbb7ed7 code=0x7ffc0000 [ 627.052601][ T37] audit: type=1326 audit(2000000116.100:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5bfb5f4d9 code=0x7ffc0000 [ 627.052647][ T37] audit: type=1326 audit(2000000116.100:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5bfbb7ed7 code=0x7ffc0000 [ 627.052691][ T37] audit: type=1326 audit(2000000116.100:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5bfb5f4d9 code=0x7ffc0000 [ 627.052731][ T37] audit: type=1326 audit(2000000116.100:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.5.1814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5bfbb7ed7 code=0x7ffc0000 [ 629.278082][T12440] netlink: 'syz.2.1821': attribute type 12 has an invalid length. [ 630.083197][ T5606] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 630.273716][ T5606] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 630.275383][ T5606] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 630.275437][ T5606] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 630.275461][ T5606] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 630.275500][ T5606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.291842][ T5606] usb 8-1: config 0 descriptor?? [ 630.298474][T12448] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 635.274224][ T5606] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x3 [ 635.290476][ T5606] hid-rmi 0003:06CB:81A7.0007: reserved main item tag 0xd [ 635.290520][ T5606] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x6 [ 635.290546][ T5606] hid-rmi 0003:06CB:81A7.0007: item fetching failed at offset 39/40 [ 635.291327][ T5606] hid-rmi 0003:06CB:81A7.0007: parse failed [ 635.291429][ T5606] hid-rmi 0003:06CB:81A7.0007: probe with driver hid-rmi failed with error -22 [ 635.298312][ T5606] usb 8-1: USB disconnect, device number 13 [ 636.223011][T12470] binder: 12468:12470 ioctl c0306201 2000000006c0 returned -14 [ 638.921805][T12516] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1838'. [ 638.942487][T12514] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1838'. [ 651.068854][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1872'. [ 652.485915][T12666] vlan2: entered allmulticast mode [ 652.485942][T12666] bridge2: entered allmulticast mode [ 652.486698][T12660] bridge2: port 1(erspan0) entered blocking state [ 652.486842][T12660] bridge2: port 1(erspan0) entered disabled state [ 652.487064][T12660] erspan0: entered allmulticast mode [ 654.517628][ T37] kauditd_printk_skb: 817 callbacks suppressed [ 654.517892][ T37] audit: type=1326 audit(2000000143.570:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.521042][ T37] audit: type=1326 audit(2000000143.570:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.591661][ T37] audit: type=1326 audit(2000000143.640:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.598408][ T37] audit: type=1326 audit(2000000143.650:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.598562][ T37] audit: type=1326 audit(2000000143.650:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.598605][ T37] audit: type=1326 audit(2000000143.650:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.702527][ T37] audit: type=1326 audit(2000000143.640:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.708433][ T37] audit: type=1326 audit(2000000143.760:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.708487][ T37] audit: type=1326 audit(2000000143.760:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 654.718379][ T37] audit: type=1326 audit(2000000143.770:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12694 comm="syz.5.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5bfbbe159 code=0x7ffc0000 [ 656.562564][ T9] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 658.606175][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 658.613330][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.613401][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.613479][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.816235][ T9] usb 8-1: usb_control_msg returned -71 [ 659.822101][ T9] usbtmc 8-1:16.0: can't read capabilities [ 660.064483][ T9] usb 8-1: USB disconnect, device number 14 [ 661.074951][T12762] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1896'. [ 666.095388][T12817] X.509: Couldn't decode AuthKeyIdentifier [ 666.207671][T12821] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1907'. [ 674.434192][T12862] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 674.636366][ T5712] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 674.667553][ T5712] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 674.667953][ T5712] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 674.670131][ T5712] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 674.670155][ T5712] rtc rtc0: __rtc_set_alarm: err=-22 [ 677.882880][T12889] netlink: 'syz.5.1927': attribute type 14 has an invalid length. [ 677.891200][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 677.891227][T12889] bond0: option xmit_hash_policy: invalid value (48) [ 681.260243][T12912] lo: entered allmulticast mode [ 682.553505][T12909] lo: left