last executing test programs: 5m36.127598194s ago: executing program 1 (id=203): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xc8000, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 5m35.780772487s ago: executing program 1 (id=205): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0xc2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 5m34.521838475s ago: executing program 1 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000100)={0x2, 0x15, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x15, @loopback}, 0x10) 5m34.002371196s ago: executing program 1 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000800)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000008c0)={0x48, 0x2, r3}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m32.866913672s ago: executing program 1 (id=219): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0xc2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 5m31.670263953s ago: executing program 0 (id=222): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioperm(0x3, 0x6, 0x7) 5m31.183441279s ago: executing program 0 (id=224): accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x101800) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000200)={&(0x7f0000000100)=""/254, 0xfe, 0x1, 0x7fffffff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) unshare(0x22020600) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000380), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0x2, 0x800, 0x0, 0x0}, {0x0, 0x1011, 0x0, 0x0}], 0x2}) 5m28.46518106s ago: executing program 1 (id=229): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x0) r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) inotify_init() openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="930100000000000081", @ANYRES32=r1], 0x10) 5m27.287322815s ago: executing program 32 (id=229): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x0) r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) inotify_init() openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="930100000000000081", @ANYRES32=r1], 0x10) 5m27.22547495s ago: executing program 0 (id=231): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000800)='GPL\x00', 0x2, 0xde, &(0x7f0000000840)=""/222}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) 5m26.911073946s ago: executing program 4 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./security\x00', &(0x7f00000007c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='appraise func=FIRMWARE_CHECK', 0x1c) 5m25.748482106s ago: executing program 0 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000800)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000008c0)={0x48, 0x2, r2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m25.062726327s ago: executing program 0 (id=238): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount$9p_tcp(&(0x7f00000008c0), &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', &(0x7f0000000940), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=tcp']) 5m24.540579469s ago: executing program 4 (id=241): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00), 0x84000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r1, &(0x7f0000000100)='0', 0x1) fcntl$setflags(r0, 0x2, 0x0) 5m22.580149091s ago: executing program 4 (id=244): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001980)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000019c0)={0x84, &(0x7f0000001a80)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001ac0)={0x84, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000001ec0)={0x0, 0x4, 0x7, &(0x7f0000001f00)={0x1a, "1a9c66bf2f615e4200000000e218000000000000000000000100"}}) 5m19.982724402s ago: executing program 4 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000800)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000008c0)={0x48, 0x2, r2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m19.54453707s ago: executing program 4 (id=248): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000000400)='PASV\r\n', 0x6) r4 = accept4(r2, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 5m19.088810513s ago: executing program 0 (id=249): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000640)='./sys/module/hid_cougar/parameters/g6_is_space\x00', 0x2, 0xde) write$P9_RGETLOCK(r1, &(0x7f0000000680)={0x54, 0x37, 0x2, {0x2, 0x1, 0x4, 0xffffffffffffffff, 0x6, 'sysfs\x00'}}, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000380)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000003c0)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000400)=0xa0, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40022063, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f31000000001400000011000100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f0000000300)='R}\x00', 0x40, 0x1ea, 0x0) mq_getsetattr(r4, 0x0, &(0x7f0000000340)) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 5m18.300458373s ago: executing program 33 (id=249): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000640)='./sys/module/hid_cougar/parameters/g6_is_space\x00', 0x2, 0xde) write$P9_RGETLOCK(r1, &(0x7f0000000680)={0x54, 0x37, 0x2, {0x2, 0x1, 0x4, 0xffffffffffffffff, 0x6, 'sysfs\x00'}}, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000380)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000003c0)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000400)=0xa0, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40022063, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f31000000001400000011000100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f0000000300)='R}\x00', 0x40, 0x1ea, 0x0) mq_getsetattr(r4, 0x0, &(0x7f0000000340)) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 5m17.466912989s ago: executing program 4 (id=253): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00), 0x84000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r1, &(0x7f0000000100)='0', 0x1) fcntl$setflags(r0, 0x2, 0x0) 5m16.27924696s ago: executing program 34 (id=253): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00), 0x84000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r1, &(0x7f0000000100)='0', 0x1) fcntl$setflags(r0, 0x2, 0x0) 4m32.023815043s ago: executing program 2 (id=339): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 4m31.829157879s ago: executing program 2 (id=340): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="425fce5fc3fa", 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) ftruncate(r1, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 4m30.890536576s ago: executing program 2 (id=343): clock_nanosleep(0x9, 0x200000000000, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 4m30.573534251s ago: executing program 2 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000800)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000008c0)={0x48, 0x2, r2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4m30.276708419s ago: executing program 2 (id=345): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 4m23.417809418s ago: executing program 2 (id=361): r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/104) 4m22.816058436s ago: executing program 35 (id=361): r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/104) 19.557569629s ago: executing program 6 (id=876): socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8080003, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000c00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/net\x00') bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mknod(0x0, 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./tracing\x00', &(0x7f0000000e40)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r2, 0x0, 0x0) creat(&(0x7f0000000f00)='./tracing/uprobe_events\x00', 0x120) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x142000) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x40, 0x0, 0x27, 0x5}, {0x6, 0xdd, 0x0, 0x3}]}) write$ppp(r3, &(0x7f0000000140)="1829", 0x2) 15.61696286s ago: executing program 8 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000100)={@my=0x1}) 13.800663062s ago: executing program 8 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000000200)=""/102368, 0x18fe0) timer_create(0x0, 0x0, &(0x7f0000019240)) setrlimit(0xd, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0xfd01}, 0x4) syz_emit_ethernet(0x1d, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019340)={0x11, 0x8, &(0x7f0000019400)=ANY=[@ANYBLOB], &(0x7f0000019440)='syzkaller\x00', 0x3, 0x100, &(0x7f0000019480)=""/256, 0x7376c40bedd761a3, 0xa}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000019580)=@o_path={&(0x7f00000195c0)='./file0\x00', r2, 0x4000, r2}, 0x18) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) mount$9p_fd(0x0, 0x0, &(0x7f0000019700), 0x801, &(0x7f0000019740)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@privport}, {@directio}, {@aname={'aname', 0x3d, '$'}}]}}) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000197c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019800)='./sys\x00', &(0x7f0000019840)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019880)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r4, &(0x7f00000198c0)='n', 0x1) 13.59926834s ago: executing program 7 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4c010) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002800)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f000001b840), 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000580)=""/4140, 0x102c}, {&(0x7f0000001740)=""/4097, 0x1001}], 0x3}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x40000102, 0x0) 13.057570047s ago: executing program 5 (id=893): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000010700000000000000ffff000000", @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r5, &(0x7f0000000040)='7', 0x1) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcfffffff9036513e367abd46899000000002a0cffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3d, 0x0}}, 0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000000c0)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) ioctl$KVM_TDX_INIT_MEM_REGION(r2, 0xc008aeba, &(0x7f0000000940)={0x3, 0x1, &(0x7f0000000900)={&(0x7f000000b000/0x4000)=nil, 0x100000, 0x9f}}) write(r9, &(0x7f0000000540)='0', 0x1) syz_usb_disconnect(r0) 12.691556744s ago: executing program 6 (id=895): openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000540)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000002780)) 12.176039499s ago: executing program 3 (id=896): syz_open_dev$video4linux(&(0x7f0000000600), 0x2, 0x200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x80, 0x2, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x40000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 12.12094197s ago: executing program 6 (id=897): prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x20) 10.813332098s ago: executing program 3 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019580)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000195c0)='./file0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 9.675257575s ago: executing program 7 (id=899): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB]) landlock_create_ruleset(&(0x7f0000000000)={0x1020, 0x0, 0x1, 0x820, 0x8}, 0x30, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40080c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./file1\x00', 0x101042, 0x80) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x80, 0x2, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x200015a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x40000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 8.478302488s ago: executing program 3 (id=900): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 8.111387984s ago: executing program 5 (id=901): syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x5}, {0xd, "d1345c79551d0fa183f4e57e322f0828", "f46f04f2b54a590cef61a3604ecac838"}}}}, 0x27) 7.638249314s ago: executing program 8 (id=902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500", 0x33) setsockopt(r0, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f0000010015", 0x32) setsockopt(r0, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) 7.294313098s ago: executing program 5 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1, 0x5405, 0x10001, 0x0) 7.134717568s ago: executing program 7 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 7.056854282s ago: executing program 5 (id=905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x2044c61) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000540)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x10000}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) 6.930256314s ago: executing program 6 (id=906): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x82200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000240)='27', 0x2) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f80400"/1060], 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80010, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) signalfd4(r1, &(0x7f0000000040)={[0x1]}, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x98, 0x1000001, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002480)={0x4, 0x0, 0x0, 0x288, 0x138, 0x1, 0x0, 0x20c00, 0x0, 0x0, @by_dev={r2}, [@verity={0x0, 0x40, 0x0, 0x150, 'verity\x00', {'0', 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '4096', 0x20, '512', 0x20, 0x193, 0x20, 0x12e, 0x20, 'blake2b-256', 0x20, @hex64=[0x62, 0x35, 0x61, 0x64, 0x35, 0x65, 0x6a, 0x61, 0x37, 0x33, 0x36, 0x38, 0x64, 0x0, 0x30, 0x38, 0x5c, 0x66, 0x0, 0x39, 0x66, 0x32, 0x53, 0x64, 0x31, 0x39, 0x34, 0x61, 0x63, 0x61, 0x65, 0x63, 0x39, 0x31, 0x64, 0x32, 0x35, 0x66, 0x38, 0x56, 0x63, 0x36, 0x39, 0x0, 0x34, 0x66, 0x35, 0x30, 0x66, 0x30, 0x65, 0x30, 0x0, 0x33, 0x30, 0x30, 0x35, 0x31, 0x36, 0x66, 0x66, 0x62, 0x35, 0x34, 0x39, 0x64, 0x63, 0x35, 0x65, 0x35, 0x37, 0x37, 0x38, 0x31, 0x63, 0x30, 0x62, 0x38, 0x66, 0x36, 0x826a3cb45f93b05f, 0x62, 0x31, 0x39, 0x33, 0x39, 0xea01219415241cad, 0x34, 0x63, 0x64, 0x35, 0x39, 0x36, 0x30, 0x36, 0x64, 0x65, 0x35, 0xc4, 0x38, 0xc, 0x34, 0x62, 0x30, 0x63, 0x37, 0x31, 0x33, 0x37, 0x39, 0x66, 0x34, 0x34, 0x36, 0x64, 0x32, 0x33, 0x65, 0x65, 0x63, 0x38, 0x66, 0x34, 0x63, 0x65, 0x39, 0x30, 0x32], 0x20, @hex=@hex20=[0x31, 0x36, 0x34, 0x62, 0x31, 0x38, 0x65, 0x38, 0x32, 0x62, 0x38, 0x34, 0x63, 0x38, 0x63, 0x35, 0x63, 0x69, 0x61, 0x66, 0x35, 0x0, 0x63, 0x33, 0x64, 0x64, 0x36, 0x53, 0x31, 0x64, 0x37, 0x66, 0x63, 0x63, 0x33, 0x63, 0x65, 0xe45962eca02f905e, 0x36, 0x33], ' 1 ignore_zero_blocks'}}]}) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x80080) fanotify_init(0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000980)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x3, 0x0) 6.763648946s ago: executing program 7 (id=907): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd25, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, 0x0, 0x0) 5.623229993s ago: executing program 5 (id=908): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44000084) unshare(0x6000200) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x8000000000000001, 0x121240) syz_clone(0x320000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) ftruncate(0xffffffffffffffff, 0x2007ffb) openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000840)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201002) 5.62273037s ago: executing program 3 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4c010) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002800)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f000001b840), 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000580)=""/4140, 0x102c}, {&(0x7f0000001740)=""/4097, 0x1001}], 0x3}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x40000102, 0x0) 5.500084409s ago: executing program 7 (id=910): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x5) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000400)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000480)={0x6, @empty, 0x5, 0x1, 'rr\x00', 0x6, 0x9, 0x4c}, 0x2c) sched_setparam(r0, &(0x7f0000000180)=0x1ff) r5 = socket(0xa, 0x5, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000380)='./md0\x00', 0x6180, 0x0) r6 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000440)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r6, 0x40480923, 0x0) ioctl$STOP_ARRAY(r6, 0x932, 0x0) ioctl$RUN_ARRAY(r6, 0x400c0930, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) ioctl$STOP_ARRAY(r6, 0x932, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000000b05000000000000000000060000020800004000000001080003400000000108000340000000010800024000000001"], 0x34}, 0x1, 0x0, 0x0, 0x4008044}, 0x40c4) getsockname$netlink(r5, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000540)={{0x1, 0x5, 0xca7, 0x8001, 'syz0\x00', 0x2}, 0x4, 0x400, 0x2, r0, 0x5, 0xfffffffd, 'syz0\x00', &(0x7f0000000300)=['+@--&.*}:\r\xb9\x83\xe3\x96\xd3y\x1d{(\x00', '-d-\x00', 'ethtool\x00', './md0\x00', '^\x00'], 0x28}) 5.214013859s ago: executing program 5 (id=911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) 3.163683558s ago: executing program 8 (id=912): r0 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000300)={0x2, 0x100}) 1.465352504s ago: executing program 7 (id=913): syz_usb_connect(0x0, 0x51, 0x0, 0x0) r0 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50) 1.17930922s ago: executing program 6 (id=914): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000700)) 1.111128744s ago: executing program 3 (id=915): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB]) landlock_create_ruleset(&(0x7f0000000000)={0x1020, 0x0, 0x1, 0x820, 0x8}, 0x30, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40080c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./file1\x00', 0x101042, 0x80) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x80, 0x2, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x200015a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x40000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 1.014623178s ago: executing program 8 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000540)='./bus\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1, 0x5405, 0x10001, 0x0) 734.795226ms ago: executing program 6 (id=917): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x20) 578.812765ms ago: executing program 8 (id=918): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x16a040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000200)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000240)='./my_configfs\x00', &(0x7f0000000280)='configfs\x00', 0x2, 0x0) mkdir(&(0x7f00000002c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r2, &(0x7f0000000400)=""/117, 0x75) rmdir(&(0x7f0000000480)='./my_configfs/target/core/rd_mcp_0\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x80) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x810001ff) write(r3, &(0x7f0000000140)='10', 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=919): syz_emit_ethernet(0x52, &(0x7f0000000440)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x7f, '\x00', @local}}}}}}, 0x0) kernel console output (not intermixed with test programs): adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.648326][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.759289][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.759304][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.759320][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.897683][ T7065] hsr_slave_0: entered promiscuous mode [ 259.902334][ T7065] hsr_slave_1: entered promiscuous mode [ 259.910198][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 259.910227][ T7065] Cannot create hsr debugfs directory [ 259.973828][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.974057][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.974220][ T7140] bridge_slave_0: entered allmulticast mode [ 260.002313][ T7140] bridge_slave_0: entered promiscuous mode [ 260.040831][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.041006][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.041175][ T7140] bridge_slave_1: entered allmulticast mode [ 260.068736][ T7140] bridge_slave_1: entered promiscuous mode [ 261.624093][ T7100] hsr_slave_0: entered promiscuous mode [ 261.632697][ T7100] hsr_slave_1: entered promiscuous mode [ 261.633799][ T7100] debugfs: 'hsr0' already exists in 'hsr' [ 261.633821][ T7100] Cannot create hsr debugfs directory [ 261.705476][ T7140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.764502][ T7140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.075313][ T7140] team0: Port device team_slave_0 added [ 262.227924][ T7140] team0: Port device team_slave_1 added [ 262.512053][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 262.717742][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.717763][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.717793][ T7140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.069557][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.069578][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.069603][ T7140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.696297][ T5952] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 263.809714][ T7140] hsr_slave_0: entered promiscuous mode [ 263.811089][ T7140] hsr_slave_1: entered promiscuous mode [ 263.812161][ T7140] debugfs: 'hsr0' already exists in 'hsr' [ 263.812181][ T7140] Cannot create hsr debugfs directory [ 263.855212][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 263.856759][ T5952] usb 4-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 263.858373][ T5952] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 263.858404][ T5952] usb 4-1: config 0 has no interface number 0 [ 263.858461][ T5952] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.858478][ T5952] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 263.858493][ T5952] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.858510][ T5952] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.858537][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.861590][ T5952] usb 4-1: config 0 descriptor?? [ 263.971366][ T5952] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 264.107298][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 264.113415][ T11] usb 4-1: USB disconnect, device number 7 [ 264.158668][ T11] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 265.183789][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 267.610502][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 268.608033][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 269.197211][ T7413] netlink: 'syz.3.401': attribute type 12 has an invalid length. [ 270.666764][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.778495][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 272.686504][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.520857][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.167785][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.147431][ T13] bridge_slave_1: left allmulticast mode [ 275.147475][ T13] bridge_slave_1: left promiscuous mode [ 275.147775][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.341643][ T13] bridge_slave_0: left allmulticast mode [ 275.341686][ T13] bridge_slave_0: left promiscuous mode [ 275.342013][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.605441][ T13] bridge_slave_1: left allmulticast mode [ 275.605482][ T13] bridge_slave_1: left promiscuous mode [ 275.605766][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.776290][ T13] bridge_slave_0: left allmulticast mode [ 275.776319][ T13] bridge_slave_0: left promiscuous mode [ 275.776510][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.995333][ T13] bridge_slave_1: left allmulticast mode [ 275.995363][ T13] bridge_slave_1: left promiscuous mode [ 275.995558][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.106318][ T13] bridge_slave_0: left allmulticast mode [ 276.106349][ T13] bridge_slave_0: left promiscuous mode [ 276.106533][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.276342][ T7488] 9pnet_fd: p9_fd_create_tcp (7488): problem connecting socket to 127.0.0.1 [ 276.325788][ T13] bridge_slave_1: left allmulticast mode [ 276.325830][ T13] bridge_slave_1: left promiscuous mode [ 276.326192][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.456226][ T13] bridge_slave_0: left allmulticast mode [ 276.456290][ T13] bridge_slave_0: left promiscuous mode [ 276.456471][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.615315][ T5952] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 276.766717][ T5952] usb 4-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20 [ 276.768809][ T5952] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 276.768837][ T5952] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 276.768857][ T5952] usb 4-1: config 4 has no interface number 0 [ 276.768905][ T5952] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.772141][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.772177][ T5952] usb 4-1: Product: syz [ 276.772193][ T5952] usb 4-1: Manufacturer: syz [ 276.772208][ T5952] usb 4-1: SerialNumber: syz [ 277.085817][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.165990][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.227870][ T13] bond0 (unregistering): Released all slaves [ 277.275030][ T5952] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 277.393959][ T5952] usb 4-1: loading /lib/firmware/dvb-usb-dib0700-1.20.fw failed with error -13 [ 277.394016][ T5952] usb 4-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -13 [ 277.394037][ T5952] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dib0700-1.20.fw [ 277.394357][ T37] audit: type=1800 audit(1794704437.493:4): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=appraise_data cause=missing-hash comm="kworker/1:7" name="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 res=0 errno=-61 [ 277.605859][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.685713][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.746702][ T13] bond0 (unregistering): Released all slaves [ 277.892005][ T37] audit: type=1326 audit(1794704438.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7499 comm="syz.3.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc79b9c94d9 code=0x0 [ 278.097674][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.175868][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.228399][ T13] bond0 (unregistering): Released all slaves [ 278.905905][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.968545][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.987332][ T13] bond0 (unregistering): Released all slaves [ 279.094737][ T7065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 279.169587][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.173752][ T7065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 279.255717][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.256884][ T7065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 279.298343][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.377213][ T7065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 279.421591][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.662526][ T7016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.722531][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.809569][ T7016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.888810][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.892590][ T7016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.045546][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.069399][ T7016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.124195][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.636431][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 280.867156][ T7100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.898388][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.909036][ T7100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.949911][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.163029][ T7100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.208963][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.309168][ T7100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.332750][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.037251][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.041426][ T7140] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 282.119844][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.132596][ T7140] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 282.232672][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.294555][ T7140] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 282.340417][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.358511][ T7140] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.411671][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.653197][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.680932][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 282.760708][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.760923][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.895969][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.971388][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.971673][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.192132][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.309396][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.309637][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.350512][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.397742][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.399539][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.780135][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.950406][ T7589] netlink: 72 bytes leftover after parsing attributes in process `syz.3.418'. [ 283.967090][ T13] hsr_slave_0: left promiscuous mode [ 284.009735][ T13] hsr_slave_1: left promiscuous mode [ 284.010579][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.057449][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.314217][ T13] hsr_slave_0: left promiscuous mode [ 284.347369][ T13] hsr_slave_1: left promiscuous mode [ 284.351790][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.366863][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.565335][ T13] hsr_slave_0: left promiscuous mode [ 284.585134][ T13] hsr_slave_1: left promiscuous mode [ 284.586115][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.636300][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.815119][ T13] hsr_slave_0: left promiscuous mode [ 284.835238][ T13] hsr_slave_1: left promiscuous mode [ 