allmulticast mode [ 683.147604][T12926] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.1937'. [ 684.251927][T12935] netlink: 'syz.1.1940': attribute type 83 has an invalid length. [ 686.264481][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.660381][T12970] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 694.758321][T13048] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1969'. [ 699.041894][T13074] fuse: fd is not a fuse device [ 699.188394][T13071] netlink: 'syz.7.1975': attribute type 4 has an invalid length. [ 701.566461][T13087] openvswitch: netlink: IP tunnel dst address not specified [ 701.766770][T13091] overlayfs: overlapping lowerdir path [ 702.917852][T13102] sctp: [Deprecated]: syz.1.1983 (pid 13102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.917852][T13102] Use struct sctp_sack_info instead [ 702.925467][T13103] hfsplus: unable to find HFS+ superblock [ 707.991941][T13153] fuse: fd is not a fuse device [ 708.010644][T13148] syzkaller0: entered promiscuous mode [ 708.010673][T13148] syzkaller0: entered allmulticast mode [ 708.061689][T13148] tipc: Started in network mode [ 708.061725][T13148] tipc: Node identity 8e22fad0d56c, cluster identity 4711 [ 708.093142][T13148] tipc: Enabled bearer , priority 0 [ 708.156481][T13146] tipc: Resetting bearer [ 708.770224][T13164] xt_IDLETIMER: timeout value is zero [ 710.023439][T13169] evm: overlay not supported [ 712.648034][T13146] tipc: Disabling bearer [ 714.268696][ T9] tipc: Node number set to 1531902672 [ 721.883355][T13254] uprobe: syz.5.2029:13254 failed to unregister, leaking uprobe [ 721.883521][T13254] uprobe: syz.5.2029:13254 failed to unregister, leaking uprobe [ 724.641623][T13287] 9pnet_fd: p9_fd_create_unix (13287): problem connecting socket: ./file0: -111 [ 733.666582][ T37] kauditd_printk_skb: 61 callbacks suppressed [ 733.676269][ T37] audit: type=1326 audit(2000000222.720:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.719153][ T37] audit: type=1326 audit(2000000222.760:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.746447][ T37] audit: type=1326 audit(2000000222.800:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.771925][ T37] audit: type=1326 audit(2000000222.800:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.797987][ T37] audit: type=1326 audit(2000000222.820:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.799571][ T37] audit: type=1326 audit(2000000222.850:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.799623][ T37] audit: type=1326 audit(2000000222.850:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.885255][ T37] audit: type=1326 audit(2000000222.940:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.897851][ T37] audit: type=1326 audit(2000000222.940:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 733.943388][ T37] audit: type=1326 audit(2000000222.990:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13345 comm="syz.1.2053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 737.166909][T13378] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2061'. [ 737.773772][T13378] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2061'. [ 740.913469][T13399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.747369][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.766688][T13475] fuse: fd is not a fuse device [ 752.041198][T13493] jffs2: notice: (13493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 752.106086][T13494] MTD: Couldn't look up './dev/mtdblock0': -2 [ 757.978503][T13551] overlayfs: failed to clone upperpath [ 759.669305][T13563] futex_wake_op: syz.6.2108 tries to shift op by 144; fix this program [ 764.565438][T13602] hub 7-0:1.0: USB hub found [ 764.576348][T13602] hub 7-0:1.0: 1 port detected [ 773.213947][T13652] tipc: Failed to remove unknown binding: 66,0,0/0:3047270517/3047270519 [ 773.225173][T13652] tipc: Failed to remove unknown binding: 66,0,0/0:3047270517/3047270518 [ 773.229003][T13652] tipc: Failed to remove unknown binding: 66,0,0/0:3047270517/3047270519 [ 773.229042][T13652] tipc: Failed to remove unknown binding: 66,0,0/0:3047270517/3047270518 [ 798.556643][T13790] syzkaller0: entered promiscuous mode [ 798.558203][T13790] syzkaller0: entered allmulticast mode [ 799.329755][T13801] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2176'. [ 800.622766][T13806] fuse: Bad value for 'fd' [ 802.475255][ T37] kauditd_printk_skb: 61 callbacks suppressed [ 802.481819][ T37] audit: type=1800 audit(2000000292.532:1045): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2175" name="bus" dev="ramfs" ino=38144 res=0 errno=0 [ 805.088113][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'. [ 805.088141][T13843] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2185'. [ 805.088159][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'. [ 806.389480][T13849] fuse: Bad value for 'fd' [ 809.863065][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.604797][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2216'. [ 839.625383][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 839.724705][T14043] netlink: zone id is out of range [ 839.735798][T14043] netlink: zone id is out of range [ 839.746338][T14043] netlink: zone id is out of range [ 839.753932][T14043] netlink: zone id is out of range [ 839.761942][T14043] netlink: zone id is out of range [ 839.764374][T14043] netlink: zone id is out of range [ 839.764800][T14043] netlink: zone id is out of range [ 839.768328][T14043] netlink: zone id is out of range [ 839.774138][T14043] netlink: zone id is out of range [ 839.779055][T14043] netlink: zone id is out of range [ 840.437648][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 840.448111][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 840.473477][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 840.477311][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 840.546952][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 842.590000][ T4909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 842.590472][ T4909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 842.592995][ T4909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 842.594132][ T4909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 842.594831][ T4909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.652779][ T4909] Bluetooth: hci4: command tx timeout [ 845.348373][T14081] netlink: 'syz.5.2240': attribute type 2 has an invalid length. [ 846.230386][T14090] netlink: 'syz.5.2242': attribute type 1 has an invalid length. [ 846.742663][ T4909] Bluetooth: hci4: command tx timeout [ 846.964099][T14096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2242'. [ 847.060566][ T1375] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.383459][T14090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 847.400610][T14096] bond3: entered promiscuous mode [ 847.784687][T14091] bond3: (slave dummy0): making interface the new active one [ 847.790228][T14091] dummy0: entered promiscuous mode [ 848.845638][T14091] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 850.705357][ T4909] Bluetooth: hci4: command tx timeout [ 851.295304][T14114] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 853.339621][ T59] Bluetooth: hci4: command tx timeout [ 858.157288][ T1375] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.798951][ T1375] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.431889][T14175] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6099] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14175] [ 866.455835][ T1375] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.641477][ T37] audit: type=1326 audit(2000000356.692:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 866.980346][ T37] audit: type=1326 audit(2000000357.032:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 867.013462][ T37] audit: type=1326 audit(2000000357.072:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 867.040885][ T37] audit: type=1326 audit(2000000357.072:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 867.070480][ T37] audit: type=1326 audit(2000000357.122:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 867.072522][ T37] audit: type=1326 audit(2000000357.122:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3d6a2dec2 code=0x7ffc0000 [ 867.072568][ T37] audit: type=1326 audit(2000000357.122:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd3d6a2df57 code=0x7ffc0000 [ 867.113279][ T37] audit: type=1326 audit(2000000357.172:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 867.113334][ T37] audit: type=1326 audit(2000000357.172:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 867.113374][ T37] audit: type=1326 audit(2000000357.172:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14197 comm="syz.1.2268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6a2e159 code=0x7ffc0000 [ 869.412389][T14219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 870.727133][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.682777][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2285'. [ 882.214579][T14032] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.214890][T14032] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.217042][T14032] bridge_slave_0: entered allmulticast mode [ 882.231235][T14032] bridge_slave_0: entered promiscuous mode [ 882.244222][T14032] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.244427][T14032] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.244620][T14032] bridge_slave_1: entered allmulticast mode [ 882.287961][T14032] bridge_slave_1: entered promiscuous mode [ 885.377156][T14032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.404408][T14032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.659527][T14303] netlink: 'syz.1.2295': attribute type 16 has an invalid length. [ 886.668273][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 889.822637][T14329] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 889.834385][T14329] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 890.859054][T14334] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 890.878372][T14334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 891.012370][T14334] vhci_hcd vhci_hcd.0: Device attached [ 891.034013][T14329] vhci_hcd vhci_hcd.0: Device attached [ 891.142685][ T36] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 891.167740][T14335] vhci_hcd: connection closed [ 891.169865][ T9061] vhci_hcd vhci_hcd.7: stop threads [ 891.169900][ T9061] vhci_hcd vhci_hcd.7: release socket [ 891.181539][ T9061] vhci_hcd vhci_hcd.7: disconnect device [ 891.204600][T14330] vhci_hcd: connection reset by peer [ 891.270934][ T1523] vhci_hcd vhci_hcd.7: stop threads [ 891.271037][ T1523] vhci_hcd vhci_hcd.7: release socket [ 891.271120][ T1523] vhci_hcd vhci_hcd.7: disconnect device [ 891.722932][ T1375] bond1 (unregistering): Released all slaves [ 893.104093][T14032] team0: Port device team_slave_0 added [ 894.025522][T14032] team0: Port device team_slave_1 added [ 895.457451][ T1375] tipc: Left network mode [ 896.604617][T14032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.604703][T14032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.604758][T14032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.787094][T14032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.794266][T14032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.794303][T14032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.802699][ T36] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 898.479509][T14032] hsr_slave_0: entered promiscuous mode [ 898.604713][T14032] hsr_slave_1: entered promiscuous mode [ 898.613433][T14032] debugfs: 'hsr0' already exists in 'hsr' [ 898.616523][T14032] Cannot create hsr debugfs directory [ 899.237850][T14401] overlayfs: failed to clone upperpath [ 900.484559][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 901.857192][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.995635][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.017786][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.036172][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.059769][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 905.165019][ T4909] Bluetooth: hci1: command tx timeout [ 906.159571][T14458] PKCS7: Unknown OID: [4] 0.0 [ 906.160951][T14458] PKCS7: Only support pkcs7_signedData type [ 907.110935][T14444] netlink: 'syz.7.2319': attribute type 210 has an invalid length. [ 907.217949][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 907.248922][ T4909] Bluetooth: hci1: command tx timeout [ 908.566382][T14470] jffs2: notice: (14470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 911.264245][ T4909] Bluetooth: hci1: command tx timeout [ 914.359095][ T4909] Bluetooth: hci1: command tx timeout [ 915.380014][T14518] udc dummy_udc.0: failed to start g1: -19 [ 915.395669][T14518] UDC core: g1: couldn't find an available UDC or it's busy [ 916.848778][ T1375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.888968][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.928988][ T1375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.929085][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.098168][ T1375] batman_adv: batadv0: Interface deactivated: dummy0 [ 917.099142][ T1375] batman_adv: batadv0: Removing interface: dummy0 [ 919.801534][ T1375] veth1_macvtap: left promiscuous mode [ 919.801608][ T1375] veth0_macvtap: left promiscuous mode [ 919.806946][ T1375] veth1_vlan: left promiscuous mode [ 919.807108][ T1375] veth0_vlan: left promiscuous mode [ 929.432704][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 929.615239][T14588] No source specified [ 930.991082][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 932.735535][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.865270][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 939.799632][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 944.150929][T14720] 9pnet_fd: p9_fd_create_tcp (14720): problem connecting socket to 127.0.0.1 [ 945.365597][ T1375] IPVS: stop unused estimator thread 0... [ 947.305019][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 948.263756][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2391'. [ 951.964485][ T1405] bridge_slave_1: left allmulticast mode [ 951.964601][ T1405] bridge_slave_1: left promiscuous mode [ 951.964866][ T1405] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.274061][ T1405] bridge_slave_0: left allmulticast mode [ 953.274155][ T1405] bridge_slave_0: left promiscuous mode [ 953.274406][ T1405] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.521081][ T1405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.009176][ T1405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.188890][ T4909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 962.271020][ T4909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 962.274462][ T4909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 962.280210][ T4909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 962.290795][ T4909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 962.420766][ T1405] bond0 (unregistering): Released all slaves [ 964.664813][ T59] Bluetooth: hci4: command tx timeout [ 965.159330][ T1405] hsr_slave_0: left promiscuous mode [ 965.195723][ T1405] hsr_slave_1: left promiscuous mode [ 965.202789][ T1405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.389214][ T1405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.894671][ T59] Bluetooth: hci4: command tx timeout [ 969.808449][T14880] overlayfs: failed to clone upperpath [ 969.954515][ T59] Bluetooth: hci4: command tx timeout [ 970.647030][ T1405] team0 (unregistering): Port device team_slave_1 removed [ 970.861416][ T1405] team0 (unregistering): Port device team_slave_0 removed [ 972.412766][ T59] Bluetooth: hci4: command tx timeout [ 972.438596][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2421'. [ 974.568810][T14923] WARNING! power/level is deprecated; use power/control instead [ 976.435775][T14938] fuse: fd is not a fuse device [ 976.504574][T14938] overlayfs: missing 'lowerdir' [ 984.197095][T14832] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.204797][T14832] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.205023][T14832] bridge_slave_0: entered allmulticast mode [ 984.547487][T14832] bridge_slave_0: entered promiscuous mode [ 984.589447][T14832] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.589576][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.589791][T14832] bridge_slave_1: entered allmulticast mode [ 984.618057][T14832] bridge_slave_1: entered promiscuous mode [ 987.722591][T15002] fuse: Bad value for 'fd' [ 988.747336][T15013] net_ratelimit: 10 callbacks suppressed [ 988.747967][T15013] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 993.346228][ T1405] bond0 (unregistering): Released all slaves [ 993.455778][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.928399][T14832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.991460][T14832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.859796][T14832] team0: Port device team_slave_0 added [ 995.884368][T14832] team0: Port device team_slave_1 added [ 996.304277][T14832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.304357][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.304386][T14832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.775341][T14832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.775361][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.775392][T14832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.869815][T14832] hsr_slave_0: entered promiscuous mode [ 1002.871581][T14832] hsr_slave_1: entered promiscuous mode [ 1002.872847][T14832] debugfs: 'hsr0' already exists in 'hsr' [ 1002.872975][T14832] Cannot create hsr debugfs directory [ 1008.196484][T15121] Invalid ELF header magic: != ELF [ 1017.599635][T14832] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1017.683670][T14832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.693863][T14832] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1017.954821][T14832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.092013][T14832] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1021.448382][T14832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.822806][ T4909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1022.908560][ T4909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1022.922704][ T4909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1022.928026][ T4909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1022.957466][ T4909] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1024.509268][T15221] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1024.514527][T15221] CIFS: Attempting to mount //::1/share [ 1025.143837][T15233] 9pnet_fd: p9_fd_create_unix (15233): problem connecting socket: éq‰Y’3aK: -111 [ 1025.806863][ T59] Bluetooth: hci1: command tx timeout [ 1025.842342][T15221] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1025.865703][T15221] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1027.852450][ T59] Bluetooth: hci1: command tx timeout [ 1030.392247][ T59] Bluetooth: hci1: command tx timeout [ 1032.415007][ T59] Bluetooth: hci1: command tx timeout [ 1040.727964][T15327] sg_read: process 1574 (syz.7.2509) changed security contexts after opening file descriptor, this is not allowed. [ 1043.697209][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 1043.796573][T15348] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 1043.808529][T15348] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 1043.816973][T15348] CPU: 0 UID: 0 PID: 15348 Comm: syz.1.2507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1043.828463][T15348] Tainted: [L]=SOFTLOCKUP [ 1043.832894][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1043.842979][T15348] RIP: 0010:__ip6_del_rt_siblings+0x31e/0x7c0 [ 1043.849253][T15348] Code: f7 4d 8d 74 24 10 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 80 fb 2d f8 4d 8b 36 49 83 c6 20 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 63 fb 2d f8 49 8b 06 4c 39 e0 74 [ 1043.868880][T15348] RSP: 0018:ffffc9000564f120 EFLAGS: 00010202 [ 1043.874993][T15348] RAX: 0000000000000004 RBX: ffffc9000564f430 RCX: 0000000000080000 [ 1043.882971][T15348] RDX: ffffc90005222000 RSI: 0000000000000307 RDI: 0000000000000308 [ 1043.890945][T15348] RBP: 1ffff110069ec605 R08: 0000000000000000 R09: 0000000000000000 [ 1043.898926][T15348] R10: dffffc0000000000 R11: ffffed100c66d413 R12: ffff888034f63000 [ 1043.906905][T15348] R13: dffffc0000000000 R14: 0000000000000020 R15: ffffc9000564f4b8 [ 1043.914885][T15348] FS: 00007fd3d4c866c0(0000) GS:ffff888125bd5000(0000) knlGS:0000000000000000 [ 1043.923816][T15348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.930401][T15348] CR2: 00007fb3e2f95ff8 CR3: 0000000060a36000 CR4: 00000000003526f0 [ 1043.938383][T15348] Call Trace: [ 1043.941671][T15348] [ 1043.944610][T15348] ? __ip6_del_rt_siblings+0x9f/0x7c0 [ 1043.949992][T15348] ip6_route_del+0x1054/0x1110 [ 1043.954771][T15348] ? ip6_route_del+0xe2/0x1110 [ 1043.959545][T15348] ? __pfx_ip6_route_del+0x10/0x10 [ 1043.964664][T15348] ? __lock_acquire+0x6df/0x2e40 [ 1043.969625][T15348] inet6_rtm_delroute+0x5d7/0x6d0 [ 1043.974681][T15348] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 1043.980233][T15348] ? nlmon_xmit+0xb0/0x100 [ 1043.984779][T15348] ? __lock_acquire+0x6df/0x2e40 [ 1043.989815][T15348] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1043.995198][T15348] ? lockdep_hardirqs_on+0x7b/0x110 [ 1044.000411][T15348] ? __dev_queue_xmit+0x294/0x3880 [ 1044.005599][T15348] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 1044.011153][T15348] rtnetlink_rcv_msg+0x802/0xc00 [ 1044.016247][T15348] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1044.021370][T15348] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1044.026930][T15348] ? ref_tracker_free+0x668/0x820 [ 1044.032053][T15348] ? __pfx_ref_tracker_free+0x10/0x10 [ 1044.037430][T15348] ? __asan_memcpy+0x40/0x70 [ 1044.042027][T15348] ? __skb_clone+0x5c/0x6c0 [ 1044.046543][T15348] netlink_rcv_skb+0x226/0x4a0 [ 1044.051560][T15348] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1044.057027][T15348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1044.062330][T15348] ? netlink_deliver_tap+0x2e/0x1b0 [ 1044.067546][T15348] ? netlink_deliver_tap+0x2e/0x1b0 [ 1044.072754][T15348] netlink_unicast+0x7f5/0x990 [ 1044.077535][T15348] netlink_sendmsg+0x813/0xb40 [ 1044.082312][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.087626][T15348] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1044.094093][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.099403][T15348] sock_sendmsg_nosec+0x13a/0x180 [ 1044.104448][T15348] ____sys_sendmsg+0x565/0x870 [ 1044.109242][T15348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1044.114608][T15348] ? import_iovec+0x73/0xa0 [ 1044.119132][T15348] ___sys_sendmsg+0x2a5/0x360 [ 1044.123833][T15348] ? __lock_acquire+0x6df/0x2e40 [ 1044.128800][T15348] ? __pfx____sys_sendmsg+0x10/0x10 [ 1044.134016][T15348] ? futex_wait+0x2a2/0x390 [ 1044.138625][T15348] ? __fget_files+0x2a/0x420 [ 1044.143234][T15348] ? __fget_files+0x3a8/0x420 [ 1044.147954][T15348] __x64_sys_sendmsg+0x1b7/0x290 [ 1044.152932][T15348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1044.158430][T15348] do_syscall_64+0x166/0x520 [ 1044.163035][T15348] ? trace_irq_disable+0x3b/0x140 [ 1044.168072][T15348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.174149][T15348] ? clear_bhb_loop+0x70/0xc0 [ 1044.178917][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.184813][T15348] RIP: 0033:0x7fd3d6a2e159 [ 1044.189238][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.208845][T15348] RSP: 002b:00007fd3d4c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.217279][T15348] RAX: ffffffffffffffda RBX: 00007fd3d6cb5fa0 RCX: 00007fd3d6a2e159 [ 1044.225279][T15348] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1044.233280][T15348] RBP: 00007fd3d6ac5024 R08: 0000000000000000 R09: 0000000000000000 [ 1044.241358][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.249340][T15348] R13: 00007fd3d6cb6038 R14: 00007fd3d6cb5fa0 R15: 00007fff66fa0ad8 [ 1044.257334][T15348] [ 1044.260356][T15348] Modules linked in: [ 1044.264335][T15348] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1044.425950][T15348] RIP: 0010:__ip6_del_rt_siblings+0x31e/0x7c0 [ 1044.432328][T15348] Code: f7 4d 8d 74 24 10 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 80 fb 2d f8 4d 8b 36 49 83 c6 20 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 63 fb 2d f8 49 8b 06 4c 39 e0 74 [ 1044.432356][T15348] RSP: 0018:ffffc9000564f120 EFLAGS: 00010202 [ 1044.432378][T15348] RAX: 0000000000000004 RBX: ffffc9000564f430 RCX: 0000000000080000 [ 1044.432393][T15348] RDX: ffffc90005222000 RSI: 0000000000000307 RDI: 0000000000000308 [ 1044.432408][T15348] RBP: 1ffff110069ec605 R08: 0000000000000000 R09: 0000000000000000 [ 1044.432422][T15348] R10: dffffc0000000000 R11: ffffed100c66d413 R12: ffff888034f63000 [ 1044.432437][T15348] R13: dffffc0000000000 R14: 0000000000000020 R15: ffffc9000564f4b8 [ 1044.432452][T15348] FS: 00007fd3d4c866c0(0000) GS:ffff888125bd5000(0000) knlGS:0000000000000000 [ 1044.432470][T15348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.432484][T15348] CR2: 00007fa5bde16d58 CR3: 0000000060a36000 CR4: 00000000003526f0 [ 1044.432507][T15348] Kernel panic - not syncing: Fatal exception in interrupt [ 1044.529473][T15348] Kernel Offset: disabled [ 1044.533812][T15348] Rebooting in 86400 seconds..