284.836751][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.836780][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.896895][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.896919][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.967295][ T13] veth1_macvtap: left promiscuous mode [ 284.967367][ T13] veth0_macvtap: left promiscuous mode [ 284.967689][ T13] veth1_vlan: left promiscuous mode [ 284.967743][ T13] veth0_vlan: left promiscuous mode [ 285.727862][ T13] team0 (unregistering): Port device team_slave_1 removed [ 285.775614][ T13] team0 (unregistering): Port device team_slave_0 removed [ 286.296378][ T13] team0 (unregistering): Port device team_slave_1 removed [ 286.345615][ T13] team0 (unregistering): Port device team_slave_0 removed [ 286.845868][ T13] team0 (unregistering): Port device team_slave_1 removed [ 286.896009][ T13] team0 (unregistering): Port device team_slave_0 removed [ 287.605832][ T13] team0 (unregistering): Port device team_slave_1 removed [ 287.648368][ T13] team0 (unregistering): Port device team_slave_0 removed [ 287.885454][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 288.094740][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.103254][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.186810][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.186970][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.443464][ T7140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.527910][ T7620] netlink: 72 bytes leftover after parsing attributes in process `syz.3.425'. [ 288.774901][ T7140] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.818099][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.818345][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.921196][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.921371][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.222642][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.273475][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.290702][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 291.783552][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.353633][ T7065] veth0_vlan: entered promiscuous mode [ 292.370899][ T7140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.447584][ T7065] veth1_vlan: entered promiscuous mode [ 292.560862][ T7709] netlink: 72 bytes leftover after parsing attributes in process `syz.3.432'. [ 292.938144][ T7719] FAULT_INJECTION: forcing a failure. [ 292.938144][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 292.938183][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.3.433 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 292.938208][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 292.938222][ T7719] Call Trace: [ 292.938232][ T7719] [ 292.938242][ T7719] dump_stack_lvl+0xe8/0x150 [ 292.938287][ T7719] should_fail_ex+0x447/0x5e0 [ 292.938322][ T7719] ? sock_alloc_inode+0x2c/0x1a0 [ 292.938357][ T7719] should_failslab+0xa8/0x100 [ 292.938402][ T7719] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 292.938438][ T7719] ? rt_spin_unlock+0x165/0x200 [ 292.938469][ T7719] ? sock_alloc_inode+0x2c/0x1a0 [ 292.938505][ T7719] ? __pfx_sock_alloc_inode+0x10/0x10 [ 292.938536][ T7719] sock_alloc_inode+0x2c/0x1a0 [ 292.938565][ T7719] ? __pfx_sock_alloc_inode+0x10/0x10 [ 292.938590][ T7719] alloc_inode+0x6a/0x1b0 [ 292.938617][ T7719] __sock_create+0x127/0xac0 [ 292.938654][ T7719] __sys_socketpair+0x19d/0x5e0 [ 292.938683][ T7719] __x64_sys_socketpair+0x9b/0xb0 [ 292.938707][ T7719] do_syscall_64+0x16a/0x530 [ 292.938737][ T7719] ? trace_irq_disable+0x3b/0x140 [ 292.938758][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.938780][ T7719] ? clear_bhb_loop+0x70/0xc0 [ 292.938809][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.938830][ T7719] RIP: 0033:0x7fc79b9c94d9 [ 292.938852][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.938870][ T7719] RSP: 002b:00007fc799c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 292.938896][ T7719] RAX: ffffffffffffffda RBX: 00007fc79bc45fa0 RCX: 00007fc79b9c94d9 [ 292.938913][ T7719] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 292.938927][ T7719] RBP: 00007fc79ba5804e R08: 0000000000000000 R09: 0000000000000000 [ 292.938940][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.938952][ T7719] R13: 00007fc79bc46038 R14: 00007fc79bc45fa0 R15: 00007ffd349e1d18 [ 292.938988][ T7719] [ 292.939134][ T7065] veth0_macvtap: entered promiscuous mode [ 292.940327][ T7719] socket: no more sockets [ 293.039837][ T7065] veth1_macvtap: entered promiscuous mode [ 293.379070][ T7726] FAULT_INJECTION: forcing a failure. [ 293.379070][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 293.379108][ T7726] CPU: 1 UID: 0 PID: 7726 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.379133][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 293.379145][ T7726] Call Trace: [ 293.379154][ T7726] [ 293.379164][ T7726] dump_stack_lvl+0xe8/0x150 [ 293.379210][ T7726] should_fail_ex+0x447/0x5e0 [ 293.379248][ T7726] should_failslab+0xa8/0x100 [ 293.379274][ T7726] ? do_getname+0x2e/0x250 [ 293.379302][ T7726] kmem_cache_alloc_noprof+0x99/0x680 [ 293.379336][ T7726] ? do_getname+0x2e/0x250 [ 293.379372][ T7726] do_getname+0x2e/0x250 [ 293.379409][ T7726] ? getname_flags+0x11/0x20 [ 293.379441][ T7726] do_sys_openat2+0xce/0x200 [ 293.379472][ T7726] ? __se_sys_futex+0x3a8/0x450 [ 293.379503][ T7726] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.379540][ T7726] ? rcu_is_watching+0x16/0xb0 [ 293.379574][ T7726] __x64_sys_openat+0x138/0x170 [ 293.379612][ T7726] do_syscall_64+0x16a/0x530 [ 293.379644][ T7726] ? trace_irq_disable+0x3b/0x140 [ 293.379668][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.379691][ T7726] ? clear_bhb_loop+0x70/0xc0 [ 293.379719][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.379742][ T7726] RIP: 0033:0x7fc79b9c94d9 [ 293.379765][ T7726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.379784][ T7726] RSP: 002b:00007fc799c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.379811][ T7726] RAX: ffffffffffffffda RBX: 00007fc79bc45fa0 RCX: 00007fc79b9c94d9 [ 293.379828][ T7726] RDX: 00000000000000c2 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 293.379843][ T7726] RBP: 00007fc79ba5804e R08: 0000000000000000 R09: 0000000000000000 [ 293.379858][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.379871][ T7726] R13: 00007fc79bc46038 R14: 00007fc79bc45fa0 R15: 00007ffd349e1d18 [ 293.379907][ T7726] [ 293.528749][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.620302][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.126651][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.157731][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.172099][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.173721][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.174492][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.838034][ T7100] veth0_vlan: entered promiscuous mode [ 295.039301][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.039619][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.039879][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.055949][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.204142][ T7100] veth1_vlan: entered promiscuous mode [ 295.666793][ T13] IPVS: stop unused estimator thread 0... [ 295.876947][ T7140] veth0_vlan: entered promiscuous mode [ 295.902529][ T3363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.902554][ T3363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.063204][ T7140] veth1_vlan: entered promiscuous mode [ 296.211173][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.211201][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.390700][ T5615] Bluetooth: hci4: command tx timeout [ 296.419272][ T7100] veth0_macvtap: entered promiscuous mode [ 296.467801][ T7100] veth1_macvtap: entered promiscuous mode [ 296.672129][ T7140] veth0_macvtap: entered promiscuous mode [ 296.718261][ T7733] rxe_eth0 speed is unknown, defaulting to 1000 [ 297.089872][ T7140] veth1_macvtap: entered promiscuous mode [ 297.143746][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.609519][ T7797] FAULT_INJECTION: forcing a failure. [ 297.609519][ T7797] name fail_futex, interval 1, probability 0, space 0, times 1 [ 297.609556][ T7797] CPU: 0 UID: 0 PID: 7797 Comm: syz.8.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.609582][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 297.609594][ T7797] Call Trace: [ 297.609603][ T7797] [ 297.609613][ T7797] dump_stack_lvl+0xe8/0x150 [ 297.609654][ T7797] should_fail_ex+0x447/0x5e0 [ 297.609691][ T7797] get_futex_key+0x1ab/0x1410 [ 297.609732][ T7797] ? __pfx_get_futex_key+0x10/0x10 [ 297.609758][ T7797] ? __cgroup_account_cputime+0xe8/0x120 [ 297.609791][ T7797] futex_wait_setup+0x4a/0x590 [ 297.609831][ T7797] ? __futex_wait+0xdd/0x480 [ 297.609868][ T7797] __futex_wait+0x177/0x480 [ 297.609906][ T7797] ? __pfx___futex_wait+0x10/0x10 [ 297.609939][ T7797] ? __pfx_futex_wake_mark+0x10/0x10 [ 297.609989][ T7797] ? try_to_wake_up+0x7d1/0x1320 [ 297.610031][ T7797] futex_wait+0x121/0x390 [ 297.610069][ T7797] ? __pfx_futex_wait+0x10/0x10 [ 297.610127][ T7797] do_futex+0x3e7/0x4e0 [ 297.610164][ T7797] ? __pfx_do_futex+0x10/0x10 [ 297.610195][ T7797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 297.610231][ T7797] __se_sys_futex+0x3a8/0x450 [ 297.610267][ T7797] ? ksys_write+0x248/0x270 [ 297.610290][ T7797] ? __pfx___se_sys_futex+0x10/0x10 [ 297.610321][ T7797] ? __pfx_ksys_write+0x10/0x10 [ 297.610350][ T7797] ? __x64_sys_futex+0x21/0xf0 [ 297.610383][ T7797] do_syscall_64+0x16a/0x530 [ 297.610416][ T7797] ? trace_irq_disable+0x3b/0x140 [ 297.610441][ T7797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.610465][ T7797] ? clear_bhb_loop+0x70/0xc0 [ 297.610492][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.610516][ T7797] RIP: 0033:0x7f1be15b94d9 [ 297.610538][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.610557][ T7797] RSP: 002b:00007f1bdf7fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.610583][ T7797] RAX: ffffffffffffffda RBX: 00007f1be1835fa8 RCX: 00007f1be15b94d9 [ 297.610600][ T7797] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1be1835fa8 [ 297.610615][ T7797] RBP: 00007f1be1835fa0 R08: 0000000000000000 R09: 0000000000000000 [ 297.610630][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.610644][ T7797] R13: 00007f1be1836038 R14: 00007ffeebc1c360 R15: 00007ffeebc1c448 [ 297.610679][ T7797] [ 298.171169][ T7799] syzkaller0: entered promiscuous mode [ 298.171203][ T7799] syzkaller0: entered allmulticast mode [ 298.202848][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.240334][ T7803] tipc: Started in network mode [ 298.240371][ T7803] tipc: Node identity b6dfcec89913, cluster identity 4711 [ 298.241371][ T7803] tipc: Enabled bearer , priority 0 [ 298.465174][ T5615] Bluetooth: hci4: command tx timeout [ 298.540640][ T7799] tipc: Resetting bearer [ 298.559004][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.615511][ T7798] tipc: Resetting bearer [ 298.748069][ T7798] tipc: Disabling bearer [ 298.899414][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.149183][ T7810] 9pnet_fd: p9_fd_create_tcp (7810): problem connecting socket to 127.0.0.1 [ 299.630431][ T7825] FAULT_INJECTION: forcing a failure. [ 299.630431][ T7825] name failslab, interval 1, probability 0, space 0, times 0 [ 299.630468][ T7825] CPU: 1 UID: 0 PID: 7825 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.630492][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 299.630504][ T7825] Call Trace: [ 299.630513][ T7825] [ 299.630522][ T7825] dump_stack_lvl+0xe8/0x150 [ 299.630563][ T7825] should_fail_ex+0x447/0x5e0 [ 299.630603][ T7825] should_failslab+0xa8/0x100 [ 299.630631][ T7825] __kmalloc_noprof+0xf6/0x790 [ 299.630653][ T7825] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 299.630682][ T7825] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 299.630718][ T7825] snd_pcm_hw_refine+0xa18/0x17d0 [ 299.630765][ T7825] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 299.630834][ T7825] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 299.630880][ T7825] snd_pcm_hw_param_first+0x3ab/0xb10 [ 299.630914][ T7825] snd_pcm_hw_params+0x609/0x18a0 [ 299.630959][ T7825] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 299.630995][ T7825] ? rt_spin_unlock+0x165/0x200 [ 299.631022][ T7825] ? snd_pcm_kernel_ioctl+0x318/0xae0 [ 299.631052][ T7825] ? snd_pcm_drop+0x569/0x760 [ 299.631085][ T7825] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 299.631145][ T7825] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 299.631183][ T7825] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.631216][ T7825] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.631245][ T7825] ? mutex_lock_interruptible_nested+0x14d/0x1c0 [ 299.631269][ T7825] ? snd_pcm_oss_get_active_substream+0x136/0x280 [ 299.631301][ T7825] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 299.631332][ T7825] snd_pcm_oss_set_channels+0x1b6/0x4e0 [ 299.631364][ T7825] snd_pcm_oss_ioctl+0xade/0xe00 [ 299.631387][ T7825] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 299.631411][ T7825] __se_sys_ioctl+0xff/0x170 [ 299.631438][ T7825] do_syscall_64+0x16a/0x530 [ 299.631467][ T7825] ? trace_irq_disable+0x3b/0x140 [ 299.631490][ T7825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.631513][ T7825] ? clear_bhb_loop+0x70/0xc0 [ 299.631539][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.631558][ T7825] RIP: 0033:0x7fc79b9c94d9 [ 299.631579][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.631598][ T7825] RSP: 002b:00007fc799c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.631622][ T7825] RAX: ffffffffffffffda RBX: 00007fc79bc45fa0 RCX: 00007fc79b9c94d9 [ 299.631639][ T7825] RDX: 0000200000000440 RSI: 00000000c0045006 RDI: 0000000000000004 [ 299.631653][ T7825] RBP: 00007fc79ba5804e R08: 0000000000000000 R09: 0000000000000000 [ 299.631666][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.631679][ T7825] R13: 00007fc79bc46038 R14: 00007fc79bc45fa0 R15: 00007ffd349e1d18 [ 299.631715][ T7825] [ 300.546145][ T5615] Bluetooth: hci4: command tx timeout [ 300.622730][ T7842] syzkaller0: entered promiscuous mode [ 300.622764][ T7842] syzkaller0: entered allmulticast mode [ 300.701676][ T7834] tipc: Enabled bearer , priority 0 [ 300.934489][ T7834] tipc: Resetting bearer [ 301.058128][ T7833] tipc: Resetting bearer [ 301.216311][ T7833] tipc: Disabling bearer [ 301.846341][ T3394] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.847808][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.847829][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.180222][ T7868] smpboot: CPU 1 is now offline [ 302.501211][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.501229][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.625274][ T5615] Bluetooth: hci4: command tx timeout [ 302.813863][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.834276][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.849149][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.850010][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.850468][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.132165][ T13] bridge_slave_1: left allmulticast mode [ 303.132194][ T13] bridge_slave_1: left promiscuous mode [ 303.132377][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.223983][ T13] bridge_slave_0: left allmulticast mode [ 303.224025][ T13] bridge_slave_0: left promiscuous mode [ 303.224195][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.043223][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.069511][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.071349][ T13] bond0 (unregistering): Released all slaves [ 304.150743][ T7877] pimreg: entered allmulticast mode [ 304.422699][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.422781][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.422912][ T7733] bridge_slave_0: entered allmulticast mode [ 304.448288][ T7733] bridge_slave_0: entered promiscuous mode [ 304.473146][ T3394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.473164][ T3394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.514147][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.514230][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.514355][ T7733] bridge_slave_1: entered allmulticast mode [ 304.557149][ T7733] bridge_slave_1: entered promiscuous mode [ 304.947205][ T5615] Bluetooth: hci0: command tx timeout [ 305.001594][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.086790][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.561541][ T7733] team0: Port device team_slave_0 added [ 305.565418][ T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.747131][ T7733] team0: Port device team_slave_1 added [ 305.838222][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.881308][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.882860][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.905964][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.906473][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.460924][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.460938][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.460955][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.525114][ T13] hsr_slave_0: left promiscuous mode [ 306.532017][ T13] hsr_slave_1: left promiscuous mode [ 306.532810][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.533286][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.613037][ T7911] 9pnet_fd: p9_fd_create_tcp (7911): problem connecting socket to 127.0.0.1 [ 307.025725][ T5615] Bluetooth: hci0: command tx timeout [ 307.564481][ T13] team0 (unregistering): Port device team_slave_1 removed [ 307.597994][ T13] team0 (unregistering): Port device team_slave_0 removed [ 307.692923][ T7929] sctp: [Deprecated]: syz.8.470 (pid 7929) Use of int in maxseg socket option. [ 307.692923][ T7929] Use struct sctp_assoc_value instead [ 307.737908][ T7929] netlink: 156 bytes leftover after parsing attributes in process `syz.8.470'. [ 307.901688][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.901703][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.901786][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.977586][ T7926] pimreg: entered allmulticast mode [ 307.982444][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 308.065175][ T5615] Bluetooth: hci5: command tx timeout [ 308.463514][ T7872] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.675158][ T6578] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 308.764532][ T7733] hsr_slave_0: entered promiscuous mode [ 308.782203][ T7733] hsr_slave_1: entered promiscuous mode [ 308.825101][ T6578] usb 9-1: Using ep0 maxpacket: 8 [ 308.825806][ T6578] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.826728][ T6578] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 308.826763][ T6578] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.826778][ T6578] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.826793][ T6578] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.826807][ T6578] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.826833][ T6578] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.107709][ T5615] Bluetooth: hci0: command tx timeout [ 309.258287][ T6578] usb 9-1: GET_CAPABILITIES returned 0 [ 309.258320][ T6578] usbtmc 9-1:16.0: can't read capabilities [ 309.567071][ T11] usb 9-1: USB disconnect, device number 2 [ 310.145078][ T5615] Bluetooth: hci5: command tx timeout [ 311.330595][ T7955] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 311.351007][ T5615] Bluetooth: hci0: command tx timeout [ 311.738388][ T7903] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.225316][ T5611] Bluetooth: hci5: command tx timeout [ 312.695942][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 312.977324][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.307125][ T5611] Bluetooth: hci5: command tx timeout [ 314.646872][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.8.478'. [ 316.510117][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.335479][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.335597][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.335737][ T7872] bridge_slave_0: entered allmulticast mode [ 317.339336][ T7872] bridge_slave_0: entered promiscuous mode [ 317.605137][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.605218][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.605340][ T7872] bridge_slave_1: entered allmulticast mode [ 317.610216][ T7872] bridge_slave_1: entered promiscuous mode [ 317.790444][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.790497][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.915023][ T1246] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 318.045733][ T1246] usb 9-1: device descriptor read/64, error -71 [ 318.113406][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.383092][ T1246] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 318.542883][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.567085][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.567168][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.567297][ T7903] bridge_slave_0: entered allmulticast mode [ 318.573879][ T7903] bridge_slave_0: entered promiscuous mode [ 318.593678][ T1246] usb 9-1: device descriptor read/64, error -71 [ 318.696725][ T1246] usb usb9-port1: attempt power cycle [ 318.762877][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.762993][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.763125][ T7903] bridge_slave_1: entered allmulticast mode [ 318.789734][ T7903] bridge_slave_1: entered promiscuous mode [ 318.794631][ T7733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.824857][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.899612][ T7733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.999632][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.076296][ T7872] team0: Port device team_slave_0 added [ 319.133838][ T1246] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 319.145730][ T1246] usb 9-1: device descriptor read/8, error -71 [ 319.232685][ T7733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.307026][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.311860][ T7872] team0: Port device team_slave_1 added [ 319.385929][ T1246] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 319.388163][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.391320][ T7733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.416558][ T1246] usb 9-1: device descriptor read/8, error -71 [ 319.429408][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.503718][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.529957][ T1246] usb usb9-port1: unable to enumerate USB device [ 319.953255][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.953272][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.953289][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.111568][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.111583][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.111600][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.166319][ T7903] team0: Port device team_slave_0 added [ 320.219059][ T7903] team0: Port device team_slave_1 added [ 320.699834][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.699850][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.699867][ T7903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.707446][ T5270] 8021q: adding VLAN 0 to HW filter on device eth19 [ 320.970629][ T8048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 321.049414][ T13] bridge_slave_1: left allmulticast mode [ 321.049442][ T13] bridge_slave_1: left promiscuous mode [ 321.049623][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.076340][ T13] bridge_slave_0: left allmulticast mode [ 321.076366][ T13] bridge_slave_0: left promiscuous mode [ 321.076545][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.173579][ T13] bridge_slave_1: left allmulticast mode [ 321.173609][ T13] bridge_slave_1: left promiscuous mode [ 321.173791][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.211727][ T13] bridge_slave_0: left allmulticast mode [ 321.211754][ T13] bridge_slave_0: left promiscuous mode [ 321.211907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.730016][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.735162][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.756743][ T13] bond0 (unregistering): Released all slaves [ 321.990811][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.993586][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.021074][ T13] bond0 (unregistering): Released all slaves [ 322.033656][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.033669][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.033687][ T7903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.152138][ T7872] hsr_slave_0: entered promiscuous mode [ 322.156002][ T7872] hsr_slave_1: entered promiscuous mode [ 322.181462][ T7872] debugfs: 'hsr0' already exists in 'hsr' [ 322.181489][ T7872] Cannot create hsr debugfs directory [ 322.716174][ T7903] hsr_slave_0: entered promiscuous mode [ 322.717959][ T7903] hsr_slave_1: entered promiscuous mode [ 322.739286][ T7903] debugfs: 'hsr0' already exists in 'hsr' [ 322.739312][ T7903] Cannot create hsr debugfs directory [ 323.522616][ T8067] FAULT_INJECTION: forcing a failure. [ 323.522616][ T8067] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 323.522642][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.3.499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.522659][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 323.522667][ T8067] Call Trace: [ 323.522672][ T8067] [ 323.522679][ T8067] dump_stack_lvl+0xe8/0x150 [ 323.522705][ T8067] should_fail_ex+0x447/0x5e0 [ 323.522727][ T8067] _copy_from_user+0x2d/0xb0 [ 323.522745][ T8067] do_fcntl+0x97d/0x1a40 [ 323.522762][ T8067] ? smack_file_fcntl+0x152/0x320 [ 323.522780][ T8067] ? __pfx_do_fcntl+0x10/0x10 [ 323.522795][ T8067] ? __pfx_smack_file_fcntl+0x10/0x10 [ 323.522819][ T8067] ? __fget_files+0x2a/0x420 [ 323.522842][ T8067] ? bpf_lsm_file_fcntl+0x9/0x20 [ 323.522858][ T8067] __se_sys_fcntl+0xcb/0x160 [ 323.522873][ T8067] do_syscall_64+0x16a/0x530 [ 323.522891][ T8067] ? trace_irq_disable+0x3b/0x140 [ 323.522905][ T8067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.522918][ T8067] ? clear_bhb_loop+0x70/0xc0 [ 323.522934][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.522947][ T8067] RIP: 0033:0x7fc79b9c94d9 [ 323.522961][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.522972][ T8067] RSP: 002b:00007fc799c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 323.522987][ T8067] RAX: ffffffffffffffda RBX: 00007fc79bc45fa0 RCX: 00007fc79b9c94d9 [ 323.522998][ T8067] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 323.523006][ T8067] RBP: 00007fc79ba5804e R08: 0000000000000000 R09: 0000000000000000 [ 323.523015][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.523023][ T8067] R13: 00007fc79bc46038 R14: 00007fc79bc45fa0 R15: 00007ffd349e1d18 [ 323.523043][ T8067] [ 326.720353][ T5270] 8021q: adding VLAN 0 to HW filter on device eth20 [ 326.848241][ T13] hsr_slave_0: left promiscuous mode [ 326.850176][ T13] hsr_slave_1: left promiscuous mode [ 326.852152][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.852170][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.853063][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.853078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.941943][ T13] hsr_slave_0: left promiscuous mode [ 326.942501][ T13] hsr_slave_1: left promiscuous mode [ 326.943168][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.943184][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.943911][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.943926][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.316025][ T13] veth1_macvtap: left promiscuous mode [ 327.316102][ T13] veth0_macvtap: left promiscuous mode [ 327.340659][ T13] veth1_vlan: left promiscuous mode [ 327.340841][ T13] veth0_vlan: left promiscuous mode [ 327.396767][ T13] veth1_macvtap: left promiscuous mode [ 327.419435][ T13] veth0_macvtap: left promiscuous mode [ 327.419667][ T13] veth1_vlan: left promiscuous mode [ 327.419785][ T13] veth0_vlan: left promiscuous mode [ 327.981400][ T37] audit: type=1326 audit(1794704488.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 327.981452][ T37] audit: type=1326 audit(1794704488.093:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 327.981817][ T37] audit: type=1326 audit(1794704488.093:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 327.981846][ T37] audit: type=1326 audit(1794704488.093:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 327.981872][ T37] audit: type=1326 audit(1794704488.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 327.982192][ T37] audit: type=1326 audit(1794704488.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 328.051632][ T37] audit: type=1326 audit(1794704488.093:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 328.098087][ T37] audit: type=1326 audit(1794704488.173:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 328.206544][ T37] audit: type=1326 audit(1794704488.323:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 328.206581][ T37] audit: type=1326 audit(1794704488.323:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.8.518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 329.597893][ T13] team0 (unregistering): Port device team_slave_1 removed [ 329.644619][ T13] team0 (unregistering): Port device team_slave_0 removed [ 330.636302][ T13] team0 (unregistering): Port device team_slave_1 removed [ 330.699835][ T13] team0 (unregistering): Port device team_slave_0 removed [ 331.037565][ T1197] IPVS: starting estimator thread 0... [ 331.075370][ T8132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.127348][ T8150] IPVS: using max 13 ests per chain, 31200 per kthread [ 331.150009][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.307910][ T8156] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 331.548511][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.584442][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.584599][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.953216][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.953302][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.276463][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.8.532'. [ 337.054939][ T8196] capability: warning: `syz.3.533' uses 32-bit capabilities (legacy support in use) [ 337.330695][ T4975] udevd[4975]: worker [7450] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 338.154496][ T8199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 338.560559][ T5952] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 338.696158][ T5952] usb 4-1: USB disconnect, device number 8 [ 340.760615][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.551976][ T7872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.649160][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.653100][ T7733] veth0_vlan: entered promiscuous mode [ 342.698335][ T7872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.729726][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.745877][ T7872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.811356][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.849582][ T7872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.947168][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.952220][ T7733] veth1_vlan: entered promiscuous mode [ 343.658414][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 343.658430][ T37] audit: type=1326 audit(1794704503.773:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 343.658462][ T37] audit: type=1326 audit(1794704503.773:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 343.662952][ T37] audit: type=1326 audit(1794704503.773:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 343.662988][ T37] audit: type=1326 audit(1794704503.773:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 343.663561][ T37] audit: type=1326 audit(1794704503.773:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 343.663591][ T37] audit: type=1326 audit(1794704503.773:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 343.841476][ T37] audit: type=1326 audit(1794704503.773:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.8.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 344.110173][ T8291] FAULT_INJECTION: forcing a failure. [ 344.110173][ T8291] name fail_futex, interval 1, probability 0, space 0, times 0 [ 344.110200][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.8.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.110216][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 344.110224][ T8291] Call Trace: [ 344.110230][ T8291] [ 344.110236][ T8291] dump_stack_lvl+0xe8/0x150 [ 344.110263][ T8291] should_fail_ex+0x447/0x5e0 [ 344.110286][ T8291] get_futex_key+0x1ab/0x1410 [ 344.110309][ T8291] ? __pfx_get_futex_key+0x10/0x10 [ 344.110325][ T8291] ? update_se+0x90/0xf90 [ 344.110346][ T8291] futex_wait_setup+0x4a/0x590 [ 344.110369][ T8291] ? __futex_wait+0xdd/0x480 [ 344.110391][ T8291] __futex_wait+0x177/0x480 [ 344.110408][ T8291] ? update_protect_slice+0x45/0x320 [ 344.110432][ T8291] ? __pfx___futex_wait+0x10/0x10 [ 344.110454][ T8291] ? __pfx_futex_wake_mark+0x10/0x10 [ 344.110476][ T8291] ? try_to_wake_up+0x7d1/0x1320 [ 344.110500][ T8291] futex_wait+0x121/0x390 [ 344.110520][ T8291] ? __pfx_futex_wait+0x10/0x10 [ 344.110549][ T8291] do_futex+0x3e7/0x4e0 [ 344.110569][ T8291] ? __pfx_do_futex+0x10/0x10 [ 344.110584][ T8291] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 344.110604][ T8291] __se_sys_futex+0x3a8/0x450 [ 344.110623][ T8291] ? ksys_write+0x248/0x270 [ 344.110645][ T8291] ? __pfx___se_sys_futex+0x10/0x10 [ 344.110661][ T8291] ? __pfx_ksys_write+0x10/0x10 [ 344.110677][ T8291] ? __x64_sys_futex+0x21/0xf0 [ 344.110695][ T8291] do_syscall_64+0x16a/0x530 [ 344.110712][ T8291] ? trace_irq_disable+0x3b/0x140 [ 344.110725][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.110739][ T8291] ? clear_bhb_loop+0x70/0xc0 [ 344.110756][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.110768][ T8291] RIP: 0033:0x7f1be15b94d9 [ 344.110781][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.110793][ T8291] RSP: 002b:00007f1bdf7fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.110810][ T8291] RAX: ffffffffffffffda RBX: 00007f1be1835fa8 RCX: 00007f1be15b94d9 [ 344.110820][ T8291] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1be1835fa8 [ 344.110828][ T8291] RBP: 00007f1be1835fa0 R08: 0000000000000000 R09: 0000000000000000 [ 344.110836][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.110844][ T8291] R13: 00007f1be1836038 R14: 00007ffeebc1c360 R15: 00007ffeebc1c448 [ 344.110864][ T8291] [ 344.825558][ T7903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 344.927488][ T7903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.998611][ T7733] veth0_macvtap: entered promiscuous mode [ 345.004209][ T7903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.051165][ T7903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.160234][ T7903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.192133][ T7903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.209275][ T7903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 345.250708][ T7903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.268375][ T7733] veth1_macvtap: entered promiscuous mode [ 345.452005][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.531954][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.743236][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.360608][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.641843][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.672596][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.739318][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.739336][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.821751][ T214] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.821867][ T214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.864571][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.264440][ T1780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.264459][ T1780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.606897][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.679879][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.679967][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.782108][ T214] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.782217][ T214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.823601][ T37] audit: type=1326 audit(1794704507.933:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.3.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79b9c94d9 code=0x7ffc0000 [ 347.840400][ T37] audit: type=1326 audit(1794704507.933:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.3.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79b9c94d9 code=0x7ffc0000 [ 347.878621][ T37] audit: type=1326 audit(1794704507.963:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.3.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc79b9c94d9 code=0x7ffc0000 [ 348.073174][ T71] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.318591][ T8327] FAULT_INJECTION: forcing a failure. [ 348.318591][ T8327] name fail_futex, interval 1, probability 0, space 0, times 0 [ 348.318617][ T8327] CPU: 0 UID: 0 PID: 8327 Comm: syz.3.555 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.318634][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 348.318642][ T8327] Call Trace: [ 348.318721][ T8327] [ 348.318752][ T8327] dump_stack_lvl+0xe8/0x150 [ 348.318860][ T8327] should_fail_ex+0x447/0x5e0 [ 348.318926][ T8327] get_futex_key+0x1ab/0x1410 [ 348.318969][ T8327] ? __pfx_get_futex_key+0x10/0x10 [ 348.319002][ T8327] ? update_se+0x90/0xf90 [ 348.319040][ T8327] futex_wait_setup+0x4a/0x590 [ 348.319063][ T8327] ? __futex_wait+0xdd/0x480 [ 348.319085][ T8327] __futex_wait+0x177/0x480 [ 348.319102][ T8327] ? update_protect_slice+0x45/0x320 [ 348.319125][ T8327] ? __pfx___futex_wait+0x10/0x10 [ 348.319147][ T8327] ? __pfx_futex_wake_mark+0x10/0x10 [ 348.319177][ T8327] ? try_to_wake_up+0x7d1/0x1320 [ 348.319200][ T8327] futex_wait+0x121/0x390 [ 348.319220][ T8327] ? __pfx_futex_wait+0x10/0x10 [ 348.319250][ T8327] do_futex+0x3e7/0x4e0 [ 348.319270][ T8327] ? __pfx_do_futex+0x10/0x10 [ 348.319285][ T8327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 348.319378][ T8327] __se_sys_futex+0x3a8/0x450 [ 348.319397][ T8327] ? ksys_write+0x248/0x270 [ 348.319430][ T8327] ? __pfx___se_sys_futex+0x10/0x10 [ 348.319447][ T8327] ? __pfx_ksys_write+0x10/0x10 [ 348.319463][ T8327] ? __x64_sys_futex+0x21/0xf0 [ 348.319481][ T8327] do_syscall_64+0x16a/0x530 [ 348.319530][ T8327] ? trace_irq_disable+0x3b/0x140 [ 348.319552][ T8327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.319582][ T8327] ? clear_bhb_loop+0x70/0xc0 [ 348.319598][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.319611][ T8327] RIP: 0033:0x7fc79b9c94d9 [ 348.319641][ T8327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.319652][ T8327] RSP: 002b:00007fc799c160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 348.319686][ T8327] RAX: ffffffffffffffda RBX: 00007fc79bc45fa8 RCX: 00007fc79b9c94d9 [ 348.319696][ T8327] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc79bc45fa8 [ 348.319705][ T8327] RBP: 00007fc79bc45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 348.319713][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.319721][ T8327] R13: 00007fc79bc46038 R14: 00007ffd349e1c30 R15: 00007ffd349e1d18 [ 348.319742][ T8327] [ 348.368767][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.408628][ T1284] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.410111][ T3363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.497857][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.559'. [ 350.518708][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.5.559'. [ 351.110694][ T8373] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 351.303135][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 351.303151][ T37] audit: type=1326 audit(1794704511.413:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.8.562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 351.303183][ T37] audit: type=1326 audit(1794704511.413:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.8.562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 351.376120][ T37] audit: type=1326 audit(1794704511.493:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.8.562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 351.376162][ T37] audit: type=1326 audit(1794704511.493:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.8.562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 351.376188][ T37] audit: type=1326 audit(1794704511.493:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.8.562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 351.474344][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.791463][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.031740][ T8388] FAULT_INJECTION: forcing a failure. [ 352.031740][ T8388] name fail_futex, interval 1, probability 0, space 0, times 0 [ 352.031768][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.8.564 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 352.031785][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 352.031794][ T8388] Call Trace: [ 352.031800][ T8388] [ 352.031806][ T8388] dump_stack_lvl+0xe8/0x150 [ 352.031834][ T8388] should_fail_ex+0x447/0x5e0 [ 352.031858][ T8388] get_futex_key+0x1ab/0x1410 [ 352.031880][ T8388] ? __pfx_get_futex_key+0x10/0x10 [ 352.031896][ T8388] ? update_se+0x90/0xf90 [ 352.031917][ T8388] futex_wait_setup+0x4a/0x590 [ 352.031940][ T8388] ? __futex_wait+0xdd/0x480 [ 352.031961][ T8388] __futex_wait+0x177/0x480 [ 352.031977][ T8388] ? update_protect_slice+0x45/0x320 [ 352.032001][ T8388] ? __pfx___futex_wait+0x10/0x10 [ 352.032022][ T8388] ? __pfx_futex_wake_mark+0x10/0x10 [ 352.032048][ T8388] ? try_to_wake_up+0x7d1/0x1320 [ 352.032072][ T8388] futex_wait+0x121/0x390 [ 352.032092][ T8388] ? __pfx_futex_wait+0x10/0x10 [ 352.032122][ T8388] do_futex+0x3e7/0x4e0 [ 352.032149][ T8388] ? __pfx_do_futex+0x10/0x10 [ 352.032164][ T8388] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.032185][ T8388] __se_sys_futex+0x3a8/0x450 [ 352.032204][ T8388] ? ksys_write+0x248/0x270 [ 352.032218][ T8388] ? __pfx___se_sys_futex+0x10/0x10 [ 352.032235][ T8388] ? __pfx_ksys_write+0x10/0x10 [ 352.032251][ T8388] ? __x64_sys_futex+0x21/0xf0 [ 352.032269][ T8388] do_syscall_64+0x16a/0x530 [ 352.032287][ T8388] ? trace_irq_disable+0x3b/0x140 [ 352.032300][ T8388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.032313][ T8388] ? clear_bhb_loop+0x70/0xc0 [ 352.032330][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.032343][ T8388] RIP: 0033:0x7f1be15b94d9 [ 352.032357][ T8388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.032368][ T8388] RSP: 002b:00007f1bdf7fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 352.032384][ T8388] RAX: ffffffffffffffda RBX: 00007f1be1835fa8 RCX: 00007f1be15b94d9 [ 352.032394][ T8388] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1be1835fa8 [ 352.032402][ T8388] RBP: 00007f1be1835fa0 R08: 0000000000000000 R09: 0000000000000000 [ 352.032411][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.032419][ T8388] R13: 00007f1be1836038 R14: 00007ffeebc1c360 R15: 00007ffeebc1c448 [ 352.032439][ T8388] [ 356.189663][ T7872] veth0_vlan: entered promiscuous mode [ 356.405410][ T7872] veth1_vlan: entered promiscuous mode [ 356.783682][ T7903] veth0_vlan: entered promiscuous mode [ 356.874496][ T7872] veth0_macvtap: entered promiscuous mode [ 356.967129][ T8435] 9pnet_virtio: no channels available for device 127.0.0.1 [ 356.999265][ T7903] veth1_vlan: entered promiscuous mode [ 357.056543][ T7872] veth1_macvtap: entered promiscuous mode [ 357.353735][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.484319][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.546434][ T7903] veth0_macvtap: entered promiscuous mode [ 357.618890][ T7903] veth1_macvtap: entered promiscuous mode [ 358.164174][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.278190][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.655383][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.655401][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.152736][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.152754][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.327731][ T8472] 9pnet_virtio: no channels available for device 127.0.0.1 [ 359.940195][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.940214][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.940389][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.944505][ T214] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.944805][ T214] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.496601][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.496934][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.497209][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.658492][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.658511][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.769240][ T1176] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.786536][ T214] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.147040][ T8522] 9pnet_virtio: no channels available for device 127.0.0.1 [ 363.152427][ T8522] FAULT_INJECTION: forcing a failure. [ 363.152427][ T8522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 363.152452][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.6.595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 363.152468][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 363.152476][ T8522] Call Trace: [ 363.152481][ T8522] [ 363.152487][ T8522] dump_stack_lvl+0xe8/0x150 [ 363.152517][ T8522] should_fail_ex+0x447/0x5e0 [ 363.152538][ T8522] get_futex_key+0xed2/0x1410 [ 363.152559][ T8522] ? __lock_acquire+0x747/0x2de0 [ 363.152579][ T8522] ? __pfx_get_futex_key+0x10/0x10 [ 363.152599][ T8522] futex_wake+0x119/0x600 [ 363.152622][ T8522] ? __pfx_futex_wake+0x10/0x10 [ 363.152638][ T8522] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.152664][ T8522] do_futex+0x458/0x4e0 [ 363.152683][ T8522] ? __pfx_do_futex+0x10/0x10 [ 363.152703][ T8522] ? __might_fault+0xaf/0x130 [ 363.152753][ T8522] mm_exit_exec_release+0x10d/0x290 [ 363.152786][ T8522] exit_mm+0x50/0x240 [ 363.152802][ T8522] do_exit+0x6a8/0x2360 [ 363.152815][ T8522] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 363.152837][ T8522] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 363.152854][ T8522] ? __pfx_do_exit+0x10/0x10 [ 363.152868][ T8522] ? reacquire_held_locks+0x117/0x1a0 [ 363.152881][ T8522] ? rt_spin_lock+0x1e2/0x400 [ 363.152900][ T8522] ? rt_spin_unlock+0x159/0x200 [ 363.152916][ T8522] do_group_exit+0x22d/0x2f0 [ 363.152930][ T8522] ? rt_spin_unlock+0x165/0x200 [ 363.152945][ T8522] get_signal+0x136a/0x1430 [ 363.152975][ T8522] arch_do_signal_or_restart+0xbb/0x860 [ 363.153001][ T8522] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 363.153026][ T8522] exit_to_user_mode_loop+0x10e/0x770 [ 363.153044][ T8522] ? rcu_is_watching+0x16/0xb0 [ 363.153066][ T8522] do_syscall_64+0x32c/0x530 [ 363.153084][ T8522] ? trace_irq_disable+0x3b/0x140 [ 363.153098][ T8522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.153111][ T8522] ? clear_bhb_loop+0x70/0xc0 [ 363.153127][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.153139][ T8522] RIP: 0033:0x7fb533d894d9 [ 363.153152][ T8522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.153164][ T8522] RSP: 002b:00007fb531fce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 363.153180][ T8522] RAX: fffffffffffffe00 RBX: 00007fb534005fa8 RCX: 00007fb533d894d9 [ 363.153189][ T8522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb534005fa8 [ 363.153197][ T8522] RBP: 00007fb534005fa0 R08: 0000000000000000 R09: 0000000000000000 [ 363.153205][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.153213][ T8522] R13: 00007fb534006038 R14: 00007ffc17f5c9c0 R15: 00007ffc17f5caa8 [ 363.153233][ T8522] [ 363.743808][ T8528] file system registered [ 364.166935][ T8539] tipc: Started in network mode [ 364.166959][ T8539] tipc: Node identity 1a0602da9df, cluster identity 4711 [ 364.167084][ T8539] tipc: Enabled bearer , priority 0 [ 364.614099][ T8539] tipc: Resetting bearer [ 364.685638][ T8535] tipc: Disabling bearer [ 364.963299][ T37] audit: type=1326 audit(1794704525.073:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 364.963395][ T37] audit: type=1326 audit(1794704525.073:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.021008][ T37] audit: type=1326 audit(1794704525.133:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.021057][ T37] audit: type=1326 audit(1794704525.133:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.021083][ T37] audit: type=1326 audit(1794704525.133:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.125861][ T37] audit: type=1326 audit(1794704525.243:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.125900][ T37] audit: type=1326 audit(1794704525.243:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.125927][ T37] audit: type=1326 audit(1794704525.243:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.7.603" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 365.445292][ T8559] capability: warning: `syz.5.599' uses deprecated v2 capabilities in a way that may be insecure [ 365.825525][ T1246] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 365.911915][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 365.989070][ T1246] usb 6-1: unable to get BOS descriptor or descriptor too short [ 365.989112][ T1246] usb 6-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 365.992867][ T1246] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.992886][ T1246] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.064734][ T1246] usb 6-1: string descriptor 0 read error: -22 [ 366.064830][ T1246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.492799][ T1246] usb 6-1: 0:1 : does not exist [ 366.492820][ T1246] usb 6-1: 0:2 : does not exist [ 366.493015][ T1246] usb 6-1: usbmixer: too many channels (65) in unit 6 [ 366.548420][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 372.637838][ T37] audit: type=1326 audit(1794704532.753:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.637876][ T37] audit: type=1326 audit(1794704532.753:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.713602][ T37] audit: type=1326 audit(1794704532.823:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.713642][ T37] audit: type=1326 audit(1794704532.823:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.713670][ T37] audit: type=1326 audit(1794704532.823:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.824194][ T37] audit: type=1326 audit(1794704532.933:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.824242][ T37] audit: type=1326 audit(1794704532.933:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.824268][ T37] audit: type=1326 audit(1794704532.933:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.7.616" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b78194d9 code=0x7ffc0000 [ 372.925699][ T8608] tipc: Started in network mode [ 372.925722][ T8608] tipc: Node identity 4ea1af3be2ef, cluster identity 4711 [ 372.925856][ T8608] tipc: Enabled bearer , priority 0 [ 373.059864][ T8608] tipc: Resetting bearer [ 373.235464][ T1246] usb 6-1: USB disconnect, device number 2 [ 373.711794][ T8606] tipc: Disabling bearer [ 375.398928][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.627'. [ 375.649854][ T37] audit: type=1326 audit(1794704535.763:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8661 comm="syz.8.629" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 375.649892][ T37] audit: type=1326 audit(1794704535.763:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8661 comm="syz.8.629" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 375.963058][ T8668] overlayfs: overlapping lowerdir path [ 379.315052][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.315106][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.957115][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 379.957142][ T37] audit: type=1326 audit(1794704540.073:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 379.957174][ T37] audit: type=1326 audit(1794704540.073:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.033342][ T37] audit: type=1326 audit(1794704540.143:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.033380][ T37] audit: type=1326 audit(1794704540.143:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.033406][ T37] audit: type=1326 audit(1794704540.143:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.074369][ T37] audit: type=1326 audit(1794704540.183:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.074407][ T37] audit: type=1326 audit(1794704540.183:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.074434][ T37] audit: type=1326 audit(1794704540.183:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.195267][ T37] audit: type=1326 audit(1794704540.303:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.195369][ T37] audit: type=1326 audit(1794704540.303:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.5.642" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 380.615234][ T2238] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 380.766035][ T2238] usb 8-1: New USB device found: idVendor=046d, idProduct=c09b, bcdDevice=0.00 [ 380.770347][ T2238] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.770371][ T2238] usb 8-1: config 0 interface 0 has no altsetting 0 [ 380.770393][ T2238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.803126][ T6578] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 380.871325][ T2238] usb 8-1: config 0 descriptor?? [ 380.978970][ T6578] usb 6-1: device descriptor read/64, error -71 [ 381.265169][ T6578] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 381.405184][ T6578] usb 6-1: device descriptor read/64, error -71 [ 381.516328][ T6578] usb usb6-port1: attempt power cycle [ 386.527701][ T2238] usbhid 8-1:0.0: can't add hid device: -32 [ 386.571301][ T2238] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 386.936841][ T10] usb 8-1: USB disconnect, device number 2 [ 387.224003][ T6578] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 387.427643][ T6578] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 387.543566][ T6578] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 387.567230][ T6578] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.567256][ T6578] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 387.567282][ T6578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.539057][ T6578] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 388.569637][ T6578] usb 6-1: USB disconnect, device number 6 [ 388.592625][ T8745] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 388.653505][ T6578] idmouse 6-1:1.0: disconnected [ 388.932213][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 388.932229][ T37] audit: type=1326 audit(1794704549.043:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.932260][ T37] audit: type=1326 audit(1794704549.043:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.995538][ T37] audit: type=1326 audit(1794704549.113:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.995574][ T37] audit: type=1326 audit(1794704549.113:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.995601][ T37] audit: type=1326 audit(1794704549.113:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.999186][ T37] audit: type=1326 audit(1794704549.113:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.999220][ T37] audit: type=1326 audit(1794704549.113:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 388.999245][ T37] audit: type=1326 audit(1794704549.113:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 389.003643][ T37] audit: type=1326 audit(1794704549.113:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 389.003677][ T37] audit: type=1326 audit(1794704549.113:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8748 comm="syz.8.653" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 389.856994][ T6578] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 389.985149][ T6578] usb 4-1: device descriptor read/64, error -71 [ 390.275074][ T6578] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 390.407472][ T6578] usb 4-1: device descriptor read/64, error -71 [ 390.515454][ T6578] usb usb4-port1: attempt power cycle [ 390.643094][ T107] IPVS: starting estimator thread 0... [ 390.727371][ T8784] IPVS: using max 13 ests per chain, 31200 per kthread [ 390.774188][ T8791] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 390.935005][ T6578] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 390.944947][ T8792] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 390.957189][ T6578] usb 4-1: device descriptor read/8, error -71 [ 391.195735][ T6578] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 391.256333][ T6578] usb 4-1: device descriptor read/8, error -71 [ 391.376490][ T6578] usb usb4-port1: unable to enumerate USB device [ 392.323632][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.674'. [ 392.396424][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.674'. [ 392.437866][ T8820] 9p: Bad value for 'trans' [ 392.789143][ T5611] Bluetooth: hci5: command 0x0405 tx timeout [ 393.091132][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.674'. [ 393.107654][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.674'. [ 393.111311][ T71] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.112035][ T71] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.189235][ T71] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.188980][ T71] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189016][ T71] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189039][ T71] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189063][ T71] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189086][ T71] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189109][ T71] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189132][ T71] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189155][ T71] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189177][ T71] netdevsim netdevsim2 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189200][ T71] netdevsim netdevsim2 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189223][ T71] netdevsim netdevsim2 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189245][ T71] netdevsim netdevsim2 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.189267][ T71] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.095750][ T5741] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 395.246246][ T5741] usb 8-1: New USB device found: idVendor=046d, idProduct=c09b, bcdDevice=0.00 [ 395.248424][ T5741] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.248447][ T5741] usb 8-1: config 0 interface 0 has no altsetting 0 [ 395.248470][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.321945][ T5741] usb 8-1: config 0 descriptor?? [ 395.756076][ T5741] usbhid 8-1:0.0: can't add hid device: -71 [ 395.756170][ T5741] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 395.818564][ T5741] usb 8-1: USB disconnect, device number 3 [ 396.118520][ T8858] 9p: Bad value for 'trans' [ 396.428289][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 396.428303][ T37] audit: type=1326 audit(1794704556.543:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.432721][ T37] audit: type=1326 audit(1794704556.543:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.495432][ T37] audit: type=1326 audit(1794704556.613:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.495480][ T37] audit: type=1326 audit(1794704556.613:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.495506][ T37] audit: type=1326 audit(1794704556.613:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.621506][ T37] audit: type=1326 audit(1794704556.733:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.621544][ T37] audit: type=1326 audit(1794704556.733:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 396.621570][ T37] audit: type=1326 audit(1794704556.733:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.5.689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 400.955287][ T8885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.210796][ T37] audit: type=1326 audit(1794704563.323:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.213425][ T37] audit: type=1326 audit(1794704563.323:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.275435][ T37] audit: type=1326 audit(1794704563.393:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.275472][ T37] audit: type=1326 audit(1794704563.393:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.275498][ T37] audit: type=1326 audit(1794704563.393:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.283470][ T37] audit: type=1326 audit(1794704563.393:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.283507][ T37] audit: type=1326 audit(1794704563.393:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.283533][ T37] audit: type=1326 audit(1794704563.393:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.449132][ T37] audit: type=1326 audit(1794704563.563:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 403.449169][ T37] audit: type=1326 audit(1794704563.563:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.5.701" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e35e894d9 code=0x7ffc0000 [ 412.949577][ T8995] comedi comedi0: Minor 3 could not be opened [ 413.197654][ T8998] overlayfs: missing 'lowerdir' [ 415.318756][ T9041] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 415.984626][ T9048] 9p: Could not find request transport: tc [ 417.188114][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 417.983594][ T9068] Bluetooth: MGMT ver 1.23 [ 427.396371][ T9135] FAULT_INJECTION: forcing a failure. [ 427.396371][ T9135] name fail_futex, interval 1, probability 0, space 0, times 0 [ 427.396398][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.3.759 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 427.396416][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 427.396424][ T9135] Call Trace: [ 427.396430][ T9135] [ 427.396437][ T9135] dump_stack_lvl+0xe8/0x150 [ 427.396475][ T9135] should_fail_ex+0x447/0x5e0 [ 427.396499][ T9135] get_futex_key+0x1ab/0x1410 [ 427.396528][ T9135] ? __pfx_get_futex_key+0x10/0x10 [ 427.396545][ T9135] ? update_se+0x90/0xf90 [ 427.396568][ T9135] futex_wait_setup+0x4a/0x590 [ 427.396591][ T9135] ? __futex_wait+0xdd/0x480 [ 427.396613][ T9135] __futex_wait+0x177/0x480 [ 427.396630][ T9135] ? update_protect_slice+0x45/0x320 [ 427.396654][ T9135] ? __pfx___futex_wait+0x10/0x10 [ 427.396675][ T9135] ? __pfx_futex_wake_mark+0x10/0x10 [ 427.396697][ T9135] ? try_to_wake_up+0x7d1/0x1320 [ 427.396721][ T9135] futex_wait+0x121/0x390 [ 427.396742][ T9135] ? __pfx_futex_wait+0x10/0x10 [ 427.396767][ T9135] ? __pfx_vsock_connect+0x10/0x10 [ 427.396872][ T9135] do_futex+0x3e7/0x4e0 [ 427.396892][ T9135] ? __pfx_do_futex+0x10/0x10 [ 427.396911][ T9135] ? __sys_connect+0x3b7/0x470 [ 427.396980][ T9135] __se_sys_futex+0x3a8/0x450 [ 427.397000][ T9135] ? __pfx___se_sys_futex+0x10/0x10 [ 427.397017][ T9135] ? rcu_is_watching+0x16/0xb0 [ 427.397037][ T9135] ? __x64_sys_futex+0x21/0xf0 [ 427.397055][ T9135] do_syscall_64+0x16a/0x530 [ 427.397075][ T9135] ? trace_irq_disable+0x3b/0x140 [ 427.397089][ T9135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.397105][ T9135] ? clear_bhb_loop+0x70/0xc0 [ 427.397121][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.397134][ T9135] RIP: 0033:0x7fc79b9c94d9 [ 427.397149][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.397161][ T9135] RSP: 002b:00007fc799c160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 427.397177][ T9135] RAX: ffffffffffffffda RBX: 00007fc79bc45fa8 RCX: 00007fc79b9c94d9 [ 427.397187][ T9135] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc79bc45fa8 [ 427.397195][ T9135] RBP: 00007fc79bc45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 427.397204][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.397211][ T9135] R13: 00007fc79bc46038 R14: 00007ffd349e1c30 R15: 00007ffd349e1d18 [ 427.397232][ T9135] [ 428.118582][ T9145] tipc: Enabling of bearer rejected, failed to enable media [ 428.180386][ T9150] overlay: Unknown parameter '/' [ 429.416228][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 429.667410][ T9158] mmap: syz.8.765 (9158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 430.105038][ T2238] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 430.285716][ T2238] usb 9-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=0.00 [ 430.318630][ T2238] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.318712][ T2238] usb 9-1: Product: syz [ 430.318722][ T2238] usb 9-1: Manufacturer: syz [ 430.318732][ T2238] usb 9-1: SerialNumber: syz [ 430.507245][ T2238] ums_eneub6250 9-1:1.0: USB Mass Storage device detected [ 430.601295][ T2238] scsi host1: usb-storage 9-1:1.0 [ 430.916049][ T9176] Bluetooth: MGMT ver 1.23 [ 432.203921][ T9178] overlayfs: missing 'lowerdir' [ 433.702549][ T9184] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 440.630626][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.630676][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.703054][ T9214] FAULT_INJECTION: forcing a failure. [ 440.703054][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 440.703082][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.8.775 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.703099][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 440.703107][ T9214] Call Trace: [ 440.703113][ T9214] [ 440.703119][ T9214] dump_stack_lvl+0xe8/0x150 [ 440.703148][ T9214] should_fail_ex+0x447/0x5e0 [ 440.703174][ T9214] should_failslab+0xa8/0x100 [ 440.703222][ T9214] __kmalloc_noprof+0xf6/0x790 [ 440.703248][ T9214] ? devlink_fmsg_put_value+0xb8/0x2e0 [ 440.703347][ T9214] ? devlink_fmsg_put_value+0xb8/0x2e0 [ 440.703371][ T9214] devlink_fmsg_put_value+0xb8/0x2e0 [ 440.703394][ T9214] devlink_fmsg_u32_put+0xfa/0x190 [ 440.703414][ T9214] ? __pfx_devlink_fmsg_u32_put+0x10/0x10 [ 440.703439][ T9214] ? devlink_fmsg_arr_pair_nest_start+0x104/0x1f0 [ 440.703467][ T9214] nsim_dev_dummy_fmsg_put+0x185/0x3f0 [ 440.703526][ T9214] ? __pfx_nsim_dev_dummy_reporter_dump+0x10/0x10 [ 440.703539][ T9214] devlink_health_do_dump+0x3c2/0x970 [ 440.703565][ T9214] devlink_health_report+0x314/0xb20 [ 440.703590][ T9214] nsim_dev_health_break_write+0x197/0x240 [ 440.703607][ T9214] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 440.703629][ T9214] full_proxy_write+0x127/0x1f0 [ 440.703674][ T9214] ? __pfx_full_proxy_write+0x10/0x10 [ 440.703693][ T9214] vfs_write+0x29f/0xbb0 [ 440.703713][ T9214] ? __pfx_vfs_write+0x10/0x10 [ 440.703727][ T9214] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 440.703750][ T9214] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 440.703774][ T9214] ? mutex_lock_nested+0x14d/0x1d0 [ 440.703788][ T9214] ? fdget_pos+0x11e/0x160 [ 440.703821][ T9214] ksys_write+0x156/0x270 [ 440.703835][ T9214] ? __pfx_ksys_write+0x10/0x10 [ 440.703856][ T9214] do_syscall_64+0x16a/0x530 [ 440.703873][ T9214] ? trace_irq_disable+0x3b/0x140 [ 440.703887][ T9214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.703900][ T9214] ? clear_bhb_loop+0x70/0xc0 [ 440.703917][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.703929][ T9214] RIP: 0033:0x7f1be15b94d9 [ 440.703943][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.703955][ T9214] RSP: 002b:00007f1bdf7fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.703971][ T9214] RAX: ffffffffffffffda RBX: 00007f1be1835fa0 RCX: 00007f1be15b94d9 [ 440.703981][ T9214] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000004 [ 440.703989][ T9214] RBP: 00007f1be164804e R08: 0000000000000000 R09: 0000000000000000 [ 440.703998][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.704005][ T9214] R13: 00007f1be1836038 R14: 00007f1be1835fa0 R15: 00007ffeebc1c448 [ 440.704027][ T9214] [ 441.127868][ T9220] overlay: Unknown parameter '/' [ 441.976092][ T9238] tipc: Enabling of bearer rejected, failed to enable media [ 443.700675][ T9253] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 444.356210][ T6578] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 444.595015][ T2238] ums_eneub6250 9-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 444.612371][ T2238] usb 9-1: USB disconnect, device number 7 [ 444.636737][ T6578] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 444.641576][ T6578] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 444.663407][ T6578] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 444.701067][ T6578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.701090][ T6578] usb 6-1: Product: syz [ 444.701100][ T6578] usb 6-1: Manufacturer: syz [ 444.701109][ T6578] usb 6-1: SerialNumber: syz [ 444.890386][ T6578] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 445.048644][ T6578] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 445.398483][ T6578] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 445.586543][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.594574][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.560889][ T9271] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.785'. [ 450.115008][ T9281] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 450.116343][ T9281] Bluetooth: ISO socket layer initialized [ 451.085001][ T9290] CIFS mount error: No usable UNC path provided in device string! [ 451.085001][ T9290] [ 451.085217][ T9290] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 451.461346][ T9263] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 451.655814][ T8151] usb 6-1: USB disconnect, device number 7 [ 451.942362][ T8151] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 452.040726][ T8151] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 452.066495][ T8151] ti_usb_3410_5052 6-1:2.0: device disconnected [ 452.934241][ T9318] tipc: Enabling of bearer rejected, failed to enable media [ 453.045919][ T9324] tipc: Enabled bearer , priority 10 [ 453.854280][ T9323] input: syz0 as /devices/virtual/input/input11 [ 455.854521][ T1246] tipc: Node number set to 2890837819 [ 456.471830][ T5615] Bluetooth: hci5: unexpected event for opcode 0x042e [ 458.306862][ T1246] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 458.461207][ T1246] usb 6-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=0.00 [ 458.462210][ T1246] usb 6-1: config 1 has an invalid interface number: 2 but max is 0 [ 458.462226][ T1246] usb 6-1: config 1 has no interface number 0 [ 458.462255][ T1246] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x2 has invalid maxpacket 33280, setting to 1024 [ 458.462271][ T1246] usb 6-1: config 1 interface 2 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 458.462286][ T1246] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.462301][ T1246] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 458.484962][ T1246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 458.484982][ T1246] usb 6-1: Product: syz [ 458.484992][ T1246] usb 6-1: Manufacturer: syz [ 459.139554][ T8151] usb 6-1: USB disconnect, device number 8 [ 459.550786][ T9377] syz.7.813 (9377) used greatest stack depth: 18088 bytes left [ 460.165004][ T6578] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 460.257832][ T9390] overlayfs: missing 'lowerdir' [ 460.317368][ T6578] usb 8-1: not running at top speed; connect to a high speed hub [ 460.317398][ T6578] usb 8-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 460.318525][ T6578] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 460.320401][ T6578] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.320425][ T6578] usb 8-1: Product: syz [ 460.320434][ T6578] usb 8-1: Manufacturer: syz [ 460.320443][ T6578] usb 8-1: SerialNumber: syz [ 460.522956][ T6578] oti6858 8-1:1.0: oti6858 converter detected [ 460.631388][ T6578] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 460.696575][ T6578] usb 8-1: USB disconnect, device number 4 [ 460.982936][ T6578] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 460.983543][ T6578] oti6858 8-1:1.0: device disconnected [ 461.156050][ T9403] tipc: Enabling of bearer rejected, failed to enable media [ 465.189107][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 465.189125][ T37] audit: type=1800 audit(1794704625.283:129): pid=9416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=appraise_data cause=missing-hash comm="syz.7.823" name="/lib/firmware/regulatory.db" dev="sda1" ino=448 res=0 errno=-61 [ 466.978883][ T9416] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 466.978969][ T9416] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 466.978984][ T9416] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 468.248790][ T9435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 468.498641][ T9443] overlayfs: missing 'lowerdir' [ 469.285137][ T8151] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 469.290872][ T9461] tipc: Enabling of bearer rejected, failed to enable media [ 469.453785][ T8151] usb 6-1: not running at top speed; connect to a high speed hub [ 469.453817][ T8151] usb 6-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 469.460708][ T8151] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 469.534426][ T8151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.534448][ T8151] usb 6-1: Product: syz [ 469.534458][ T8151] usb 6-1: Manufacturer: syz [ 469.534467][ T8151] usb 6-1: SerialNumber: syz [ 469.626300][ T8151] oti6858 6-1:1.0: oti6858 converter detected [ 469.644769][ T8151] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 469.881137][ T8151] usb 6-1: USB disconnect, device number 9 [ 469.943974][ T8151] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 469.967641][ T8151] oti6858 6-1:1.0: device disconnected [ 470.522418][ T9479] overlayfs: missing 'workdir' [ 471.581352][ T9517] Bluetooth: MGMT ver 1.23 [ 471.656670][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.851'. [ 472.475637][ T5741] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 472.645904][ T5741] usb 9-1: not running at top speed; connect to a high speed hub [ 472.645934][ T5741] usb 9-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 472.646928][ T5741] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 472.653651][ T5741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.653684][ T5741] usb 9-1: Product: syz [ 472.653694][ T5741] usb 9-1: Manufacturer: syz [ 472.653703][ T5741] usb 9-1: SerialNumber: syz [ 472.779010][ T5741] oti6858 9-1:1.0: oti6858 converter detected [ 472.869703][ T9531] overlayfs: missing 'workdir' [ 472.915666][ T5741] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 473.045447][ T5741] usb 9-1: USB disconnect, device number 8 [ 473.356555][ T5741] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 473.386124][ T5741] oti6858 9-1:1.0: device disconnected [ 473.665229][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 473.665281][ T5615] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 474.058272][ T9546] TCP: TCP_TX_DELAY enabled [ 474.091488][ T37] audit: type=1326 audit(1794704634.203:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.109073][ T37] audit: type=1326 audit(1794704634.203:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.109108][ T37] audit: type=1326 audit(1794704634.203:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.109135][ T37] audit: type=1326 audit(1794704634.223:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.109162][ T37] audit: type=1326 audit(1794704634.223:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.109187][ T37] audit: type=1326 audit(1794704634.223:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.257943][ T37] audit: type=1326 audit(1794704634.373:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.269036][ T37] audit: type=1326 audit(1794704634.383:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.269071][ T37] audit: type=1326 audit(1794704634.383:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.269097][ T37] audit: type=1326 audit(1794704634.383:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9543 comm="syz.8.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 474.410261][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.8.859'. [ 479.123845][ T9576] 9p: Bad value for 'port' [ 479.251993][ T9586] overlayfs: missing 'workdir' [ 480.609899][ T9609] IPVS: stopping master sync thread 8156 ... [ 480.733832][ T37] kauditd_printk_skb: 138 callbacks suppressed [ 480.733847][ T37] audit: type=1326 audit(1794704640.843:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.733881][ T37] audit: type=1326 audit(1794704640.843:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.734217][ T37] audit: type=1326 audit(1794704640.843:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.734246][ T37] audit: type=1326 audit(1794704640.843:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.844990][ T37] audit: type=1326 audit(1794704640.953:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.845028][ T37] audit: type=1326 audit(1794704640.953:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1be15b9242 code=0x7ffc0000 [ 480.845054][ T37] audit: type=1326 audit(1794704640.953:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1be15b92d7 code=0x7ffc0000 [ 480.846301][ T37] audit: type=1326 audit(1794704640.963:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.846333][ T37] audit: type=1326 audit(1794704640.963:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be15b94d9 code=0x7ffc0000 [ 480.847391][ T37] audit: type=1326 audit(1794704640.963:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1be15761d1 code=0x7ffc0000 [ 481.042018][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.8.875'. [ 481.355207][ T2238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 481.554952][ T2238] usb 4-1: Using ep0 maxpacket: 32 [ 481.556333][ T2238] usb 4-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 481.557306][ T2238] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 481.557327][ T2238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 481.557343][ T2238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 481.557357][ T2238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 481.557373][ T2238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 481.583783][ T2238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.583804][ T2238] usb 4-1: Product: syz [ 481.583814][ T2238] usb 4-1: Manufacturer: syz [ 481.583823][ T2238] usb 4-1: SerialNumber: syz [ 481.690873][ T2238] usb 4-1: config 0 descriptor?? [ 482.166301][ T2238] input input15: Device does not respond to id packet M [ 482.360169][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.360206][ T2238] input input15: Device does not respond to id packet P [ 482.360551][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.360579][ T2238] input input15: Device does not respond to id packet B [ 482.360890][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.360918][ T2238] input input15: Device does not respond to id packet N [ 482.361296][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.361623][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.361948][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.417794][ T2238] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 482.721700][ T2238] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 484.087053][ T9642] gtp0: entered allmulticast mode [ 484.166340][ T2238] usb 4-1: USB disconnect, device number 13 [ 487.474970][ T2238] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 487.558164][ T37] kauditd_printk_skb: 138 callbacks suppressed [ 487.558179][ T37] audit: type=1326 audit(1794704647.673:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.559590][ T37] audit: type=1326 audit(1794704647.673:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.627672][ T37] audit: type=1326 audit(1794704647.743:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.627707][ T37] audit: type=1326 audit(1794704647.743:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.627733][ T37] audit: type=1326 audit(1794704647.743:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.634982][ T2238] usb 6-1: Using ep0 maxpacket: 32 [ 487.635608][ T2238] usb 6-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 487.639849][ T2238] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 487.639878][ T2238] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 487.639910][ T2238] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 487.639927][ T2238] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 487.639943][ T2238] usb 6-1: config 0 interface 0 has no altsetting 0 [ 487.796139][ T37] audit: type=1326 audit(1794704647.913:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.797574][ T37] audit: type=1326 audit(1794704647.913:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb533d894d9 code=0x7ffc0000 [ 487.876859][ T2238] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 487.876881][ T2238] usb 6-1: Product: syz [ 487.876891][ T2238] usb 6-1: Manufacturer: syz [ 487.876900][ T2238] usb 6-1: SerialNumber: syz [ 487.937837][ T2238] usb 6-1: config 0 descriptor?? [ 487.962906][ T2238] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 488.021681][ T2238] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 488.187573][ T9659] netlink: 'syz.5.893': attribute type 1 has an invalid length. [ 488.281077][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.893'. [ 488.875473][ T6578] usb 6-1: USB disconnect, device number 10 [ 488.875564][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 488.972109][ T6578] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 492.189324][ T5615] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 493.369753][ T9699] syzkaller1: entered promiscuous mode [ 493.369775][ T9699] syzkaller1: entered allmulticast mode [ 493.386094][ T9699] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 493.483342][ T9701] FAULT_INJECTION: forcing a failure. [ 493.483342][ T9701] name failslab, interval 1, probability 0, space 0, times 0 [ 493.483369][ T9701] CPU: 0 UID: 0 PID: 9701 Comm: syz.6.906 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 493.483388][ T9701] Tainted: [L]=SOFTLOCKUP [ 493.483394][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 493.483402][ T9701] Call Trace: [ 493.483407][ T9701] [ 493.483413][ T9701] dump_stack_lvl+0xe8/0x150 [ 493.483440][ T9701] should_fail_ex+0x447/0x5e0 [ 493.483463][ T9701] should_failslab+0xa8/0x100 [ 493.483481][ T9701] __kmalloc_noprof+0xf6/0x790 [ 493.483494][ T9701] ? __memcg_list_lru_alloc+0x211/0x830 [ 493.483510][ T9701] ? __memcg_list_lru_alloc+0x211/0x830 [ 493.483528][ T9701] __memcg_list_lru_alloc+0x211/0x830 [ 493.483545][ T9701] ? xa_load+0x60/0x210 [ 493.483559][ T9701] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 493.483583][ T9701] __memcg_slab_post_alloc_hook+0x41b/0xe00 [ 493.483599][ T9701] ? __memcg_slab_post_alloc_hook+0x25f/0xe00 [ 493.483620][ T9701] ? dax_alloc_inode+0x2a/0x90 [ 493.483747][ T9701] kmem_cache_alloc_lru_noprof+0x417/0x680 [ 493.483768][ T9701] ? dax_alloc_inode+0x2a/0x90 [ 493.483780][ T9701] ? dax_alloc_inode+0x2a/0x90 [ 493.483795][ T9701] ? __pfx_dax_alloc_inode+0x10/0x10 [ 493.483808][ T9701] dax_alloc_inode+0x2a/0x90 [ 493.483820][ T9701] alloc_inode+0x6a/0x1b0 [ 493.483836][ T9701] ? __pfx_dax_test+0x10/0x10 [ 493.483872][ T9701] ? __pfx_dax_set+0x10/0x10 [ 493.483883][ T9701] iget5_locked+0x4a/0xa0 [ 493.483903][ T9701] alloc_dax+0x11c/0x350 [ 493.483921][ T9701] ? __pfx_sprintf+0x10/0x10 [ 493.483957][ T9701] ? __pfx_alloc_dax+0x10/0x10 [ 493.483989][ T9701] dm_create+0xa9e/0xf80 [ 493.484068][ T9701] dev_create+0x1f7/0x400 [ 493.484121][ T9701] ? __pfx_dev_create+0x10/0x10 [ 493.484150][ T9701] dm_ctl_ioctl+0x9ec/0xe10 [ 493.484176][ T9701] ? __pfx_dev_create+0x10/0x10 [ 493.484191][ T9701] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 493.484225][ T9701] ? __fget_files+0x2a/0x420 [ 493.484247][ T9701] ? bpf_lsm_file_ioctl+0x9/0x20 [ 493.484279][ T9701] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 493.484295][ T9701] __se_sys_ioctl+0xff/0x170 [ 493.484310][ T9701] do_syscall_64+0x16a/0x530 [ 493.484328][ T9701] ? trace_irq_disable+0x3b/0x140 [ 493.484341][ T9701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.484354][ T9701] ? clear_bhb_loop+0x70/0xc0 [ 493.484370][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.484382][ T9701] RIP: 0033:0x7fb533d894d9 [ 493.484397][ T9701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.484409][ T9701] RSP: 002b:00007fb531fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.484425][ T9701] RAX: ffffffffffffffda RBX: 00007fb534005fa0 RCX: 00007fb533d894d9 [ 493.484435][ T9701] RDX: 0000200000002340 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 493.484443][ T9701] RBP: 00007fb533e1804e R08: 0000000000000000 R09: 0000000000000000 [ 493.484451][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.484459][ T9701] R13: 00007fb534006038 R14: 00007fb534005fa0 R15: 00007ffc17f5caa8 [ 493.484480][ T9701] [ 498.330932][ T9722] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.331053][ T9722] block device autoloading is deprecated and will be removed. [ 500.272094][ T9748] [ 500.274492][ T9748] ====================================================== [ 500.281509][ T9748] WARNING: possible circular locking dependency detected [ 500.288601][ T9748] syzkaller #0 Tainted: G L [ 500.294568][ T9748] ------------------------------------------------------ [ 500.301660][ T9748] syz.8.918/9748 is trying to acquire lock: [ 500.307551][ T9748] ffffffff8fed1400 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950 [ 500.316937][ T9748] [ 500.316937][ T9748] but task is already holding lock: [ 500.324288][ T9748] ffff88806d95acb8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xf8/0x700 [ 500.333986][ T9748] [ 500.333986][ T9748] which lock already depends on the new lock. [ 500.333986][ T9748] [ 500.344825][ T9748] [ 500.344825][ T9748] the existing dependency chain (in reverse order) is: [ 500.353841][ T9748] [ 500.353841][ T9748] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 500.362583][ T9748] down_write+0x35/0x50 [ 500.367284][ T9748] configfs_depend_item_unlocked+0x153/0x420 [ 500.373779][ T9748] usbg_make_tpg+0x1e0/0x550 [ 500.378978][ T9748] target_fabric_make_tpg+0xa8/0x6d0 [ 500.384812][ T9748] configfs_mkdir+0x4f6/0x9e0 [ 500.390019][ T9748] vfs_mkdir+0x417/0x670 [ 500.394772][ T9748] filename_mkdirat+0x288/0x560 [ 500.400132][ T9748] __se_sys_mkdirat+0x35/0x150 [ 500.405414][ T9748] do_syscall_64+0x16a/0x530 [ 500.410518][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.416924][ T9748] [ 500.416924][ T9748] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 500.424999][ T9748] mutex_lock_nested+0x55/0x1d0 [ 500.430359][ T9748] usbg_make_tpg+0xf8/0x550 [ 500.435380][ T9748] target_fabric_make_tpg+0xa8/0x6d0 [ 500.441173][ T9748] configfs_mkdir+0x4f6/0x9e0 [ 500.446363][ T9748] vfs_mkdir+0x417/0x670 [ 500.451132][ T9748] filename_mkdirat+0x288/0x560 [ 500.456512][ T9748] __se_sys_mkdirat+0x35/0x150 [ 500.461787][ T9748] do_syscall_64+0x16a/0x530 [ 500.466892][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.473296][ T9748] [ 500.473296][ T9748] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 500.481103][ T9748] __lock_acquire+0x164c/0x2de0 [ 500.486471][ T9748] lock_acquire+0x115/0x350 [ 500.491503][ T9748] mutex_lock_nested+0x55/0x1d0 [ 500.496865][ T9748] configfs_rmdir+0x5f0/0x950 [ 500.502055][ T9748] vfs_rmdir+0x3e9/0x700 [ 500.506808][ T9748] filename_rmdir+0x276/0x510 [ 500.512001][ T9748] __se_sys_rmdir+0x2e/0x140 [ 500.517102][ T9748] do_syscall_64+0x16a/0x530 [ 500.522219][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.528633][ T9748] [ 500.528633][ T9748] other info that might help us debug this: [ 500.528633][ T9748] [ 500.538865][ T9748] Chain exists of: [ 500.538865][ T9748] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 500.538865][ T9748] [ 500.553368][ T9748] Possible unsafe locking scenario: [ 500.553368][ T9748] [ 500.560880][ T9748] CPU0 CPU1 [ 500.566233][ T9748] ---- ---- [ 500.571623][ T9748] lock(&sb->s_type->i_mutex_key#27); [ 500.577076][ T9748] lock(tpg_instances_lock); [ 500.584261][ T9748] lock(&sb->s_type->i_mutex_key#27); [ 500.592231][ T9748] lock(&subsys->su_mutex); [ 500.596810][ T9748] [ 500.596810][ T9748] *** DEADLOCK *** [ 500.596810][ T9748] [ 500.604938][ T9748] locks held by syz.8.918/9748: 3, on CPU#0: [ 500.610950][ T9748] #0: ffff88801ef16528 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 500.620179][ T9748] #1: ffff888024444258 (&default_group_class[depth - 1]#7/1){+.+.}-{4:4}, at: filename_rmdir+0x1c4/0x510 [ 500.631479][ T9748] #2: ffff88806d95acb8 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xf8/0x700 [ 500.641565][ T9748] [ 500.641565][ T9748] stack backtrace: [ 500.647448][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.8.918 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.658729][ T9748] Tainted: [L]=SOFTLOCKUP [ 500.663055][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 500.673097][ T9748] Call Trace: [ 500.676369][ T9748] [ 500.679293][ T9748] dump_stack_lvl+0xe8/0x150 [ 500.684073][ T9748] print_circular_bug+0x2e2/0x300 [ 500.689094][ T9748] check_noncircular+0x12f/0x150 [ 500.694038][ T9748] __lock_acquire+0x164c/0x2de0 [ 500.698918][ T9748] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.704737][ T9748] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 500.710544][ T9748] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 500.715949][ T9748] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.721814][ T9748] lock_acquire+0x115/0x350 [ 500.726345][ T9748] ? configfs_rmdir+0x5f0/0x950 [ 500.731207][ T9748] ? configfs_rmdir+0x5f0/0x950 [ 500.736055][ T9748] ? configfs_rmdir+0x5f0/0x950 [ 500.740914][ T9748] mutex_lock_nested+0x55/0x1d0 [ 500.745756][ T9748] ? configfs_rmdir+0x5f0/0x950 [ 500.750623][ T9748] ? fast_dput+0x481/0x690 [ 500.755037][ T9748] configfs_rmdir+0x5f0/0x950 [ 500.759727][ T9748] vfs_rmdir+0x3e9/0x700 [ 500.763976][ T9748] ? bpf_lsm_path_rmdir+0x9/0x20 [ 500.768924][ T9748] filename_rmdir+0x276/0x510 [ 500.773609][ T9748] ? __pfx_filename_rmdir+0x10/0x10 [ 500.778803][ T9748] ? do_getname+0x151/0x250 [ 500.783301][ T9748] __se_sys_rmdir+0x2e/0x140 [ 500.787892][ T9748] do_syscall_64+0x16a/0x530 [ 500.792476][ T9748] ? trace_irq_disable+0x3b/0x140 [ 500.797511][ T9748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.803574][ T9748] ? clear_bhb_loop+0x70/0xc0 [ 500.808244][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.814128][ T9748] RIP: 0033:0x7f1be15b94d9 [ 500.818537][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.838221][ T9748] RSP: 002b:00007f1bdf7dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 500.846643][ T9748] RAX: ffffffffffffffda RBX: 00007f1be1836090 RCX: 00007f1be15b94d9 [ 500.854621][ T9748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 500.862581][ T9748] RBP: 00007f1be164804e R08: 0000000000000000 R09: 0000000000000000 [ 500.870717][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.878678][ T9748] R13: 00007f1be1836128 R14: 00007f1be1836090 R15: 00007ffeebc1c448 [ 500.886645][ T9748] [ 502.068344][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.068380][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.461030][ T9725] Set syz0 is full, maxelem 65536 reached